Awesome Testing

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

A modern load testing tool, using Go and JavaScript

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

record and replay the web

Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.

The ZAP by Checkmarx Core project

Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes

Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.

A tool for mocking HTTP services

A collection of public resources about how software companies test their software

Bash Automated Testing System

MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.

Educational resources to learn to program (Foundation in Web Development)

QA Wolf from anywhere — your terminal, your CI, your AI agent.

My own notes (drafts mostly) about software quality

Headless Chrome Ruby API

TestLink Open Source Test & Requirement Management System

The Declarative Data Generator

open source test management system with over 2 million downloads!

Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.

Self-hosted iOS & Android simulator streaming for the whole team

Open-source self-improving QA agent for software teams. A test harness with memory. Write tests in natural language for web and mobile. agent-qa learns from every run, adapts to UI changes, and catches regressions before you ship.

BDD testing with Playwright runner

Free, open-source AWS emulator. LocalStack alternative: 106 services, 7,551 operations, true 100% Smithy conformance (249,449/249,449 variants pass). No account, no auth token, no paid tier.

DeepfakeHTTP is a web server that uses HTTP dumps as a source for responses.

Continuous Regression Testing for Engineering Teams

AI-powered E2E testing for 10 platforms. 253 MCP tools. Zero config. Works with Claude, Cursor, Windsurf, Copilot. Test Flutter, React Native, iOS, Android, Web, Electron, Tauri, KMP, .NET MAUI — all from natural language.

OrcaReplay — Time travel for AI agents. Record, replay, fork, and debug any agent run with any model. Built by the OrcaRouter.ai team.

recheck for web apps – change comparison tool with local Golden Masters, Git-like ignore syntax and "Unbreakable Selenium" tests.

Hardware testing for the software world. Real or virtual, local or remote, human, automated or agentic.

High-performance, multi-protocol mock server. HTTP, WebSocket, gRPC, MQTT, SSE, GraphQL, SOAP in one binary.

Discover, mask, and verify sensitive data in SQL databases — an auditable scan → mask → validate workflow for safe database copies.

🤖 Repeat tests. Repeat tests. Repeat tests.

Model-driven synthetic test data for CI/CD and analytics - deterministic, privacy-preserving, and domain-aware. Includes Python APIs, XML pipelines, and MCP/IDE integration to orchestrate realistic datasets for finance, healthcare, and other regulated environments.

An agent-native QA CLI for web pages. Deterministic, no tests to write, no LLM.

Intent as Code | the workflow language for AI. One file, 4 verbs, one Rust binary. Local-first, any model, AGPL-3.0. 🦋

Locust Kubernetes operator: run distributed Locust load tests on Kubernetes with a LocustTest CRD. Helm chart, OpenTelemetry, OpenShift support.

🦏 | Best in class Microservice automation testing. Test Driven Happiness

Visual testing for React Native. Catch visual regressions on iOS and Android simulators in the cloud, before they ship.

The open archive of how AI agents actually work. A versioned, verifiable archive of system prompts, developer instructions, tool schemas and agent harnesses powering today's AI products. Captured with OrcaReplay.

Optics Framework is a powerful, extensible no code test automation framework designed for vision powered, data-driven testing and production app synthetic monitoring.

Visually Validate Playwright Tests Without Flaky Selectors

Interview Test using a To Do List

Test harness for voice agents. Import from Retell, VAPI, Bland, LiveKit. Run autonomous simulations. Evaluate with LLM judges.

AI-Drived end-to-end test platform

The Swagger Coverage Tool is designed to measure API test coverage based on Swagger documentation. It provides automated tracking and reporting of test coverage for APIs, helping ensure that your endpoints and services are well-tested.

Enterprise-grade platform to generate and execute Cypress, Playwright, WebdriverIO, and Appium end-to-end tests from natural language requirements. (Appium is experimental and requires external mobile infrastructure.)