Search awesome repositories

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

A modern load testing tool, using Go and JavaScript

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

record and replay the web

Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.

The ZAP by Checkmarx Core project

Capture Screen, Audio, Cursor, Mouse Clicks and Keystrokes

Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.

A tool for mocking HTTP services

A collection of public resources about how software companies test their software

Bash Automated Testing System

MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.

Educational resources to learn to program (Foundation in Web Development)

QA Wolf from anywhere — your terminal, your CI, your AI agent.

My own notes (drafts mostly) about software quality

Headless Chrome Ruby API

TestLink Open Source Test & Requirement Management System

The Declarative Data Generator

open source test management system with over 2 million downloads!

Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.

Self-hosted iOS & Android simulator streaming for the whole team

Open-source self-improving QA agent for software teams. A test harness with memory. Write tests in natural language for web and mobile. agent-qa learns from every run, adapts to UI changes, and catches regressions before you ship.

BDD testing with Playwright runner

Free, open-source AWS emulator. LocalStack alternative: 106 services, 7,551 operations, true 100% Smithy conformance (249,449/249,449 variants pass). No account, no auth token, no paid tier.

DeepfakeHTTP is a web server that uses HTTP dumps as a source for responses.

Continuous Regression Testing for Engineering Teams

AI-powered E2E testing for 10 platforms. 253 MCP tools. Zero config. Works with Claude, Cursor, Windsurf, Copilot. Test Flutter, React Native, iOS, Android, Web, Electron, Tauri, KMP, .NET MAUI — all from natural language.