Alternatives to Etheno
Compare Etheno alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Etheno in 2026. Compare features, ratings, user reviews, pricing, and more from Etheno competitors and alternatives in order to make an informed decision for your business.
-
1
Anyblock
Anyblock Analytics
Anyblock’s Software-as-a-Service (SaaS) provides Blockchain JSON-RPC Access for Bitcoin, Ethereum & more. We use a fast and reliable blockchain API, query time is usually less than 100 ms. Load-balanced with multiple nodes. Parity/OpenEthereum & Besu clients for Ethereum. Amazing support. Quick and personal responses. Technical advice with code samples. Extensive documentation: API, tutorials, FAQs, ...Starting Price: €199/month -
2
Echidna
Crytic
Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smart contracts. It uses sophisticated grammar-based fuzzing campaigns based on a contract ABI to falsify user-defined predicates or Solidity assertions. We designed Echidna with modularity in mind, so it can be easily extended to include new mutations or test specific contracts in specific cases. Generates inputs tailored to your actual code. Optional corpus collection, mutation and coverage guidance to find deeper bugs. Powered by Slither to extract useful information before the fuzzing campaign. Source code integration to identify which lines are covered after the fuzzing campaign. Interactive terminal UI, text-only or JSON output. Automatic test case minimization for quick triage. Seamless integration into the development workflow. Maximum gas usage reporting of the fuzzing campaign. Support for a complex contract initialization with Etheno and Truffle.Starting Price: Free -
3
hevm
DappHub
The hevm project is an implementation of the Ethereum Virtual Machine (EVM) made specifically for symbolic execution, unit testing, and debugging of smart contracts. It is developed by DappHub and integrates especially well with the DappHub tool suite. The hevm command line program can symbolically execute smart contracts, run unit tests, interactively debug contracts while showing the Solidity source, or run arbitrary EVM code. Computations can be performed using a local state set up in a testing harness or fetched on demand from live networks using RPC calls. Run a symbolic execution against the given parameters, searching for assertion violations. One can also specialize specific arguments to a function signature while leaving others abstract. hevm uses an eager approach for symbolic execution, meaning that it will first attempt to explore all branches of the program.Starting Price: Free -
4
Solidity Fuzzing Boilerplate
patrickd
Solidity Fuzzing Boilerplate is a template repository intended to ease fuzzing components of Solidity projects, especially libraries. Write tests once and run them with both Echidna and Foundry's fuzzing. Fuzz components that use incompatible Solidity versions by deploying those into a Ganache instance via Etheno. Use HEVM's FFI cheat code to generate complex fuzzing inputs or to compare outputs with non-EVM executables while doing differential fuzzing. Publish your fuzzing experiments without worrying about licensing by extending the shell script to download specific files. Turn off FFI if you don't intend to make use of shell commands from your Solidity contracts. Note that FFI is slow and should only be used as a workaround. It can be useful for testing against things that are difficult to implement within Solidity and already exist in other languages. Before executing tests of a project that has FFI enabled, be sure to check what commands are actually being executed.Starting Price: Free -
5
Tayt
Crytic
Tayt is a StarkNet smart contract fuzzer. We recommend using a Python virtual environment. When starting you will see the properties to be checked and the external functions used to generate a sequence of transactions. Eventually, if a property is violated a call sequence will be presented with the order of functions to be called, the respective arguments passed, the caller address, and the events emitted. With Tayt, you can test a contract that deploys other contracts.Starting Price: Free -
6
APIFuzzer
PyPI
APIFuzzer reads your API description and step-by-step fuzzes the fields to validate if your application can cope with the fuzzed parameters, and it does not require coding. Parse API definition from a local file or remote URL. JSON and YAML file format support. All HTTP methods are supported. Fuzzing of the request body, query string, path parameter, and request header is supported. Relies on random mutations and supports CI integration. Generate JUnit XML test report format. Send a request to an alternative URL. Support HTTP basic auth from the configuration. Save the report of the failed test in JSON format into the pre-configured folder.Starting Price: Free -
7
Sulley
OpenRCE
Sulley is a fuzzing engine and fuzz testing framework consisting of multiple extensible components. Sulley (IMHO) exceeds the capabilities of most previously published fuzzing technologies, commercial and public domain. The goal of the framework is to simplify not only data representation but to simplify data transmission and instrumentation. A pure-Python fully automated and unattended fuzzing framework. Sulley not only has impressive data generation but has taken this a step further and includes many other important aspects a modern fuzzer should provide. Sulley watches the network and methodically maintains records. Sulley instruments and monitors the health of the target, capable of reverting to a known good state using multiple methods. Sulley detects, tracks, and categorizes detected faults. Sulley can fuzz in parallel, significantly increasing test speed. Sulley can automatically determine what unique sequence of test cases triggers faults.Starting Price: Free -
8
Moonriver
Moonbeam Network
Moonriver is a companion network to Moonbeam and provides a permanently incentivized canary network. New code ships to Moonriver first, where it can be tested and verified under real economic conditions. Once proven, the same code ships to Moonbeam on Polkadot. Quickly deploy your new or existing Solidity DApps to the Moonriver parachain — with little or no modifications — and gain easy access to the Kusama network. By mirroring Ethereum’s Web3 RPC, accounts, keys, subscriptions, logs, and more, Moonriver minimizes the changes required to run existing Solidity smart contracts on the network. Ethereum projects can simply replicate their DApp and deploy it to Moonbeam using Hardhat, Truffle, Remix, and other popular deployment tools. Quickly deploy your new or existing Solidity DApps to the Moonriver parachain — with little or no modifications — and gain easy access to the Kusama network. -
9
Ffuf
Ffuf
Ffuf is a fast web fuzzer written in Go. You can also practice your Ffuf scans against a live host with different lessons and use cases either locally by using the Docker container or against the live-hosted version. Provides virtual host discovery (without DNS records). In order to tell Ffuf about different inputs to test out, a wordlist is needed. You can supply one or more wordlists on the command line, and in case you wish (or are using multiple wordlists) you can choose a custom keyword for them. You can supply Ffuf with multiple wordlists (remember to configure a custom keyword for them though). The first word of the first wordlist is tested against all the words from the second wordlist before moving along to test the second word in the first wordlist against all the words in the second wordlist. In short, all of the different combinations are tried out. There are quite a few different ways to customize the request.Starting Price: Free -
10
CI Fuzz
Code Intelligence
CI Fuzz ensures robust and secure code with test coverage up to 100%. Use CI Fuzz from the command line or in the IDE of choice to generate thousands of test cases automatically. CI Fuzz analyzes code as it runs, just like a unit test, but with AI support to efficiently cover all paths through the code. Uncover real bugs in real-time and say goodbye to theoretical issues and false positives. Find real issues with all the information needed to quickly reproduce and fix them. Test your code with maximum code coverage and automatically detect typical security-relevant bugs like injections and remote code executions automatically in one go. Get fully covered to deliver the highest quality software. Conduct real-time code analysis with CI Fuzz. Take unit tests to the next level. It employs AI for comprehensive code path coverage and the automatic generation of thousands of test cases. Maximize pipeline performance that doesn't compromise software integrity.Starting Price: €30 per month -
11
Mayhem Code Security
Mayhem
Thousands of autonomously generated tests run every minute to pinpoint vulnerabilities and guide rapid remediation. Mayhem takes the guesswork out of untested code by autonomously generating test suites that produce actionable results. No need to recompile the code, since Mayhem works with dockerized images. Self-learning ML continually runs thousands of tests per second probing for crashes and defects, so developers can focus on features. Continuous testing runs in the background to surface new defects and increase code coverage. Mayhem delivers a copy/paste reproduction and backtrace for every defect, then prioritizes them based on your risk. See all the results, duplicated and prioritized by what you need to fix now. Mayhem fits into your existing build pipeline and development tools, putting actionable results at your developers' fingertips. No matter what language or tools your team uses. -
12
Fuzzbuzz
Fuzzbuzz
The Fuzzbuzz workflow is very similar to other CI/CD testing workflows. However, unlike other testing workflows, fuzz testing requires multiple jobs to run simultaneously, which results in a few extra steps. Fuzzbuzz is a fuzz testing platform. We make it trivial for developers to add fuzz tests to their code and run them in CI/CD, helping them catch critical bugs and vulnerabilities before they hit production. Fuzzbuzz completely integrates into your environment, following you from the terminal to CI/CD. Write a fuzz test in your environment and use your own IDE, terminal, or build tools. Push to CI/CD and Fuzzbuzz will automatically start running your fuzz tests against your latest code changes. Get notified when bugs are found through Slack, GitHub, or email. Catch regressions as new changes are automatically tested and compared to previous runs. Code is built and instrumented by Fuzzbuzz as soon as a change is detected.Starting Price: Free -
13
beSTORM
Beyond Security (Fortra)
Discover code weaknesses and certify the security strength of any product without access to source code. Test any protocol or hardware with beSTORM, even those used in IoT, process control, CANbus compatible automotive and aerospace. Realtime fuzzing, doesn’t need access to the source code, no cases to download. One platform, one GUI to learn, with over 250+ prebuilt protocol testing modules and the ability to add custom and proprietary ones. Find the security weaknesses before deployment that are most often discovered by external actors after release. Certify vendor components and your own applications in your own testing center. Self-learning software module and propriety software testing. Customization and scalability for any business sizes up or down. Automatically generate and deliver near-infinite attack vectors and document any product failures. Record every pass/fail and hand engineering the exact command that produced each fail.Starting Price: $50,000.00/one-time -
14
RaptorXML Server
Altova
In today’s organizations, Big Data trends and XBRL mandates are producing huge, ever increasing amounts of XML, XBRL, JSON, and Avro data. Now, there is finally a modern, hyper-fast engine to validate, process, transform, and query it all. RaptorXML provides strict conformance with all relevant XML, XBRL, and JSON standards and is continuously submitted to rigorous regression and conformance testing against Altova’s substantial in-house collection of conformance and test suites, as well as industry test suites and customer use-cases. JSON popularity is ever rising, and alongside it the requirement to ensure validity of transacted data. RaptorXML has you covered with JSON syntax checking, JSON validation, JSON Schema validation.Starting Price: €400 one-time payment -
15
SOAPSonar
Crosscheck Networks
Validate the functional behavior of APIs with client input simulations. Success criteria rules provide validation and regression testing of API behavior. Tests can be run on-demand or automated. Supports latest OpenAPI standards for automatically parsing OpenAPI documents and building test cases for all of the defined operations. Test authentication schemes including OAuth, SAML, PKI, Basic Auth, Amazon Auth, and Kerberos. Verify SSO tokens and cookies. Create behavior baselines and run regression tests to determine if any breakage or change of behavior occurs. Includes JSON and XML Diff capability. Test encryption and decryption of JSON, XML, REST, and SOAP message patterns. Simulate load from multiple virtual clients to measure and validate the performance criteria of the target APIs. Dynamic security and identity provide real world simulated inputs. Built-in support for AWSv4 signatures to authenticate to and test Amazon AWS APIs.Starting Price: $80/month -
16
Mayhem
ForAllSecure
Advanced fuzzing solution that combines guided fuzzing with symbolic execution, a patented technology from CMU. Mayhem is an advanced fuzz testing solution that dramatically reduces manual testing efforts with autonomous defect detection and validation. Deliver safe, secure, reliable software with less time, cost, and effort. Mayhem’s unique advantage is in its ability to acquire intelligence of its targets over time. As Mayhem’s knowledge grows, it deepens its analysis and maximizes its code coverage. All reported vulnerabilities are exploitable, confirmed risks. Mayhem guides remediation efforts with in-depth system level information, such as backtraces, memory logs, and register state, expediting issue diagnosis and fixes. Mayhem utilizes target feedback to custom generate test cases on the fly -- meaning no manual test case generation required. Mayhem offers access to all of its test cases to make regression testing effortless and continuous. -
17
afl-unicorn
Battelle
afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine. If you can emulate the code you’re interested in using the Unicorn Engine, you can fuzz it with afl-unicorn. Unicorn Mode works by implementing the block-edge instrumentation that AFL’s QEMU mode normally does into Unicorn Engine. Basically, AFL will use block coverage information from any emulated code snippet to drive its input generation. The whole idea revolves around the proper construction of a Unicorn-based test harness. The Unicorn-based test harness loads the target code, sets up the initial state, and loads in data mutated by AFL from disk. The test harness then emulates the target binary code, and if it detects that a crash or error occurred it throws a signal. AFL will do all its normal stuff, but it’s actually fuzzing the emulated target binary code. Only tested on Ubuntu 16.04 LTS, but it should work smoothly with any OS capable of running both AFL and Unicorn.Starting Price: Free -
18
BFuzz
RootUp
BFuzz is an input-based fuzzer tool that takes HTML as an input, opens up your browser with a new instance, and passes multiple test cases generated by domato which is present in the recurve folder of BFuzz, more over BFuzz is an automation that performs the same task repeatedly and it doesn't mangle any test cases. Running BFuzz will ask for the option of whether to fuzz Chrome or Firefox, however, this will open Firefox from recurve and create the logs on the terminal. BFuzz is a small script that enables you to open the browser and run test cases. The test cases in recurve are generated by the domato generator and contain the main script. It contains additional helper code for DOM fuzzing.Starting Price: Free -
19
TokenAnalyst
TokenAnalyst
Transparent and actionable tools and data for Bitcoin, Ethereum and Stablecoins. We provide data analysis tools for the Bitcoin and Ethereum blockchains. Institutional and professional traders get access to real-time and historical data on transactions, exchange flows and miners actvities. A full-suite analyst toolbox with dashboards and charts for key metrics including exchange flows and on-chain network stats. Complete JSON-RPC access to full nodes for multiple chains, without the hassle of set up and maintenance costs. A comprehensive blockchain analytics API with over 150 different metrics covering all major cryptoassets and the fastest bitcoin data in the world.Starting Price: $799 per month -
20
Radamsa
Aki Helin
Radamsa is a test case generator for robustness testing or fuzzer. It is typically used to test how well a program can withstand malformed and potentially malicious inputs. It works by reading sample files of valid data and generating interestingly different outputs from them. The main selling points of Radamsa are that it has already found a slew of bugs in programs that actually matter, it is easily scriptable, and, easy to get up and running. Fuzzing is one of the techniques to find unexpected behavior in programs. The idea is simply to subject the program to various kinds of inputs and see what happens. There are two parts to this process: getting the various kinds of inputs and how to see what happens. Radamsa is a solution to the first part, and the second part is typically a short shell script. Testers usually have a more or less vague idea of what should not happen, and they try to find out if this is so.Starting Price: Free -
21
PortSwigger Burp Suite Professional
PortSwigger
Hands-on security testers need the best tools for the job. Tools you have faith in, and enjoy using all day long. The tools that other professionals trust. Burp Suite Professional is the web security tester's toolkit of choice. Use it to automate repetitive testing tasks, then dig deeper with its expert-designed manual and semi-automated security testing tools. Burp Suite Professional can help you to test for OWASP top 10 vulnerabilities, as well as the very latest hacking techniques. Smart automation works in concert with expert-designed manual tools, to save you time. Optimize your workflow, and do more of what you do best. Burp Scanner can navigate and scan JavaScript-heavy single-page applications (SPAs), scan APIs, and enable the prerecording of complex authentication sequences. A toolkit designed and used by professional testers. Utilize features like the ability to record everything you did on an engagement and a powerful search function to improve efficiency and reliability.Starting Price: $449 per year -
22
Awesome Fuzzing
secfigo
Awesome Fuzzing is a list of fuzzing resources including books, courses, both free and paid, videos, tools, tutorials, and vulnerable applications to practice in order to learn fuzzing and initial phases of exploit development like root cause analysis. Courses/training videos on fuzzing, videos talking about fuzzing techniques, tools, and best practices. Conference talks and tutorials, blogs, tools that help in fuzzing applications, and fuzzers that help in fuzzing applications that use network-based protocols like HTTP, SSH, SMTP, etc. Search and pick the exploits, that have respective apps available for download, and reproduce the exploit by using the fuzzer of your choice. Set of tests for fuzzing engines. Includes different well-known bugs. A corpus, including various file formats for fuzzing multiple targets in the fuzzing literature.Starting Price: Free -
23
go-fuzz
dvyukov
Go-fuzz is a coverage-guided fuzzing solution for testing Go packages. Fuzzing is mainly applicable to packages that parse complex inputs (both text and binary) and is especially useful for hardening systems that parse inputs from potentially malicious users (anything accepted over a network). go-fuzz has recently added preliminary support for fuzzing Go Modules. If you encounter a problem with modules, please file an issue with details. Data is a random input generated by go-fuzz, note that in most cases it is invalid. The function must return 1 if the fuzzer should increase the priority of the given input during subsequent fuzzing if the input must not be added to the corpus even if it gives new coverage, and 0 otherwise; other values are reserved for future use. The fuzz function must be in a package that go-fuzz can import. This means the code you want to test can't be in package main. Fuzzing internal packages is supported, however.Starting Price: Free -
24
Boofuzz
Boofuzz
Boofuzz is a fork of and the successor to the venerable Sulley fuzzing framework. Besides numerous bug fixes, Boofuzz aims for extensibility. Like Sulley, Boofuzzincorporates all the critical elements of a fuzzer like easy and quick data generation, instrumentation and failure detection, target reset after failure, and recording of test data. Much easier install experience and support for arbitrary communications mediums. Built-in support for serial fuzzing, ethernet- and IP-layer, UDP broadcast. Better recording of test data, consistent, thorough, and clear. Test result CSV export and extensible instrumentation/failure detection. Boofuzz installs as a Python library used to build fuzzer scripts. It is strongly recommended to set up Boofuzz in a virtual environment.Starting Price: Free -
25
FuzzDB
FuzzDB
FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses. FuzzDB contains comprehensive lists of attack payload primitives for fault injection testing. These patterns, categorized by the attack and where appropriate platform type, are known to cause issues like OS command injection, directory listings, directory traversals, source exposure, file upload bypass, authentication bypass, XSS, HTTP header crlf injections, SQL injection, NoSQL injection, and more. For example, FuzzDB catalogs 56 patterns that can potentially be interpreted as a null byte and contains lists of commonly used methods and name-value pairs that trigger debug modes.Starting Price: Free -
26
Chain49
Hartmann IT Solutions GmbH
Kickstart your next blockchain project with Chain49! We provide access to our network of blockchain full nodes located in Germany via JSON-RPC, WebSocket and a shared API based on battle-tested indexer Blockbook. We support the most popular blockchains like Bitcoin, Ethereum, BNB Smart Chain and more! By using our services, you can save a lot of time and money spent on setting up your own blockchain infrastructure and just focus on developing your idea. Dedicated nodes and custom setups are also available from over 50 different blockchains for the highest load requirements without any rate limits. Contact us for a free consultation today or register for a free key and start building awesome things!Starting Price: €49/month -
27
Karate
Karate
Karate is the only open-source tool to combine API test automation, mocks, performance-testing and even UI automation into a single, unified framework. The BDD syntax popularized by Cucumber is language-neutral and easy for even non-programmers. Assertions and HTML reports are built-in, and you can run tests in parallel for speed. There’s also a cross-platform stand-alone executable for teams not comfortable with Java. You don’t have to compile code. Just write tests in a simple, readable syntax - carefully designed for HTTP, JSON, GraphQL and XML. And you can mix API and UI test automation within the same test script. It is worth pointing out that JSON is a ‘first-class citizen’ of the syntax such that you can express payload and expected data without having to use double-quotes and without having to enclose JSON field names in quotes. There is no need to ‘escape’ characters like you would have had to in Java or other programming languages.Starting Price: Free -
28
Synaptic
Synaptic
Neurons are the basic unit of the neural network. They can be connected to another neuron or gate connections between other neurons. This allows you to create complex and flexible architectures. Trainers can take any given network regardless of its architecture and use any training set. It includes built-in tasks to test networks, like learning an XOR, completing a Discrete Sequence Recall task or an Embeded Reber Grammar test. Networks can be imported/exported to JSON, converted to workers or standalone functions. They can be connected to other networks or gate connections. The Architect includes built-in useful architectures such as multilayer perceptrons, multilayer long short-term memory networks (LSTM), liquid state machines and Hopfield networks. Networks can also be optimized, extended, exported to JSON, converted to Workers or standalone Functions, and cloned. A network can project a connection to another, or gate a connection between two others networks. -
29
Code Intelligence
Code Intelligence
Our platform uses various security techniques, including coverage-guided and feedback-based fuzz testing, to automatically generate millions of test cases that trigger hard-to-find bugs deep within your application. This white-box approach protects against edge cases and speeds up development. Advanced fuzzing engines generate inputs that maximize code coverage. Powerful bug detectors check for errors during code execution. Uncover true vulnerabilities only. Get the input and stack trace as proof, so you can reliably reproduce errors every time. AI white-box testing uses data from all previous test runs to continuously learn the inner-workings of your application, triggering security-critical bugs with increasingly high precision. -
30
Defensics Fuzz Testing
Black Duck
Defensics Fuzz Testing is a comprehensive, versatile, automated black box fuzzer that enables organizations to efficiently and effectively discover and remediate security weaknesses in software. The generational fuzzer takes an intelligent, targeted approach to negative testing. Advanced file and protocol template fuzzers enable users to build their own test cases. The SDK allows expert users to use the Defensics framework to develop their own test cases. Defensics is a black box fuzzer, meaning it doesn’t require source code to run. With Defensics, users can secure their cyber supply chain to ensure the interoperability, robustness, quality, and security of software and devices before introducing them into IT or lab environments. Defensics fits nearly any development workflow, whether in a traditional SDL or CI environment. Its API and data export capabilities also enable it to integrate with surrounding technologies, making it a true plug-and-play fuzzer. -
31
Black Duck
Black Duck
Black Duck, part of the Synopsys Software Integrity Group, is a leading provider of application security testing (AST) solutions. Their comprehensive portfolio includes tools for static analysis, software composition analysis (SCA), dynamic analysis, and interactive analysis, enabling organizations to identify and mitigate security vulnerabilities throughout the software development life cycle. By automating the discovery and management of open-source software, Black Duck ensures compliance with security and licensing standards. Their solutions are designed to help organizations build trust in their software by managing application security, quality, and compliance risks at the speed their business demands. Black Duck empowers businesses to innovate securely and deliver software with confidence. -
32
Etleneum
Etleneum
On Etleneum you can write code that controls digital value, runs exactly as programmed, and is accessible anywhere in the world. Etleneum is not just a pun with Ethereum, it's a real smart contract platform. You can build publicly auditable and trusted applications that run custom code, can talk to other services and are accessible through an API, all using a built-in user account system (optional) and real Lightning payments. Above you see a graphical example of a contract with two methods: bet and resolve. Account 74 made a bet with account 12 when both called the bet method (details of the contract and calls are hidden for brevity). Then later an anonymous oracle called resolve and settled the bet. Account 12 ended up with all the satoshis. Contracts are just that: a set of methods, some funds and a JSON state. Calls can be identified or not, and it can contain satoshis or not. -
33
Smart JSON Editor
Smart JSON Editor
Smart JSON Editor is a powerful application tailored for app and web developers to create, edit, and manage JSON data structures efficiently. It offers a comprehensive suite of features, including a JSON tree tool for intuitive data visualization, value transformers for generating and modifying JSON values, and an embedded HTTP server for testing within applications. Users can import and export JSON files via various methods such as file uploads, pasteboard, and iCloud integration. The application supports the creation of smart objects (classes) that maintain key structures, facilitating the organization of associative arrays. Additionally, Smart JSON Editor provides advanced functionalities like JSON Path navigation, API request management with group and endpoint hierarchies, and token transformers for dynamic value composition in API headers and parameters. It also features search and filter capabilities, an iCloud library for asset storage, local server connections, etc.Starting Price: Free -
34
JSON Viewer
JSONViewer.tools
jsonviewer.tools — a powerful and interactive JSON visualization platform that helps users easily view, analyze, and explore complex JSON data. Graph & Tree Visualization – Interactive 2D and compact graph modes with zoom, pan, and hover link visualization. Table View for CSV – Upload CSV files and view them in a clean, sortable table format. 3D Visualization – External 3D JSON graph visualization option. File Support – Upload and visualize JSON, CSV, and YAML files. Interactive Graph Export – Double-click any JSON key to generate a graph for that key and export it as PNG. Direction Control – Change the graph direction (horizontal/vertical). Theme Customization – Switch between light/dark or custom color themes. Comparison Tool – Compare two JSON files side by side. Dummy JSON Generator – Quickly generate sample JSON for testing or demo use.Starting Price: $1.99/month -
35
WezTerm
WezTerm
WezTerm is a high-performance, cross-platform terminal emulator and multiplexer built in Rust that delivers GPU-accelerated rendering, including ligatures, color emoji, true color, dynamic color schemes, and hyperlinks, and modern windowing controls such as panes, tabs, and multiple windows on both local and remote hosts. Its single-process multiplexer provides scrollback, searchable history, mouse integration, Quick Select mode for rapid selection, Copy mode, shell integration, support for the iTerm image protocol, SSH connectivity, serial ports, Arduino devices, and workspace/session management via Lua-configurable scripts. Configuration is handled through a wezterm.lua file with hot-reload support, while a rich command-line interface (wezterm cli) lets you spawn programs, manipulate tabs and panes, and set domains. WezTerm adheres to ECMA-48 and xterm conventions for full ANSI/ISO compliance and offers native UI integration using platform-specific APIs.Starting Price: Free -
36
Avalanche
Avalanche
Build on Avalanche. Build without limits. Avalanche is an open, programmable platform for decentralized finance applications. Launch Ethereum dapps that confirm transactions instantly and process thousands of transactions per second, far beyond any decentralized blockchain platform today. Deploy blockchains that fit your own application needs. Build your own virtual machine and dictate exactly how the blockchain should operate. Stake, or lock up, your AVAX to help process transactions and further secure the platform–providing security guarantees well-above the 51% standard. You probably have the hardware required to join the platform. Avalanche is Solidity-compatible. All of your favorite tools like Remix, Truffle, and Tenderly work out of the box. Deploying smart contracts on Avalanche cost just a tenth of what they cost on Ethereum. High gas fees, front-running, and other adverse effects of slow smart contract blockchains are now a thing of the past. -
37
Jazzer
Code Intelligence
Jazzer is a coverage-guided, in-process fuzzer for the JVM platform developed by Code Intelligence. It is based on libFuzzer and brings many of its instrumentation-powered mutation features to the JVM. You can use Docker to try out Jazzer's autofuzz mode, which automatically generates arguments to a given Java function and reports unexpected exceptions and detected security issues. You can also use GitHub release archives to run a standalone Jazzer binary that starts its own JVM configured for fuzzing.Starting Price: Free -
38
Apidog
Apidog
Apidog is a complete set of tools that connects the entire API lifecycle, helping R&D teams implement best practices for API Design-first development. Design and debug APIs in a powerful visual editor. Describe and debug easily with JSON Schema support. Automate API lifecycle with Apidog's test generation from API specs, visual assertion, built-in response validation, and CI/CD. Generate visually appealing API documentation, publish to custom domain or securely share with collaborative teams. Local and cloud mock engine generate reasonable mock data according to field names and specifications without writing scripts. Quality tools have the power to unite your entire team, while ensuring that no task is needlessly repeated. Effortlessly describe your API as you test it, and generate JSON/XML schemas with a simple click. Generate test cases from APIs, add assertions visually, and create test scenarios with branches and iterations easily.Starting Price: $9 per user per month -
39
JSON Crack
ToDiagram
JSON Crack is an open source tool that transforms complex data formats, including JSON, YAML, CSV, XML, and TOML, into interactive, visually intuitive graphs, enhancing data comprehension and analysis. Users can input data directly, upload files, or provide URLs, and it automatically generates a visual tree graph. It supports data conversion between formats, such as JSON to CSV or XML to JSON, and includes features like JSON formatting, validation, and code generation for TypeScript interfaces, Golang structs, and JSON Schemas. Advanced tools are available for decoding JWTs, executing JQ queries, and performing JSON Path commands. Users can export visualizations as PNG, JPEG, or SVG files. All data processing occurs locally on the user's device, ensuring data privacy. Starting Price: Free -
40
Wapiti
Wapiti
Wapiti is a web application vulnerability scanner. Wapiti allows you to audit the security of your websites or web applications. It performs "black-box" scans (it does not study the source code) of the web application by crawling the webpages of the deployed web app, looking for scripts and forms where it can inject data. Once it gets the list of URLs, forms, and their inputs, Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable. Search for potentially dangerous files on the server. Wapiti supports both GET and POST HTTP methods for attacks. It also supports multipart forms and can inject payloads in filenames (upload). Warnings are raised when an anomaly is found (for example 500 errors and timeouts). Wapiti is able to make the difference between permanent and reflected XSS vulnerabilities. Generates vulnerability reports in various formats (HTML, XML, JSON, TXT, CSV).Starting Price: Free -
41
PHPUnit
PHPUnit
PHPUnit requires the dom and json extensions, which are normally enabled by default. PHPUnit also requires the pcre, reflection, and spl extensions. These standard extensions are enabled by default and cannot be disabled without patching PHP’s build system and/or C sources. The code coverage report feature requires the Xdebug (2.7.0 or later) and tokenizer extensions. Generating XML reports requires the xmlwriter extension. Unit Tests are primarily written as a good practice to help developers identify and fix bugs, to refactor code and to serve as documentation for a unit of software under test. To achieve these benefits, unit tests ideally should cover all the possible paths in a program. One unit test usually covers one specific path in one function or method. However a test method is not necessarily an encapsulated, independent entity. Often there are implicit dependencies between test methods, hidden in the implementation scenario of a test.Starting Price: Free -
42
Liquid Studio
Liquid Technologies
Liquid Studio provides an advanced toolkit for XML and JSON development along with Web Service Testing and Data Mapping and Data Transformation tools. The Development Environment contains a complete set of tools for designing XML and JSON data structures and schemas. These tools provide editing, validating and advanced transformation capabilities. For novice or expert, the intuitive interface and comprehensive features will help you save time and money delivering a successful project. Visualize and edit an abstracted view of your XML schema(XSD) using an intuitive user interface, and validate your XSD against the W3C standards.Includes split graphical and text views, intellisense, syntax highlighting, drag and drop, copy and paste, and multi-step undo/redo. Visualize and edit an abstracted view of your JSON schema using an intuitive user interface, and validate your JSON Schema against the IETF standards.Starting Price: $149 one-time payment -
43
Honggfuzz
Google
Honggfuzz is a security-oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW-based). It’s multi-process and multi-threaded, there’s no need to run multiple copies of your fuzzer, as Honggfuzz can unlock the potential of all your available CPU cores with a single running instance. The file corpus is automatically shared and improved between all fuzzed processes. It’s blazingly fast when the persistent fuzzing mode is used. A simple/empty LLVMFuzzerTestOneInput function can be tested with up to 1mo iteration per second on a relatively modern CPU. Has a solid track record of uncovered security bugs, the only (to date) vulnerability in OpenSSL with the critical score mark was discovered by Honggfuzz. As opposed to other fuzzers, it will discover and report hijacked/ignored signals from crashes (intercepted and potentially hidden by a fuzzed program).Starting Price: Free -
44
BlackArch Fuzzer
BlackArch
BlackArch is a Linux pentesting distribution based on ArchLinux. BlackArch Fuzzer provides packages that use the fuzz testing principle. -
45
american fuzzy lop
Google
American fuzzy lop is a security-oriented fuzzer that employs a novel type of compile-time instrumentation and genetic algorithms to automatically discover clean, interesting test cases that trigger new internal states in the targeted binary. This substantially improves the functional coverage for the fuzzed code. The compact synthesized corpora produced by the tool are also useful for seeding other, more labor or resource-intensive testing regimes down the road. Compared to other instrumented fuzzers, afl-fuzz is designed to be practical, it has a modest performance overhead, uses a variety of highly effective fuzzing strategies and effort minimization tricks, requires essentially no configuration, and seamlessly handles complex, real-world use cases, say, common image parsing or file compression libraries. It's an instrumentation-guided genetic fuzzer capable of synthesizing complex file semantics in a wide range of non-trivial targets.Starting Price: Free -
46
OWASP WSFuzzer
OWASP
Fuzz testing or fuzzing is a software testing technique, that basically consists in finding implementation bugs using malformed/semi-malformed data injection in an automated fashion. Let’s consider an integer in a program, which stores the result of a user’s choice between 3 questions. When the user picks one, the choice will be 0, 1, or 2, which makes three practical cases. Integers are stored as a static size variable. If the default switch case hasn’t been implemented securely, the program may crash and lead to “classical” security issues. Fuzzing is the art of automatic bug finding, and its role is to find software implementation faults and identify them if possible. A fuzzer is a program that automatically injects semi-random data into a program/stack and detects bugs. The data-generation part is made of generators, and vulnerability identification relies on debugging tools. Generators usually use combinations of static fuzzing vectors. -
47
ProxySQL
ProxySQL
ProxySQL is built with an advanced multi-core architecture to support hundreds of thousands of concurrent connections, multiplexed to thousands of servers. ProxySQL supports sharding by user, schema or table by means of the advanced query rule engine or through customized plugins. The development team no longer needs to rewrite queries generated by ORMs or packaged software, ProxySQL's query rewriting feature can modify SQL statements on the fly. Battle-tested doesn't even begin to cover it — ProxySQL is war-tested. Performance is the priority and the numbers prove it. ProxySQL is an open source high performance, high availability, database protocol aware proxy for MySQL and PostgreSQL. ProxySQL is a robust SQL proxy solution that acts as a pivotal bridge between database clients and servers, offering a plethora of features designed to streamline database operations. ProxySQL empowers organizations to harness the full potential of their database infrastructure. -
48
Selendroid
Selendroid
Test automation for native or hybrid Android apps and the mobile web with Selendroid. Selendroid is a test automation framework that drives off the UI of Android native and hybrid applications (apps) and the mobile web. Tests are written using the Selenium 2 client API. Selendroid can be used on emulators and real devices and can be integrated as a node into the Selenium Grid for scaling and parallel testing. Selendroid can be extended at runtime with your own extensions. Selendroid can interact with multiple Android devices (emulators or hardware devices) at the same time. UI elements can be found in different locator types. Same concept for automating native or hybrid apps. No modification of the app under test is required in order to automate it. Full compatibility with the JSON Wire Protocol/Selenium 3 Ready. Existing emulators are started automatically and UI elements can be found by different locator types.Starting Price: Free -
49
test_coverage
pub.dev
A simple command-line tool to collect test coverage information from Dart VM tests. It is useful if you need to generate coverage reports locally during development.Starting Price: Free -
50
Citrus
Citrus
Framework for automated integration tests supporting a wide range of message protocols and data formats! In a typical test scenario the system under test is running on a test infrastructure while interacting with Citrus over various messaging transports. During the test Citrus is able to act on both sides as client and consumer exchanging real request/response messages over the wire. With each test step you can validate the exchanged messages with expected control data including message headers, attachments and body content (e.g. XML, Json, ...). The test provides a Java fluent API to specify the test logic and is fully automated. The repeatable test is nothing but a normal JUnit or TestNG test and can easily run as integration test in a CI/CD pipeline. Kamelets represent Camel-K route snippets that act as standardized event sources and sinks in an event driven architecture.Starting Price: Free
