How to advertise
on Softwareqatest.com

AD EXAMPLE: Web Site Test Tools and Site Management Tools

More than 500 tools listed in 15 categories

Organization of Web Test Tools Listing - this tools listing has been loosely organized into the following categories:

Load and Performance Test Tools
Page Speed Testing Tools
Mobile Web/App Testing Tools
Visual Regression Testing Tools
Link Checkers
HTML Validators
Web Accessibility Testing Tools
Web Services Test Tools
Cross-Browser Testing Tools/Services
Web Functional/Regression Test Tools
BDD Test Tools
Web Site Security Test Tools
External Site Monitoring Services
Web Site Management Tools
Other Web Test Tools

Note: Categories are not well-defined and some tools could have been listed in several categories; the 'Web Site Management Tools' category includes products that contain: site version control tools, combined utilities/tools, server management and optimization tools, and authoring/publishing/deployment tools that include significant site management or testing capabilities. Suggestions for category improvement are welcome; see bottom of this page to send suggestions.

Check listed tool/vendor sites for latest product capabilities, supported platforms/servers/clients, etc; new listings are periodically added to the top of each category section; date of latest update is shown at bottom of this page.

Also see Web Site Testing FAQ in the FAQ Part 2 for a discussion of web site testing considerations; also see What's the best way to choose a test automation tool? in the LFAQ section; there are also articles about web site testing and management in the 'Resources' section.


Load and Performance Test Tools

GoReplay - Performance testing tool for traffic mirroring/shadowing that listens for traffic on production servers and feeds it to test and dev environments. Traffic can be saved and loaded from files. Requires installing daemon on your server(s). Free open source version supports the HTTP protocol, the $pro version supports binary protocols. Pro version supports replaying and keep-alive sessions to ensure the exact same number of connections every time.

OctoPerf - Commercial Saas online platform load testing service for web and mobile applications. Key features include: Record Virtual User, design realistic virtual users, run scenario from multiple locations (Europe, USA and more), analyze bench reports to find performance bottlenecks. Supports Apache JMeter™ - import any JMX project. Customizable and exportable analysis reports.

Apica Loadtest - Offers flexible self service and full service load testing able to test 2MM + concurrent users, through a network of 50+ locations around the world. Test on demand or automate testing throughout development lifecycles. Easily integrated into existing Dev stacks using partnership integrations and REST API. Advanced Features include: AJAX/WebServices, XML/JSON Data Viewer, API data/execution. SaaS, Hybrid, or On-Prem.

Taurus - Open source automation framework in Python for running various open source load testing tools and functional testing tools; hides the complexity of performance and functional tests with an automation-friendly convenience wrapper. Taurus relies on JMeter, Gatling, Locust.io, Grinder and Selenium WebDriver as its underlying tools.

Locust - Open source scalable distributed user load testing tool written in Python. Completely event-based, thus can support thousands of concurrent users on a single machine. In contrast to many other event-based apps it doesn't use callbacks, instead using light-weight processes, through gevent. This allows writing of very expressive scenarios in Python without complicating code with callbacks. Web-based UI.

LoadView - Cloud-based, fully-managed performance testing tool for web sites and API's (SOAP and REST) from Dotcom-Monitor. Enables users to stress test websites, web apps, and APIs using real browsers—not headless browsers or other emulators. Simulate globally-distributed traffic or local traffic from a single geographic location. Build and deploy test scripts in minutes with on-demand, pay-as-you-go pricing.

SmartMeter.io - Performance testing tool from Etnetera a.s. includes test scenario recorder with automatic transactions and think times, mobile browser simulation, more; comprehesnive test reports; automatic environment monitoring (CPU, RAM, HDD) combine cloud and on-premise load generators. Set acceptance criteria such as max response time, number of errors, and desired throughput to enable integration with CI processes.

Agileload - Load test tool from Agile Load SA for testing all types of web and mobile applications. Features include automatic recording of test scenarios, distributed load injectors, topological and threshold analysis of anomalies, infrastructure monitoring, creation of custom test reports for each user profile. A script storyboard provides a graphical view of test scenarios; the scripting interface enables script customization. Load injectors can be installed on your own network or on the cloud. Report designer tool enables design/configuration of customized load testing reports.

Gatling - Open source stress-testing tool developed in Scala. Focus on support of the HTTP protocol that makes it a tool of choice for load testing any HTTP server. Core engine is protocol agnostic enabling support for other protocols - currently also ships with JMS support. Based on an expressive DSL, the scenarios are self explanatory. They are easy to maintain and can be kept in a version control system.

LoadGen - An open source load testing tool for HTTP, database, and web services, by Stanly Thomas and Mythili Vutukuru, developed as a web app. Developed based on fibesr, a user-level thread implementation in Java. The tool is useful in scenarios where the requests have high response times. Many existing tools are developed for scenarios with high request rate and quick response times, and fail to keep up with load generation when server response times are high, as the number of outstanding requests becomes very large . Features include regular expression extractor, delay timer which helps in running complex test scenarios. Requires Apache Tomcat, Apache Maven, Java jdk 1.8 or above. Platform independent.

Tsung - Free open-source multi-protocol distributed load testing tool supported by Process-One. Can be used to stress HTTP, WebDAV, SOAP, PostgreSQL, MySQL, LDAP and Jabber/XMPP servers. SSL is also supported. OS monitoring (CPU, memory and network traffic) using SNMP, Munin or Erlang agents on remote servers. XML configuration system; several sessions can be used to simulate different type of users. Dynamic sessions can be described in XML. User think-times and the arrival rate can be randomized using a probability distribution. HTML reports can be generated during the load to view response times measurement, server CPU, etc. Developed in Erlang.

Loadster - Load testing tool from Loadster, Inc. oriented to testing websites, web applications, and HTTP web services; includes graphical script editor, live reporting, and unlimited virtual users. Execute multiple scripts simultaneously, with multiple virtual user populations, ramp user load up and down with almost infinite possibilities, simulate network bandwidth for virtual users, adjust or randomize wait times, and add thresholds to fine-tune test inputs. Generate load from your own hardware, or on-demand cloud engines running on 5 continents. Record scripts via browser with the free Chrome or Firefox extension; or add steps manually and edit them via browser UI. Can rapidly spin up fully managed cloud instances. Generates a full test report with charts and tables after every test. Handles cookies automatically, and handles dynamic data with each request by binding to a CSV dataset.

LoadNinja - Web load and performance testing from Smartbear Software. Record web interactions and play back via real browsers in the cloud. Option to attach a databank to tests - tests can run pulling information from the databank either sequentially, randomly, or uniquely. For testing internally, can use a private proxy to record load tests for internal applications, use a dedicated IP, or whitelist dynamic IPs.

Sandstorm - Load testing tool from Impetus Technologies Inc., supports Win, Linux, Web, mobile, Http, Https, SOAP, XML, REST, AJAX, Flex, Silverlight, Applets, Android, iOS, BlackBerry OS, WAP, OMA-IMPS, Cassandra, HBase, MongoDB, OracleNoSQL. Capabilities include: record/playback with rich and extensible framework for modifications; user interface for dynamic parameter handling; automated cookie handling; Jenkins plug-in. Integrated resource monitoring for most of the popular web, app and DB servers. Pay-as-you-go cloud edition allows test execution from anywhere; or use SandStorm On-Premise edition.

Load2Test - Performance/load/stress/high availability testing tool from Enteros Inc. Can capture real production workload for playback simulating thousands of users for top down testing or back-end testing at the component layer. Also available in the Amazon EC2, RackSpace or PlatForm Labs cloud environments. Integrated performance management and root cause analysis system automatically collects performance metrics across load test infrastructure and applies cross-component correlation to identify performance degradations and bottlenecks. Targeted platforms/OS's: Load2Test Controller and Test nodes: Win, Linux.

Xceptance LoadTest - Load testing and regression tool from Xceptance Software Technologies, Inc for web and Java and other app load testing. Includes recording capabilities. XLT Cloud Service available. Develope scripts with the Script Developer IDE or code all your tests in Java using WebDriver. Includes Chrome and Firefox plugins that collect client performance data right in the browser. Free; paid support and training is offered.

Blazemeter - Self-service, on-demand, cloud-based load testing. Simulate any user scenario for webapps, websites, mobile apps or web services. Capabilities include performance, functional, mock services, API monitoring, private cloud, mainframe testing. Simulate thousands or millions of virtual users from more than 50 geo-locations, leveraging open source tools such as Apache JMeter™, Selenium, Gatling, Grinder, Locust, WireMock, Cucumber and more. Control threads, hits/sec, arrival rates & more in real time. Reporting includes interactive graphs, analyze online or download critical metrics including response time percentiles, bandwidth and errors, trend tracking.

LoadStorm - A web-based load testing tool/service from CustomerCentrix, LLC, as a distributed application that leverages Amazon Web Services to scale on demand with processing power and bandwidth as needed. Tests for web and mobile can be built using the tool in such a way as to simulate a large number of different users with unique logins and different tasks.

Neustar Website Load Testing - On-demand, self-service, pay-as-you-go service from Neustar enables simulation of large volumes of real browsers hitting a website. Utilizes Selenium. Uses cloud-based real or emulated browsers.

Load Impact - Cloud-based online load testing service for Web app and API testing from Load Impact AB. Access to distributed network of load generator nodes; can generate load from up to 10 different locations simultaneously. Record user scenarios using Chrome extension or proxy recorder. Script user scenarios in Lua, using Load Impact's IDE with code completion, JSON and XML parsing, data parameterization and more. Can collect backend information such as CPU usage, Memory usage, Disk I/O, Network I/O, plus desired custom metrics available via Nagios plugins, using Load Impact's Server Metric Agents installed on your servers. Free and $paid options; free low level load tests for 1-50 simulated users.

Multi-Mechanize - Web performance and load testing framework in python; open source by Corey Goldberg. Requires: Python 2.6 or 2.7.

AppLoader - Load testing app from NRG Global for web and other applications accessible from a Windows desktop; generates load from the end user's perspective. Protocol independent and supports a wide variety of enterprise class applications. Integrates with their Chroniker monitoring suite so results of load testing can be correlated with system behavior as load is increased. Runs from Win platforms.

fwptt - Open source tool by Bogdan Damian for load testing web applications. Import recorded browsing sessions made with Fiddler, which are then used to generate a C# class that can be used directly for tests or modified as needed. Capabilities include handling of Ajax. For Windows platforms.

Curl-Loader - Open-source tool written in 'C', simulating application load and behavior of tens of thousand HTTP/HTTPS and FTP/FTPS clients, each with its own source IP-address. In contrast to other tools curl-loader is using real C-written client protocol stacks, namely, HTTP and FTP stacks of libcurl and TLS/SSL of openssl. Activities of each virtual client are logged and collected statistics include information about: resolving, connection establishment, sending of requests, receiving responses, headers and data received/sent, errors from network, TLS/SSL and application (HTTP, FTP) level events and errors.

StressTester - Enterprise load and performance testing tool for web applications from Reflective Solutions Ltd. Advanced user journey modeling, scalable load, system resources monitors and results analysis. No scripting required. Suitable for any Web, JMS, IP or SQL Application. OS independent.

The Grinder - A Java-based load-testing framework freely available under a BSD-style open-source license. Orchestrate activities of a test script in many processes across many machines, using a graphical console application. Test scripts make use of client code embodied in Java plug-ins. Most users do not write plug-ins themselves, instead using one of the supplied plug-ins. Comes with a mature plug-in for testing HTTP services, as well as a tool which allows HTTP scripts to be automatically recorded.

nGrinder - Open source load testing app for running test scripts written in jython(python running on JVM) across a number of machines. It's internal engine is based on Grinder. nGrinder wraps Grinder's console and agent with a controller and agent, respectively, and extends several features to enable multiple concurrent tests. Consists of a) a Controller that provides a web interface for performance testing, coordinates test processes, collates and displays test statistics, lets user create and modify scripts and b) an Agent that runs processes and threads that put loads on target machines when running in agent mode, monitors target system performance when running in monitor mode.

Avalanche - Load-testing appliance from Spirent Communications, designed to stress-test security, network, and Web application infrastructures by generating large quantities of user and network traffic. Simulates as many as two million concurrently-connected users with unique IP addresses, emulates multiple Web browsers, supports Web Services testing Supports HTTP 1.0/1.1, SSL, FTP, RTSP/ RTP, MS Win Media, SMTP, POP3, DNS, Telnet, and Video on Demand over Multicast protocols.

NeoLoad - Load testing tool from Neotys for web, mobile apps, and API testing, with clear and intuitive graphical interface, no scripting/fast learning curve (Javascript for most advanced cases). Can design complex scenarios to handle real world applications. Clear and comprehensive reports and test results. Load test from on-premise or from the cloud. Compatibility with mobile applications. Multi-platform. Free edition available also.

QTest - Web and mobile app load testing tool from Quotium Technologies SA. Capabilities include: cookies managed natively, making the script modelling phase shorter; HTML and XML parser, allowing display and retrieval of any element from a HTML page or an XML flux in test scripts; option of developing custom monitors using supplied APIs; more.

httperf - Open source web server performance/benchmarking tool. Provides a flexible facility for generating various HTTP workloads and measuring server performance. Focus is not on implementing one particular benchmark but on providing a robust, high-performance, extensible tool. Source code in C.

WAPT - Load and stress testing tool from SoftLogica LLC, for web, mobile, APIs, etc. Handles dynamic content and HTTPS/SSL; easy to use; support for redirects and all types of proxies; clear reports and graphs. Create tests using a browser or a mobile application; remote, distributed and cloud-based testing; flexible error handling and adjustable pass/fail criteria

Visual Studio Test Professional - A suite of testing tools for Web applications and services that are integrated into the Microsoft Visual Studio environment. These enable testers to author, execute, and manage tests and related work items all from within Visual Studio. Includes Load and Web Performance Testing capabilities.

OpenLoad Tester - Web-based load testing tool from OpenDemand; knowledge of scripting languages not required - web-based recorder can capture and translate any user action from any website or web application.

Apache JMeter - Open source Java desktop application from the Apache Software Foundation designed to load test functional behavior and measure performance. Originally designed for testing Web Applications but has since expanded to other test functions. May be used to test performance both on static and dynamic resources (files, Servlets, Perl scripts, Java Objects, Data Bases and Queries, FTP Servers and more). Can be used to simulate a heavy load on a server, network or object to test its strength or to analyze overall performance under different load types; can make a graphical analysis of performance or test server/script/object behavior under heavy concurrent load. Includes IDE; CLI mode capabilities; highly extensible.

Siege - Open source http/ftp load tester and benchmarking utility; supports basic authentication, cookies, HTTP and HTTPS protocols. Enables testing a web server with a configurable number of concurrent simulated users. Stress a single URL with a specified number of simulated users or stress multiple URL's simultaneously. Reports total number of transactions, elapsed time, bytes transferred, response time, transaction rate, concurrency, and server response. Developed by Jeffrey Fulmer, modeled in part after Lincoln Stein's torture.pl, but allows stressing many URLs simultaneously. Written in C; for UNIX and related platforms.

Web Polygraph - Freely available benchmarking tool for caching proxies, origin server accelerators, L4/7 switches, and other Web intermediaries. Other features: for high-performance HTTP clients and servers, realistic traffic generation and content simulation, ready-to-use standard workloads, powerful domain-specific configuration language, and portable open-source implementation. C++ source available. Continuously improved/maaintained since 1998 up to the present.

PureLoad - Java-based multi-platform performance testing and analysis tool from PureLoad Software. Includes 'Comparer' and 'Recorder' capabilities, dynamic input data, scenario editor/debugger, load generation for single or distributed sources. Designed to be independent of the technology used on the server side. Free and $paid versions available.

Load Tester by Web Performance - Load test tool emphasizing ease-of-use, from Web Performance Inc. Supports all browsers and web servers, mobile, AJAX, JSON, web services, XML. Records and allows viewing of exact bytes flowing between browser and server; no scripting required. Can automatically handle variations in session-specific items such as cookies, usernames, passwords, IP addresses, and any other parameter to simulate multiple virtual users. Generate loads locally or in the cloud. Also available is Legion, a free open source load testing tool based on Selenium and javascript.

http-Load - Free load test application from ACME Labs to generate web server loads, from ACME Software. Handles HTTP and HTTPS; for *ix platforms.

IBM Rational Performance Tester - Cloud-based web performance testing from IBM/Rational; has optional extensions for SOA/web services, for Seibel applications, SAP Solutions. Includes tools for root cause analysis and real-time reporting.

Radview's WebLoad - Load testing tool from Radview Software. Test scripting via visual tool or Javascript with enhanced load testing objects and methods. IDE offers correlation, parameterization, response validation, messaging, native JavaScripting and debugging. Built-in support for Web Services/REST: SOAP, Rest, XML, JSON, WebDAV. Handles mobile load testing including ability to record native or browser-based apps directly from the mobile handset. Can integrate with selenium. Correlation engine handles both server-side (such as session id) and client-side (such as time, date) dynamic values - replaced automatically to create unique values for each script run. Run load generators in the cloud - no special licenses needed. More than 80 customizable out-of-the-box reports/graphs with drill-down capabilities

SilkPerformer - Enterprise-class load-testing tool from Microfocus (formerly from Borland, formerly from Segue). Can simulate thousands of users working with multiple protocols and computing environments. Allows prediction of behavior of e-business environment before it is deployed, regardless of size and complexity. Silk Performer Visual Studio extension allows you to develop performance tests in Microsoft Visual Studio. Offers functionality to record web technologies, supporting both the protocol-level and the browser-driven approach. For browser-driven tests, supports IE, Edge, and mobile browsers, Firefox, Chrome, and PhantomJS. Accurately simulates a variety of wired, wireless and mobile network technologies. Supports performance testing for mobile web and native applications.

Loadrunner - Load/stress testing tool from Microfocus (formerly HP, formerly Mercury) for web and other applications; supports a wide variety of application environments, platforms, and databases. Large suite of network/app/server monitors to enable performance measurement of each tier/server/component and tracing of bottlenecks.

Return to top of web tools listing


Page Speed Testing Tools

(This section is oriented to tools that focus on client-side performance of web pages; sometimes this is referred to as 'page performance testing' or 'front end performance testing'.)

Google Page Speed Insights - Free online tool from Google for page speed analysis - fetches a url twice, once with a mobile user-agent, and once with a desktop-user agent, and measures how the page can improve its performance for 1) above-the-fold load: elapsed time from the moment a user requests a new page and to the moment the above-the-fold content is rendered by the browser and 2) full page load: elapsed time to the moment the page is fully rendered by the browser. Since the performance of a network connection varies considerably, only the network-independent aspects of page performance are considered: server configuration, HTML structure of a page, and its use of external resources such as images, JavaScript, and CSS. Suggestions for improvement are then provided, in priority order.

Sitespeed.io - Open source tool for monitoring, analyzing and optimizing website speed and performance, based on performance best practices advice from an included 'coach' and collecting browser metrics using the Navigation Timing API, User Timings and Visual Metrics (FirstVisualChange, SpeedIndex & LastVisualChange). For Chrome or Firefox. Use for running continuous integration to find web performance regressions early: on commits or when code is moved to your test environment; also for monitoring performance in production, alerting on regressions. Includes WebPageReplay which lets you replay your page locally (getting rid of server latency etc) and makes it easier to have stable metrics and find front end regressions. Supported by Digital Ocean, LLC.

Dotcom-Monitor - Performance and monitoring services for web sites/apps/services/API's utilize multiple worldwide locations, using real desktop or mobile browsers. Collects analytics re page speed and performance. Capabilities include: record & replay complex web transitions, Executes in real mobile and desktop browsers, video playback of errors with detailed diagnostics; detailed waterfall charts with element level breakdowns, web API monitoring – XML, JSON, REST, SOAP. Reporting via web UI or XML feed of APIs. Customizable alerts. Free basic 'Dotcom-Monitor Website Speed Test' available.

Boomerang - Open source JavaScript library for RUM (Real User Measurement) that measures the page load time experienced by real users. Can send this data back to your server for further analysis. Also measures performance timings, metrics and characteristics of users' browsing experience. Requires including it in web pages and calling the BOOMR.init() method. Performance data is beaconed to your chosen URL. Designed to be a performant and flexible library adaptable to your site's needs; goal is to not affect page load time; can be loaded asynchronously such that it will not delay the page load even if boomerang.js is unavailable; can also be loaded synchronously. extensive plugin architecture. Supports: IE 6+, Edge, all major versions of Firefox, Chrome, Opera, and Safari Desktop and mobile devices.

Webpagetest - An online page performance analysis/testing tool using real browsers/devices, that was orginially developed by AOL for use internally and was open-sourced in 2008, now being developed and supported by Patrick Meenan. The online version is an industry collaboration with various companies providing the testing infrastructure for testing a site from across the globe. Highly configurable. Provides web page content analysis, performance analysis, various performance scores. API's available for scripting. Open source on GitHub and packaged versions available for download.

GTmetrix - Online web page speed analyzer, from GTmetrix. Analysis utilizes Google Page Speed and YSlow rulesets; checks one page at a time and provides page preformance analysis report and suggestions for improvement. Capabilities include saving of results over time and trend graphs/reports, automated periodic monitoring/alerting of one or more URL's, monitoring from multiple locations worldwide, etc. Can utilize real Android device or over 20 different Simulated Device options. Block or only allow specific resources that load on your page by specifying in a whitelist or blacklist. Free and $paid versions available.

PageSpeed Tools - A family of tools from Google, designed to help optimize website performance. PageSpeed Insights enable web-based analysis of a page and provides feedback to help identify performance suggestions and best practices that can be applied to a site, and PageSpeed Optimization tools can help automate the process. Also has information about performance/optimization best practices.

YSlow - Open source page speed analysis tool originally from Yahoo analyzes web pages and explains why they're slow based on rules for high performance web sites. Available as extension for Firefox, Chrome, Safari, Opera; as bookmarklet on mobile; nodejs: Command line for HAR files powered by Node.JS and NPM; phantomjs; Command line with headless WebKit powered by PhantomJS; nodeserver: Node.JS Server powered by Express. Includes a Performance report card, HTTP/HTML summary, list of components in page and related info, tools including JSLint. Generates a grade for each rule and an overall grade, lists suggested specific changes to improve performance, calculates total size of page for empty and primed cache scenarios, cookie info. Can also view HTTP response headers for any component. Also details web performance best practices and rules.

Return to top of web tools listing


Mobile Web/App Testing Tools

Headspin - Mobile Performance Platform from Headspin, Inc. for functional testing, performance management, continuous UX monitoring, cross-browser testing, load testing, and OTT media services. Manual and automated mobile app testing on over 22,000 real devices connected to carrier networks in 150 locations around the world. Identify the root cause of mobile performance issues from the client-side all the way to the server-side. Continuously monitor mobile UX metrics in real-time on real devices and carrier networks around the world Cross-Browser Testing across 2,500+ browsers. Get reliable OTT, audio, video and gaming QoE measurements that take into account real-world conditions Network traffic, client-side performance stats, and video are captured from a device during a performance test and these inputs are fed into HeadSpin’s AI-based issue detection engine, which generates a Performance Session report. Supports Appium parallel test execution. Also supports Apple TV, Android TV, Android Set Top boxes, Tablets, Wearables.

Jamo Automator - Image-based mobile/tablet app test automation cloud-based service from Jamo Solutions. Captures user actions and records them as enhanced screen shots and stores scripts in cloud. Users can edit scripts by tapping on the image and reviewing its contents, such as text, graphics or buttons; can also add synchronization and verification points, create data-driven tests and define conditional data. Editing functions are guided by the tool and available through a web interface – no programming language/skills required. Uses AI-based engine to uniquely recognize UI objects.

Hive CI - Open source tool from BBC to enable connecting your physical devices to a hive and running tests on the same platforms as your users. Hive CI is a CI system built around devices, developed at the BBC from a desire to have a CI system that could understand and manage devices, run tests without manual intervention, and collate and interpret results without having to resort to spreadsheets. Associated tools include HiveMind - a device monitoring and inventory application for Hive-CI; Testmine for Test Result Analytics; and 'Test Tools' - a collection of Ruby gems to help with testing on devices.

Reflector - Wireless screen mirroring app that runs on your Mac or Windows computer to display and record phone, tablet or computer screens without wires or complex setups, from Squirrels LLC. Connect and record multiple devices at once - in any combination. Automatically adjusts the layout so all screens are displayed proportionately. Ideal for side-by-side viewing and comparisons. Can include audio from your computer’s microphone in recordings. Can take full-resolution device screenshots with click of a button. The Reflector control center allows easy management of connected iOS, Chrome OS, Android, Mac and Windows devices. Change frames, emphasize and hide or show devices all from one central location.

Remote TestKit - Cloud-based app testing service offering the latest mobile devices, tablets and smartphones - over 500 models for testing and debugging. Apps can be installed on multiple devices simultaneously. Operate a device with a mouse as if you had the actual device available. If your computer has a touch screen, you can also operate the device with the touch screen. Input and playback audio; screen rotation; hardware button operation; pinch-in and pinch-out; simulate GPS settings; change languages; turn Wi-Fi on and off. Can mirror the rented device onto your own Android device and operate the rented device from your own device. Remote TestKit Automated Testing Cloud enables running of Appium test scripts on the remote rented devices using your Appium test script written in Java, Ruby, or PHP. Multiple smartphones can be tested simultaneously. From NTT Group.

GigaFox - Real mobile device cloud for manual and automated mobile app testing from MobileLabs Inc. On-premises or hosted environment. Web-based management console to remotely manage, track and monitor testing assets by individual device name, manufacturer, model number, OS version, availability, and more. Remotely add, disable, reboot and unlock devices as needed. Schedule access to devices so they are available when needed. Exercise all facets of the user interface, including multi-touch gestures. Manage and control device charging. Includes ability to test streaming video and graphical content without lags and choppiness. Supports Appium, Selenium, Tricentis, UFT, and most other mobile automation tools that ordinarily use USB-attached devices.

RobusTest - Mobile App Testing & Test Management for Android and iOS, for manual, exploratory, and automated testing, from Izinga Software Private Limited. Based on Appium. Supports most major automation frameworks such as Appium, Espresso, Calabash. Enables creation of an on-premise, secure & customisable device cloud; enables sharing of device screen & device control. simulate varying network conditions by letting you control bandwidth, latency, packet loss, corrupted packets, packets ordering. Simulate device states like location & orientation. Run tests on multiple devices in parallel or distribute your tests among chosen devices. In-depth functional report with screenshots for every step, report on verifications and marking of every target element. Performance report with every test run without any extra configuration. Monitor & analyse app quality through CPU, Memory, Network usage, Garbage collection, device logs, etc. No need to download or install any file on your computer to get started. APIs to enable integrate with major ALM tools such as Jenkins.

SIGOS App Experience - Cloud-based real mobile handset/tablet testing platform from SIGOS GmbH enables development, deployment, and testing of content/apps on hundreds of real handset devices in live networks around the world. For manual or automated testing. The mobile handset bank includes devices stationed in the US and many other countries and the agnostic platform hosts a diverse portfolio of worldwide carriers and manufacturers. Any action that can be performed on a mobile device in-hand can be replicated on devices in the cloud. Switch between real global carrier networks and Wifi; capture test results, videos, and screenshots. Automation capabilities provide flexible scripting that enables building of test scripts that work across multiple devices for faster test automation. Quickly develop scripts using GUI-based commands, Java API, other test frameworks including UFT, Appium, IBM Rational, Selenium, AppDome, and others. Public cloud, private cloud, or on-premise. Device planner tool to help prioritize device choices.

Espresso - Android UI test automation framework from Google, oriented to white box testing by developers as part of the development cycle. Lets you leave your waits, syncs, sleeps, and polls behind while it manipulates and asserts on the application UI when it is at rest.

EarlGrey - Open source native iOS white box UI automation test framework that enables you to write clear, concise tests. Access enhanced synchronization features to help to ensure that the UI is in a steady state before actions are performed; automatically synchronizes with the UI, network requests, and various queues; but still allows you to manually implement customized timings, if needed. Provides APIs that allow searching for elements in scrollable containers, regardless of the amount of scrolling required. Works in conjunction with the XCTest framework.

OpenSTF - STF (Smartphone Test Farm) is an open source web application for controlling, managing, and debugging smartphones, smartwatches and other gadgets remotely, from the comfort of your browser. Remote control of any device in realtime, using your mouse and keyboard, or even via smartphone. Capabilities also include ability to monitor which devices are connected, who is using which device, and search devices by any specification. Do realtime testing on more than one device, just from your browser. Primarily sponsored by HeadSpin and other individual contributors; originally developed at CyberAgent Inc.

Micro Focus Mobile Center - Provides an enterprise level end-to-end lab of real mobile devices and emulators. Object-based automation, easy maintenance, and smart reports enable increased test coverage and faster test cycles. Test remote and local iOS and Android devices connected to an on-premise or cloud-based lab. Run simple, elastic, and realistic tests from multiple geographies across various real-world network conditions.

XCUITest - The official UI testing tool from Apple. XCUITests are bundled with your application and run via Xcode. XCUITest is only for iOS testing, and tests must be written in Swift or Objective-C.

Detox - An open source JavaScript-based test framework which aims to be cross-platform. (Android is not yet fully supported as of late 2019). It is meant to be used as a Node.js library in your test code, so tests must be written in JavaScript. Like Espresso and Earl Grey, Built on top of Espresso and Earl Grey.

Appdiff - Web-based automated regression testing service for mobile apps from Appdif Inc. Requires uploading your app. Appdif bots walk through each new build, checking that signin, menus, buttons, text boxes, all work the same as previous builds. Automatically analyzes every transition in your app's user experience for performance issues and provides pictures and timing information for all areas of app.

Genymotion - Android emulation from Genymobile SAS running on SaaS or as virtual images on AWS, GCP or Alibaba Cloud (PaaS). Simulate thousands of virtual device configurations and wide variety of scenarios. Access to all Android version; unlimited app installations. Compatibility with all testing framework such as Appium, Espresso, Robotium, etc. relying on ADB. Fully interact with the screen of your virtual device in a web browser (no plugin needed): smooth HD and low latency streamed experience. HTTP API for creating/stopping devices, and instrument all sensors. APIs enable creating a device, changing its battery level or its position, triggering some clicks and then closing the device. Java API for instrumenting the device during your tests - use this API to dynamically test all complex behavior needed including when the user changes location.

MobileTest.me - Service enables testing of web apps and websites, on emulators of more than 100 popular smartphones and tablets. Regularly adds new devices. Portrait or landscape mode, mobile or responsive mode.

Quamotion - Mobile test automation tool from Quamation for testing Android and iOS from Windows PCs. Record test scripts or create with C# scripting language. Test on emulators, local devices or cloud devices.

Scirocco Cloud - Cloud-based mobile testing platform From Sonix Co., Ltd. for Japanese Android devices. Over 170 Android models available via cloud platform. Includes major test libraries such as Native and Android drivers. Operate devices remotely through your browser; install applications to devices remotely; screen capture; memory usage monitoring.

Kobiton - Mobile cloud platform that enables users to perform manual or automated testing on hundreds of cloud-based real iOS and Android devices. Web, app, or hybrid testing. You can install your app and it will be automatically uninstalled after the test session but the test history (session name, description, screenshots, log) will be retained, or can be deleted. Can also use the app to administer your own local test devices, or a mix of cloud, private cloud, and local devices. From Koboton, Inc.

UI Automator - An UI testing framework for Android UI testing across system and installed apps. Provides a set of APIs to build UI tests that perform interactions on user apps and system apps. The APIs enable operations such as opening the Settings menu or the app launcher in a test device. Oriented to writing black box-style automated tests, where the test code does not rely on internal implementation details of the target app. Key features include: a viewer to inspect layout hierarchy; an API to retrieve state information and perform operations on the target device; APIs that support cross-app UI testing; can run UI Automator tests from Android Studio IDE or from the command-line.

AWS Device Farm - App testing service from Amazon Web Services that lets you test and interact with Android, iOS, and web apps on many physical devices at once, or reproduce issues on a device in real time. View video, screenshots, logs, and performance data. Gesture, swipe, and interact with devices in real time, directly from your web browser. Run the AWS built-in test frameworks (no scripting required) or customize your tests by selecting from open-source test frameworks like Appium, Calabash, Espresso, etc. Plugins and API to automatically initiate tests and get results from IDEs and continuous integration environments like Android Studio and Jenkins. Manual testing also.

Firebase Test Lab for Android and iOS - Free service from Google to test your mobile app on a wide variety of devices and device configurations hosted in a Google data center. Runs Espresso and UI Automator 2.0 tests on Android apps, and XCTest tests on iOS apps. Uses real production devices that are flashed with updated API levels and have customizable locale settings. Captures logs, creates an "activity map" that shows a related set of annotated screenshots, and creates a video from a sequence of screenshots to show you the simulated user operations that it performed. Even if you haven't written any test code for your Android app, Test Lab can exercise your app automatically, looking for crashes. Robo test analyzes the structure of your Android app's user interface and then explores it, automatically simulating user activities. If you have written instrumentation tests for your app, Test Lab can also run those tests. Integrated with Android Studio, the Firebase console, and the gcloud command line. You can also use Test Lab with CI systems.

Firebase Performance Monitoring - Service from Google that helps you to gain insight into the performance characteristics of iOS, Android, and web apps. You use the Performance Monitoring SDK to collect performance data from your app, and then review and analyze that data in the Firebase console. Performance Monitoring is available for iOS and Android apps that include the Performance Monitoring SDK. You don't need to write any code before your app starts monitoring several critical aspects of app performance: startup time, activity while in the foreground, activity while in the background, and HTTP/S network requests. Performance metrics broken down by country, device, app version, and OS level.

Automate-On - Automate functional, visual and performance testing of web, mobile applications in multiple Browsers, Devices, OS and Screen Resolutions. Executes test scripts on cloud machines, mobile devices and removes the need for customers to procure, maintain computer systems and mobile devices for testing. Provides comprehensive reporting; Targeted Platforms/OS: Windows, Mac OS, IOS, and Android.

UX Recorder - iOS app that records on-screen activity, gestures, user video, and audio, from Foraker Labs. Records user interactions with websites on iPhone, iPad, or iPod touch. Records both user actions (swipes, taps, scrolling) and video of the user via the device’s front-facing camera. Allows easy pause and resume of session recording. Supports bookmarks for saving website URLs, allowing easy access during testing sessions. Allows bookmark sharing via iCloud. Exports recorded sessions to your computer’s desktop via iCloud, Dropbox, iTunes, or Camera Roll.

Selendroid - Open source test automation framework for native or hybrid Android apps and the mobile web. Tests are written using the Selenium 2 client API. Can be used on emulators and real devices and can be integrated as a node into the Selenium Grid for scaling and parallel testing. Gestures are supported via the Advanced User Interactions API. Includes a built in Inspector to simplify test case development.

ios-driver - Open source tool for testing IOS native, hybrid, or mobile web apps using the Selenium/Webdriver API. Includes ios-driver Inspector to examine native app elements, similar to Firebug. Can be used as a Selenium grid node - run tests in parallel on the same architecture as for the web.

KIF - KIF (Keep It Functional) is an open source iOS integration test framework. Enables automation by leveraging the iOS accessibility attributes. Builds and performs the tests using a standard XCTest testing target. Like some other iOS test tools, it uses undocumented Apple APIs, thus is appropriate for testing but not prod code. Integrates directly into your Xcode project; tests for KIF are written in Objective C.

Google Mobile Friendly Test tool - Free online assessment of mobile-friendliness of a web page - just enter a page URL to see how the page scores; test typically takes less than a minute to run. Any redirects implemented by the page will be followed by the test. Test results include a screenshot of how the page looks to Google on a mobile device, as well as a list of any mobile usability problems found, including such things as small font sizes and use of Flash.

mobiReady - Free online mobile-friendliness test tool from dotMobi. Benchmark vs Alexa 1000. The mobiReady score represents how well a particular webpage will do across the spectrum of mobile internet devices, with scoring between 0 (lowest) and 5 (best). Low scoring web pages may be slow to load, of poor design or include components that will break the user experience on mobile devices. Visualize site appearance on multiple device types; get detailed results and technical recommendations. Based on W3C standards, as well as Yahoo's YSlow and Google's Page Speed guidelines. The set of tests evolves over time, to reflect new technologies and emerging best practices, so an untended site will likely experience a gradually declining score. Registered users have access to their past test results, to monitor trends and improvements, can download PDF reports of results, and have access to the mobiReady API for integrating scores into your own reporting and analytics.

Remote TestKit - Real device test cloud from NTT Resonant Inc. Enables manual and automated testing on hundreds of different models of real iOS and Android smartphones and tablets. Supports Xcode, Eclipse, UFT/QTP, MS Visual Studio, Xamarin, Android Studio, and other developer tools; and M-eux Test, Selenium, Appium, Calabash, Espresso, Robotium, and other test automation tools. After each test run all apps and data are wiped from devices and they are automatically re-initialized. Supports Selenium Webdriver, Jenkins. Many other capabilities include screen/image and video capture, dummy GPS settings, change languages, remote control/device mirroring, more.

TestObject - Real device test cloud from SauceLabs/TestObject GmbH, with hundreds of different real iOS and Android device models, for manual and automated testing for native, web, and hybrid apps. Other capabilities include screenshots, switching system language to test internationalization, support for testing frameworks including Robotium, Espresso and Appium; REST API, Ant and Gradle plugins. Reports include device specifications, logs and screenshots.

Frank - Open source framework for writing structured text iOS app tests (using Cucumber) and have them execute against your iOS application; from Thoughtworks. 'Selenium for native iOS apps' (not for pure web apps). Requires installion of a ruby gem, and compiling/linking the Frank server into the app being tested. Includes a powerful “app inspector” (called Symbiote) that can be used to get detailed information on the running app. Run tests on both the Simulator and Device.

UI/App Exerciser Monkey - Free command-line tool from Google that runs on your emulator or device and generates pseudo-random streams of user events such as clicks, touches, or gestures, as well as a number of system-level events. Enables stress-testing of apps that you are developing, in a random yet repeatable manner. If the app crashes or receives any sort of unhandled exception, or if it generates an application not responding error, the Monkey will stop and report the error.

MonkeyRunner - Free tool from Google provides a python API for writing programs that control an Android device or emulator from outside of Android code. Can write a Python program that installs an Android application or test package, runs it, sends keystrokes and touch events to it, takes screenshots of its user interface, and stores screenshots on the workstation. Oriented to testing of apps and devices at the functional/framework level and for running unit test suites. Can apply one or more test suites across multiple devices or emulators. You can physically attach all the devices or start up all the emulators (or both) at once. Can be extended with plugins.

Android Lint - Free downloadable static code analysis tool from Google that checks your Android project source files for potential bugs and optimization improvements for correctness, security, performance, usability, accessibility, and internationalization. Runs from command line or Android Studio.

Calabash - Free open source framework enables writing and executing automated acceptance tests of mobile apps using Cucumber and Ruby; from Xamarin Inc. Cross-platform, supporting Android and iOS native apps. consists of libraries that enable test code to interact programmatically with native and hybrid apps. Actions can be gestures, assertions, screen shots.

Xamarin Test Cloud - Provides a locally executed, object-based scripting environment for imitating and automating actions a real user would take through a mobile app on iOS or Android, using a test device cloud with over 2,000 real devices to test on. Test scripts can run in parallel on hundreds of devices at a time. Test Scripts can be built in Calabash (Ruby) and C# using Xamarin Studio or Visual Studio. Share code for cross-platform tests between iOS and Android. Screenshots and video playback for every step of every test; performance data (memory, CPU, duration, etc.). Integrates with any CI system.

Crashlytics - Free set of tools from Google/Fabric/Twitter, implemented by instrumenting your iOS or Android app, enables reporting of aggregated as well as detailed information on app crashes in the field during beta testing etc. Includes details about the devices that your apps run on including information such as whether a crash only happens on a specific model or generation of a device, if app only crashes in landscape mode, whether the proximity sensor is always on, is it a memory issue, an issue with specific versions, etc. as well as reports on deep analysis of stack traces. Tool set includes 'Beta by Crashlytics' for managing and distributing beta apps via a single, cross-platform toolset for iOS and Android, including tracking testers progress and issues. Also includes 'Answers' kit which provides critical performance metrics on your app, detailed growth and engagement indicators, etc based on the set of core events and actions of most interest. Included as part of the 'Fabric' toolset; as of 2018 being integrated with Firebase, Google's mobile development platform.

UberTesters - Set of tools from UberTesters Inc. for managing/reporting of iOS/Android app crowdsourced/beta testing. Requires the Ubertesters SDK which can be integrated with many frameworks used for cross-platform development. Once the app is built with the integrated UberTester SDK, distribute your builds/revisions to specified testers using the Ubertesters app that is installed already on the tester's device. Capabilities include in-app bug editing, marking, reporting and user feedback; trcking of all testing sessions in real-time sorted by devices or testers; real time reporting of status of a device and whether it is active, closed or suspended, along with additional device-specific session information and logs; configurable as to which data is captured and conditional logic for filtering. Can integrate with many 3rd party bug tracking systems or use the included bug tracker.

Test Fairy - Mobile beta testing management platform from TestFairy Ltd. for Android & iOS. Multiple channels to send apps to testers - testers can get The TestFairy app and use it to download and install all the apps they were invited to test; web app for those who want to use an app without installing one on their device; can set your project to work in 'strict mode' that will require testers to login before they download your app; or manage via enterprise suite that can be installed on a private cloud on many AWS locations; or where enhanced corporate security is needed, can be fully installed in your lab. Catches any crash and posts it directly to your bug system together with a video that shows what happened prior to crash including CPU metrics, memory, GPS, device info, logs, and crash reports. Testers can submit feedback/bug reports via various means including from within the app by shaking their phone, by using the TestFairy native Testers App.

HockeyApp - Set of tools from Microsoft for managing/reporting of app crowdsourced/beta testing. For mobile and desktop apps; Android, iOS, Mac OS X, Win, Cordova, React Native, Unity, Xamarin. Requires integrating the open source HockeyApp SDK then uploading your app build to HockeyApp. Testers can then download and install the app and then create support requests, file bugs, or post feedback right from within your app. Can send crash reports automatically or with user interaction or add custom metadata and log files. Reports include metrics showing which devices were tested, which testers used the app for how long, which language was tested, etc. Data export API for connecting to your own or third-party services.

TestDroid - Suite of mobile application testing tools/services for test automation and manual testing, from Bitbar Technologies. Mobile device testing cloud for unlimited device concurrency with thousands of real Android and iOS device models. Support for open source frameworks including Appium, XCUITest, XCTest, Espresso, Calabash and more. Container-based infrastructure enables scaling local tests with your own frameworks in the TestDroid device cloud. Enables optimization of DevOps toolchains with out-of-the-box integrations or use TestDroid's APIs to connect your own services for alerting, bug tracking, continuous integration and delivery. Available via public cloud, private cloud, or on-premise.

eggPlant Mobile - An image-based, low-overhead, non-invasive black-box test automation tool for mobile. From TestPlant Inc. Based on a combination of eggPlant Functional and TestPlant's mobile VNC servers that enables testing on mobile apps on iOS, Android, and other real devices. The image-based UI testing approach can reduce the effort of cross-device and cross-platform mobile software testing.

Monkop - A cloud-based automated iOS and Android testing service using real devices, provides insights about performance, security, usability, and functionality over a large device lab containing representative brands, OS versions, screen sizes, and configurations. Requires only an upload of your app .apk/.ipa. Utilizes automatic learning, monkey testing and application disassembly techniques in order to run different levels of tests on different devices. Reports include response time and resource consumption (cpu, memory, data transfer, battery, etc.), security scan results and suggestions, results of exerciing app looking for crashes, compatibility and layout issues. Can also run your own automation scripts for each device. Has APIs to integrate with CI.

Maveryx - Test automation tool for Android and Java, C/C++, .NET, VB, Web apps from Maveryx srl. Utilizes runtime GUI Inspection & Objects Recognition capabilities. The object search engine supports exact and fuzzy matching algorithms to identify test objects in the UI, even in case of partial or approximate matching, misspellings and synonyms or if the objects have changed since test creation. Supports data-driven tests via Excel, CSV and XML files and data retrieval from any database and from INI, TXT, HTML files and others. Support for keyword-driven testing through Excel spreadsheets and XML files; offers a rich set of built-in keywords to rapidly develop robust test scripts. Supports JUnit assertion-based verification points, distributed testing, plugin for Eclipse, creation of custom extensions/plugins. Open source version written in java from 2011 is available on Sourceforge.

Clang Static Analyzer - Open-source source code analysis tool that finds bugs in C, C++, and Objective-C programs. Can be run either as a standalone tool or within Xcode; intended to be run in tandem with a build of a codebase. Implemented as a C++ library that can be used by other tools and applications.

Roboelectric - An open source Android unit test framework that modifies Android SDK classes so you can test your Android app inside the JVM on your workstation in seconds, without the overhead of an emulator.

Appium - An open source test automation framework for driving native, mobile web and hybrid apps on iOS mobile, Android mobile, and Windows desktop platforms using the WebDriver JSON wire protocol. Supports a sub-set of the Selenium WebDriver JSON Wire Protocol. Appium is a server written in Node.js. Client libraries include Ruby, Python, Java, PHP, JavaScript, C#(.NET). Appium can be installed via NPM or by downloading Appium Desktop

SeeTestMobile - Mobile application test tool from Experitest Ltd., for iOS and Android. Can be used on both emulators as well as real devices and covers visual testing, functionality testing and speed performance. Digital Assurance Lab enables web and mobile app testing with access to a centralized hub of desktop browsers, real iOS and Android devices, and simulators; available as Software-as-a-Service (SaaS) or as an on-premise deployment. Tests can run singlyu or in parallel. SeeTestMobile incorporates image recognition and self-learning algorithms. Test recording can take place utilizing real devices - plug real device in to desktop via USB. Utilizes self-learning diagnostic and matching algorithms and a modular self-enhancing image recognition technology. Editable scripts using included IDE. Free and paid versions available.

Ranorex Studio - A Windows GUI-based test automation framework from Ranorex GmbH for testing many different application types including mobile test automation. Supports a wide variety of technologies, platforms, integrations, and browsers. Directly record tests on your device. Utilize the Ranorex API and create robust test automation projects entirely in C# or VB.NET. The IDE includes test project management, integration of all Ranorex tools (Recorder, Repository, Spy), intuitive code editor, code completion, debugging, and watch monitor. Endpoint panel UI provides a central command center to set-up and manage endpoints as well as configure their environments. Utilize Ranorex Agents on remote machines to deploy multiple Ranorex tests for remote execution in different environments, using different system configurations and operating systems.

M-eux - Mobile apps test automation software from Jamo Solutions; recognizes the GUI elements of the mobile app resulting in test cases that are device model independent and re-useable across different versions of the service/application under test. Extends UFT, Eclipse Galileo, MS Visual Studio. For most major mobile platforms, and for native, web-based and hybrid applications.

pCloudy - Cloud based App Testing Platform provides single click access to 5000+ Android and IOS device-browser combinations. Full access to devices. Capture screenshots, device logs, crash report and device video sessions. Measure CPU utilization of device and app; memory consumption; get detailed analysis on memory consumption of app and its processes; track Battery drainage. For manual testing, automated testing, and performance testing. Rest APIs and plug-ins to integrate with any CI/CD tools; integration with tools like JIRA, Slack, ALM, etc. Public cloud, private cloud, and on-premises cloud options.

XCTest Framework - Part of Apple's XCode developer toolkit for building Mac iOS (and OS X) applications. Many testing, profiling, and analysis capabilities include capabilities for unit testing and UI and performance testing. Also in XCode is simulator capabilities, which enables running an app similar to the way it would run in an actual iOS device; can check that network calls are correct, and that views change as expected when phone rotates; can simulate touch gestures by using the mouse. Can run tests across multiple physical devices at a time, or test using simulated devices running in parallel.

Perfecto - Testing platform for mobile as well as desktop, from Perfecto Mobile. Includes cloud-based web and mobile testing capabilities . Provides an IDE that can handle Interactive (Manual) Testing and creation of automation scripts. Includes visual analytics tool 'DigitalZoom'.

Robotium - Open source Android test automation framework with full support for native and hybrid applications, from Renas Reda/Hugo Josefson/Jayway; available as java source or jar file. Can integrate with Maven, Gradle or Ant to run tests as part of continuous integration. Robotium Recorder also available.

Intent Fuzzer - Free downloadable Android testing tool from NCC Group (formerly Isec Partners); often finds bugs that cause the system to crash or performance issues on the device. The tool can either fuzz a single component or all components. It works well on Broadcast receivers, and average on Services. For Activities, only single Activities can be fuzzed, not all them. Instrumentations can also be started using this interface, and content providers are listed, but are not an Intent based IPC mechanism.

Dynatrace Real User Monitoring for Mobile & Web Apps - An on-demand monitoring solution from Dynatrace (formerly Compuware and Gomez), to accelerate identification, diagnosis and resolution of mobile Web, SMS and application performance and availability problems. Provides a unified view of mobile and Web performance and availability. Utilizes thousands of different 'mobile devices': tests are performed by the Dynatrace testing agents deployed on mobile nodes. Mobile nodes are a globally distributed set of computers connected to wireless carrier networks via attached wireless modems and provide a realistic measure of the mobile Web experience. Supports all major mobile platforms.

Return to top of web tools listing


Visual Regression Testing Tools

Chromatic - Cloud-based visual test automation tool from Chroma Software Inc. oriented to testing at the component level instead of entire screen. Test across Chrome, Firefox, and IE11. Supports working on many branches by tracking each branch separately; intuitive workflows for merging UI changes. Can ignore specific UI elements from tests to focus testing only on the changes of interest. Easily get test coverage for responsive components. Conveniently specify viewport widths to test in the same place as your stories. Go back in time to see how components change from branch-to-branch and commit-to-commit in one click. Multiple pricing options.

Galen Framework - Open-source tool for testing web layout and responsive design in a real browser, and for functional testing; uses Selenium for interacting with elements on page and getting their locations and dimensions. Galen Specs is the language with which you define what the page should look like for different devices. Can run tests against Selenium Grid to cover cross-browser layout testing; or use with Experitest, Sauce Labs or BrowserStack. Once Galen sees that something is wrong – it reports the error, makes a screenshot and highlights the misbehaving element on it. Has 2 separate reporting methods: Html Reports which provide an overview of all test suites with complete reports, screenshots and highlighted errors; or TestNG Reports which can be used for embedding Galen in a CI tool. Supports both JavaScript and Java tests.

Axcept - Cloud-based visual test automation tool from DCodeIt; for Chrome. Write, run and review tests within your browser. Capabilities include mocking for web service responses, screenshot validations or custom validations; screenshot wizard to detect, inspect and accept any changes or broken features. Free and $$ versions.

Reg CLI - Open source visual regression testing tool with HTML reporter; reports show changed/new/deleted items and highlights diffs in screenshots. CLI options include setting of comparison sensitivity, setting of difference ratio thresholds, and setting of difference pixel threshold.

Spectre - Open source app to diff screenshots. Heavily influenced by VisualReview, BackstopJS and Wraith. A simple UI for browsing and inspecting diffs, and an API for runner scripts to submit screenshots to and receive a pass or fail in real time. (For use with Wraith, Backstop, Selenium etc).

AET - Open source visual regression testing tool; detects changes on web sites and performs basic page health check (w3c compliance, etc.). Screenshots are handled via Firefox browser for rendering and Selenium to capture screenshots. Capabilities include hiding page items by xpath, changing screen resolution (width/height setup), comparing page sources, checking page source W3C compliance using nu.validator, checking js errors with JSErrorCollector, checking status codes using BrowserMob Proxy, checking page accessibility with HTML_CodeSniffer, checking front end performance using YSlow.

Differencify - Open source library for visual regression testing via comparing your local changes with reference screenshots of website; by Nima Soroush. Built on top of chrome headless using Puppeteer. Mocks requests using Mockeer to run chrome headless browser in isolation. Can run in non-headless mode also.

Needle - Open source visual testing tool in Python for testing visuals with Selenium and nose. Checks that visuals (CSS/fonts/images/SVG/etc.) render correctly by taking screenshots of portions of a website and comparing them against known good screenshots. Also provides tools for testing calculated CSS values and the position of HTML elements.

T-Plan Robot - A black box automated testing tool from T-Plan Limited, developed on generic image based testing principles; provides a human-like approach to software testing and performs in situations where other tools may fail. Record & replay capability. Support of scripting in Java as well as a proprietary scripting language. Object search & background detection to detect objects by colour, by colour range, and on different backgrounds. Platform independent (Java) and runs on, and automates all major systems such as Windows, Mac, Linux and Unix plus mobile platforms.

BackstopJS - Open source tool automates visual regression testing of responsive web UIs by comparing DOM screenshots over time. Integrated Docker rendering -- to eliminate cross-platform rendering issues. Render with Chrome Headless. Simulate user interactions with ChromyJS and Puppeteer scripts. Fast inline-CLI reports; CI Integration with JUnit reports. Use as a standalone global app, a standalone local npm script or import into your node app.

Percy - Visual test automation tool from Perceptual Inc. Provides side-by-side comparisons and automatic diff matching. Includes proprietary snapshot stabilization and easy review of visual changes via proprietary cross-browser snapshot rendering. Automatically freezes animations, manages custom fonts, and more. Technology minimizes false positives. Custom rendering infrastructure is horizontally scalable, and built specifically for DOM snapshotting without impacting the performance of your existing CI speed. scalable with built-in support for complex test suites that run in parallelized CI services or parallel test runners. Supports all leading CI/CD platforms. Free, Pro, and Enterprise versions.

Mirror-mirror - Open source visual regression test tool; is a wrapper around Nightmare.js; works with Chrome and any OS. Requires Node. Can run it with headless CI Systems (Travis CI, Jenkins, etc.)

Depicted—dpxdt - Open source tool for comparing before and after webpage screenshots for each release. Depicted shows when any visual, perceptual differences are found. Includes a local command-line tool for doing perceptual diff testing; an API server and workflow for capturing webpage screenshots and automatically generating visual perceptual difference images; a workflow for teams to coordinate new releases using pdiffs; a client library for integrating the server with existing continuous integration. Built for portability; server runs with SQLite, MySQL, behind the firewall, etc.

Visual Review - Open source tool for testing and reviewing visual regressions. Functions as a server which accepts web app screenshots (sent for example from your selenium or protractor scripts.) These shots are then compared to previously-uploaded baseline screenshots. VisualReview will display and highlight any diffs between the two and allows acceptance or rejection of the changes. Provides a Protractor plug-in to easily upload screenshots from protractor tests. However, the VisualReview server has a simple API which allows compatibility with other testing frameworks.

Shoov - Open source visual regression testing tool from Gizra, based on WebdriverCSS, graphicsmagick, and other libraries to compare images. After each comparison to baseline, changes are shown in the Shoov.io online app. Enables easy replacement of the baseline images with the regression images to keep baseline up to date with AUT changes.

iOSSnapshotTestCase - Open source tool to compare a snapshot to a "reference image" stored in your source code repo and fails the test if the two images don't match. Automatically names reference images on disk according to test class and selector. Prints a descriptive error message to the console on failure. Includes functions to control appending the device model (iPhone, iPad, iPod Touch, etc), OS version, screen size and screen scale to the images (allowing to have multiple tests for the same «snapshot» for different OSs and devices). Initially developed at Facebook; maintained by Uber.

Gemini - Open source utility for regression testing the visual appearance of web pages. Can test separate sections of a web page; can include the box-shadow and outline properties when calculating element position and size; can ignore some special case differences between images (rendering artifacts, text caret, etc.); gathers CSS test coverage statistics. Works with multiple browser types. Requires a webdriver server implementation and C++ compiler.

Fluxguard - Cloud-based service provides continuous crawling and monitoring of any site for changes. Provides multiple levels of web change detection - screenshots of all pages and detection of changes, extract text and determine changes to user-visible content, network change analysis, run Google Lighthouse audits. Email/SMS/webhook change alerts; or daily/weekly summaries of changes. Extensive configuration options — including filters to remove frequently changing areas of a page, proxy networks, and more. Free and $paid versions.

OcularJS - Open source visual regression testing tool. Capabilities include creation of reference screenshots, creation of test screenshots, and comparison to report on changes. Configuration includes: 'Viewports' which is an object with a list of viewports - Ocularjs will open every viewport and take a screenshot for each component. This object can have a list of named viewports, each with an array containing screen width and screen height in that order; and 'SelectorList' object which contains the list of components for which a screenshot is desired, and each item requires a name and a selector - the selector can be a data attribute, class or and ID.

Lineup - Open source automated testing with Ruby of webpage designs, can be used in for continious delivery; shows diffs between current image and baseline image. Requires Firefox and phantomjs.

VisWiz - Visual regression testing tool supports any UI, from web applications to native mobile and desktop apps. Works seamlessly with most modern CI systems; easy to use CLI; several SDKs available. Can be used with many testing frameworks. The VisWiz.io Github app verifies commits in pull requests of Github repositories. Extensive branches support. The VisWiz.io Github app updates the correct commit status and posts a descriptive comment with a summary of the visual regression testing for the changes in the pull request. Full visual regression reports on the Viswiz web app.

UI.Vision RPA - Test automation tool from a9t9 Software GmbH; enables automation of any website by taking screenshots. Includes a command-line interface and API to automate more complicated tasks and integrate with other programs or scripts. For Win, Mac, Linux. UI.Vision RPA's computer-vision visual UI testing commands allow you to write automated visual tests with UI.Vision RPA via Chrome or Firefox extensions. Includes standard Selenium IDE commands for general web automation, web testing, form filling & web scraping. Verify page sections or entire page. Can recognize images and text inside canvas elements, images and videos.

CSSCritic - A lightweight open source tool for regression testing of Cascading Style Sheets. Checks your current layout constantly against a reference image you have provided in the past. If your layout breaks (or simply changes - CSS Critic can't tell) your tests fail. For Firefox and Chrome only. By Christoph Burgmer/Thoughtworks

Resemble.js - Open source tool for analyzing and comparing images with Javascript and HTML5. by James Cryer and Huddle development team. Compatible with Node.js >8.

Applitools - Automated cross-browser visual web and mobile testing tool from Applitools with an advanced image-matching engine. Verify that the GUI appears correctly across all devices & browsers. Easily integrated with existing frameworks such as Selenium, Appium, IBM Rational Quality Manager, and cloud testing environments. Visual self-explanatory logs; visual test playback. Supports web, mobile and desktop apps as well as PDF files and raw screenshots.

Wraith - Open source screenshot comparison tool, created by developers at BBC News, for regression testing of web page appearance/layout. Uses a headless browser to create screenshots of webpages on different environments, or at different moments in time, and then creates a diff of the two images; the affected areas are highlighted in blue. Requires ImageMagick and a headless browser. Takes screenshots of your webpages, runs a comparison task across them, outputs a diff PNG file comparing the two images and a data.txt file which contains the percentage of pixels that have changed, and packages all into a gallery.html, ready for review. If any screenshot's diff is above the threshold specified in your configuration file, the task exits with a system error code (useful for CI). The failed screenshot will also be highlighted in the gallery.

SikuliX - This is the currently-maintainted version of the original Sikuli, an open source visual technology to automate and test GUI's. Initially developed at the User Interface Design Group, MIT Computer Science and Artificial Intelligence Laboratory (CSAIL); more recent development by Raimund Hocke and open source community. Sikuli Script automates anything you see on a screen without internal API's support; and includes Sikuli IDE, an integrated development environment for writing visual scripts with screenshots easily. You can programmatically control a web page, a desktop application, or even an iPhone or Android app running in a simulator or via VNC. Though not available for mobile devices, it can be used with the respective emulators on a desktop or based on VNC solutions. Can script with Python 2.7 (internally used interpreter Jython 2.7), Ruby 1.9 or 2.0, Javascript, or Java programming and programming/scripting with any Java aware programming/scripting language (Jython, JRuby, Scala, Clojure, …). Requires a valid JRE or JDK Java. For Windows, Mac, and some Linux/Unix.

Eggplant - An image-based, low-overhead, non-invasive black-box test automation tool. Does not reside on the system-under-test and is technology agnostic, so it can test in many situations that other tools cannot by using image capture and advanced search techniques. Uses scriptless models, AI, and analytics to expand automation beyond test execution across the full testing process. From test-case generation and test optimisation to results analytics. For Win, Mac OSX, or Linux.

Ghost Inspector - Web visual testing and monitoring tool from Ghost Inspector, Inc. Tests are easy to create with a Chrome extension recorder, which records clicks, form submissions and more, for which you can then set assertions that must be made for your test to pass. Or you can create tests via a clean and simple UI. Tests can run continuously from the cloud and alert you if anything breaks. Log in to evaluate results and watch full video of the test, check console output from the browser, screenshots, and even a visual comparison of any changes that have occurred since the last test run. You can set a threshold anywhere from 1% to 90% for screenshot comparisons, and if the screenshot has changed by that amount, it is flagged as a failure and you're notified; provision is provided for ignoring expected changes.

Screenster - Web-based image-based functional and regression test automation service for web apps using screenshots on each step comparing them to baseline, allowing verification of changes or lack of changes to UI. Differences are detected between a baseline and regression run screenshots, and are visually highlighted on screen. Tester can approve the difference as expected change, ignore it from future comparison for dynamic parts of the UI, or designate as a failed test. Full access to Selenium API when needed. From AgileEngine, LLC.

Browsera - Cloud-based automated browser compatibility testing - automatically checks and reports cross-browser layout differences and javascript errors. Can automatically crawl site to test entire site; can handle sites requiring login. Reports detail which pages have potential problems - quickly see the problems indicated as each screenshot is highlighted in the problematic areas.

Browsershots - Free online cross browser/OS comparison testing. Choose browser OS, browser, and versions of interest and submit URL and site responds with a collection of screen shots. May not have current/latest browser versions.

Return to top of web tools listing


Link Checking Tools

HEADMasterSEO - Freemium downloadable desktop tool for checking large lists of links for status code, response headers, redirects and response time. The tool can run tests on redirects using URL mapping rules. Test links for secure cookies and HSTS headers. Test sitemaps for broken links/redirects. CSV export results. Free for lists of up to 500 links. From Hristo Hristov, X3M Consulting Ltd.

Screaming Frog SEO Spider - Downloadable tool for checking links and other SEO-related site health checks. By default will crawl only raw HTML of a site, but can also render pages using headless Chromium to discover content and links. Java app that runs on Windows, Mac and Linux. Free and $paid versions available

Dead Link Checker - Online link checker from DLC Websites can crawl and scan entire site or single pages. Free version available; also paid auto-checker versions available that can be scheduled daily, weekly, or monthly.

Broken Link Checker - Link checking via Chrome plugin; scans page or whole site and provides a broken links report generated directly without installing and running any additional program files. Highlights which links are functioning and which ones are broken.

Online Broken Link Checker - Free online link checker; shows the location of problematic links in your HTML; reports error codes (404 etc) for all bad URLs; free version has a 3000-page limit, $paid version has no limit; free version has no limits on number of hyperlinks within webpages.

Integrity - Downloadable link checker for Mac from Peacock Media. Options such as exporting data, authentication, managing multiple sites, sitemap generation, SEO checks, spelling and grammar are all available in two related $paid apps; Integrity Plus and Scrutiny, which are also available as online services.

LinkChecker - Free open source tool that runs on Python 2 systems; recursive and multithreaded checking and site crawling output in colored or normal text, HTML, SQL, CSV, XML or a sitemap graph in different formats HTTP/1.1, HTTPS, FTP, mailto:, news:, nntp:, Telnet and local file links support restriction of link checking with regular expression filters for URLs. Also handles Username/password authorization for HTTP and FTP and Telnet; honors robots.txt exclusion protocol; Cookie support; HTML5 support.

Dr. Link Check - Free online checker from Wulfsoft. Crawls site and checks links; the link check is currently limited to a maximum of 1,000 found and checked links. When this limit is reached, the check stops automatically.

WP Broken Link Status Checker - Broken link check plugin utility for Wordpress. Organized through entities called scans, each one containing its own configuration and results.

Link and Image Analyzer - Free online link checker from Internet Marketing Ninjas configurable to check links or images or both. Produces a summary report and an Image Details results table and a Link Details results table. Link details include file type (CSS, HTML, PDF or Plain) the HTTP status code returned for the URL, and link check result (OK, Redirect or Broken)

Interro Bot - Downloadable link checker, requires Win10. Paid version or free personal non-commerical edition.

Broken Links at a Glance - Free online broken link checker for small web sites (up to 1000 pages), by Hans van der Graaf.

Check My Links - A Chrome extension Link Checker from Paul Livingstone. It highlights in browser window which links are valid and which are broken. HTTP response codes and URLs of broken links are published in the Console log. (Found in: 'Chrome > Tools > Javascript Console' or Ctrl+Shift+J).

SpringTrax - Link checking tool from SpringTrax, Inc.; JavaScript tracker code to monitor every visitor. Runs constantly; every 404 error is immediately analyzed and prioritized; email notifications.

LinkTiger - Hosted link checker; free and $paid versions. Capabilities include e-mail alerts, dashboard, reporting; canned reports or create rich custom reports. Scans PDF, CSS, Flash and MS Office files, flash-animation.

Web Link Validator - Downloadable link checker from REL Software checks links for accuracy and availability, finds broken links or paths and links with syntactic errors. Built-in spell checker finds and corrects any spelling errors in English and over 20 other languages. Reports in HTML/CSV. Freeware 'REL Link Checker Lite' version available for small sites. For Windows.

Site Audit - Low-cost on-the-web link-checking service from Blossom Software.

Xenu's Link Sleuth - Downloadable freeware link checker by Tilman Hausherr; supports SSL websites; detects and reports redirected URL; Site Map; for Windows.

Linkalarm - Low cost on-the-web link checker from Link Alarm Inc.; free trial period available. Automatically-scheduled reporting by e-mail.

Alert Linkrunner - Downloadable link check tool from Viable Software Alternatives; evaluation version available. For Windows.

W3C Link Checker - Link checking service run by the WWW Consortium (the folks who set web standards); configurable. Handles one URL at a time or can run recursively through a site. PERL source also available for download.

Big Brother - Open source command-line link checker for Unix, Windows, by Francois Pottier. Available as source code; binary available for Linux.

Sitechecker - Online tool to check external, internal links and anchors for each URL; by Boosta Inc. Crawler enables JavaScript rendering functionality, so JavaScript generated pages can be scanned. Also includes other site health checks and provides a Website score based on quantity of critical errors, warnings and notices. Reports include 'Issues' and 'To Do' and allows filtering of issues from critical to less important ones; clicking on any issue yields issue information and a 'how to fix guide'. Multiple pricing plans, including free checks of up to 20 pages.

LinkLint - Open source Perl program checks local/remote HTML links. Includes cross referenced and hyperlinked output reports, ability to check password-protected areas, support for all standard server-side image maps, reports of orphan files and files with mismatching case, reports URLs changed since last checked, support of proxy servers for remote URL checking. Distributed under Gnu General Public License. Has not been updated for many years.

(Note: Many of the products listed in the Web Site Management Tools section include link checking capabilities.)

Return to top of web tools listing


HTML Validators

Total Validator - Downloadable Java-based desktop tool validates HTML / XHTML / WCAG / Section 508 / Links / Spelling; for Win/Mac/Linux. HTML validation against the W3C Specifications; accessibility validation against the WCAG (1.0 and 2.0) and US Section 508 standard; checks each page for broken links; spell checks (English, French, Italian, Spanish, German). 1-click validation if using the Firefox or Chrome extension. Free and pro versions.

Validity - Chrome extension for web page validations. Results shown in the Javascript console.

W3C Markup Validation Service - Online validation site for HTML, XHTML, SMIL, MathML, etc - run by the WWW Consortium (the folks who set web standards); handles one URL at a time. Can choose from among 40 character encoding types, and more than 25 document types/versions. Validate by URI, file upload, or direct input.

Nu Html Checker - Free online validation tool via URL or file upload; configurable encoding, schema, preset, parser, more. (X)HTML5 validation available at https://html5.validator.nu/. Source available at https://github.com/validator/validator RESTful Web service API available. Output available as HTML, XHTML, XML, JSON, GNU error format and plain text.

Free online HTML validator/linter - Validates HTML files for compliance against the W3C standards and performs linting to assess code quality against best practices. Find missing or unbalanced HTML tags in your documents, stray characters, duplicate IDs, missing or invalid attributes and other recommendations. Implementation is based on Validator.Nu. Requires uploading or pasting in your HTML

Html Validator - Firefox extension by Marc Gueury that adds HTML validation inside Firefox; can validate the HTML sent by the server or the HTML in memory. Details of the errors are seen when looking the HTML source of the page. Managed by a new tab in Developer tools: Html Validator. The validation happens only when the "Developer Tools" is open. Uses a new version of Tidy 5 compiled from C to Javascript, works on all platforms.

Site Check - Free online tool from Jens Meiert; type in one URL and automatically run HTML and stylesheet validators,accessibility assessment, link check, load time check, and more. Organizes access to a collection of free online web test tools. Also lists a wide variety of free online web analysis/development/test tools.

Rocket Validator - Service that automatically validates HTML, CSS and Accessibility on any size site. Only need a starting URL; a summary and detailed report is produced. Deploy hooks compatible with Heroku, Netlify, Github Pages, Engine Yard, Cloud66, and other hosting platforms. Can schedule for periodic automated validations. Can validate large sites and can submit an XML sitemap to specify a subset of pages to validate.

HTML Validator - Chrome extension, open source by Marc Gueury. The validation is done on your local machine inside Chrome. Error count of an HTML page is seen as an icon in the status bar when browsing. Details shown in developer tools. Based on HTML Tidy. Includes an automatic "Clean up" button that will attempt to provide a 'clean' version of the page. Also available for Firefox.

CSS HTML Validator - Downloadable HTML/HTML5 /XHTML/AMP/CSS/CSS3 Validator for Windows from AI Internet Solutions. Supports wide variety of standards; accessibility (508) checking; JavaScript linter; CSS/HTML/XHTML editor; uppercase/lowercase converter, link checking, spell checking. For Windows.

W3 Nu HTML Checker - Online HTML validation service run by the WWW Consortium (the folks who set web standards); handles one URL at a time.

W3C CSS Validation Service - Online CSS validation service run by the WWW Consortium (the folks who set web standards); handles one URI at a time; or upload file or validate by direct input.

Bing Markup Validator - Markup validator by Microsoft; requires (free) sign-in to BingWebmaster/Advertising account.

TIDY - Free utility as a console application for Mac OS X, Linux, Windows, UNIX, and more.; originally by Dave Raggett. For automatic fixing of HTML and XML errors, formatting disorganized editing, and finding problem HTML/XML areas. Available as source code or binaries.

Web Page 'Purifier' - Free on-the-web HTML checker by DJ Delorie allows viewing a page 'purified' to HTML 2.0, HTML 3.2, HTML 4.0 standards; perl source available.

(Note: Many of the products listed in the Web Site Management Tools section include HTML validation capabilities.)

Return to top of web tools listing


Web Accessibility Testing Tools

(This section is oriented to tools that focus on web site accessibility; note that other web testing tools sometimes include accessibility testing capabilities along with their other testing capabilities.)

Deque AXe - Free accessibility testing tool that runs in web browser - extension for Chrome or Firefox. Also available - download aXe-Core source code from GitHub repo. Supports IE, Chrome, Firefox, Safari. Other accessibility testing tools from Deque include: WorldSpace Comply - automated testing tool for performing enterprise-level accessibility audits, for compliance needs of organizations with large, dynamic websites, provides advanced reporting, monitoring, and management of accessibility issues against industry standards or customized guidelines; WorldSpace Attest - automated accessibility testing solution for developers - by integrating it into existing development and testing processes, can easily find and fix 50% of errors during development. Based on a powerful and low-impact JavaScript rules library - runs on your local development server in same browser as your functional or unit tests. Current framework integrations include Selenium, Cucumber, QUnit, and more.

AChecker - Free online tool checks single HTML pages for conformance with accessibility standards to ensure the content can be accessed by everyone. Can check by providing a URL or by pasting in HTML. Configurable options include: HTML Validator, CSS Validator, Guidelines to Check Against (such as WCAG2, Section 508, etc). Report formats: View by Guideline or View by Line Number.

Pa11y - Collection of open source accessiblity test tools by Team Pa11y. Pa11y runs accessibility tests on your pages via the command line or Node.js, so you can automate your testing process. Pa11y Dashboard is a web interface to the Pa11y accessibility reporter. Pa11y Webservice is a Node.js app that provides scheduled accessibility reports for multiple URLs. It runs Pa11y on a list of URLs, which you can update and query the results of via a JSON web-service. Pa11y CI is a CI-centric accessibility test runner, built using Pa11y; it runs accessibility tests against multiple URLs and reports on any issues.

ACTF aDesigner from Eclipse Foundation - Eclipse RCP application that is a disability simulator to help designers ensure that their content and apps are accessible and usable by the visually impaired. Also helps users to check accessibility of PDF documents and Flash content. It also has accessibility information (MSAA/IA2) inspection functions. For Windows.

Accessibility Developer Tools - Chrome extension from Google adds an Accessibility audit, and an Accessibility sidebar pane in the Elements tab, to Chrome Developer Tools. Audit results will appear as a list of rules which are violated by the page (if any), with one or more elements on the page shown as a result for each rule.

Compliance Sheriff - Tool for automatically testing site accessibility from Cyxtera Technologies. Includes checks against Web Accessibility standards, Mobile Web Best Practices and Mobile Accessibility guidelines. Report includes a 'health score', the top 10 issues detected by the scan, the 10 most affected pages, more. Report provides guidance for suggested prioritization for remediation efforts.

The Accessibility Viewer (aViewer) - Open source downloadable inspection tool by the The Paciello Group, for Windows. Displays the accessibility API information (MSAA, IAccessible2, UI Automation, ARIA, HTML DOM) exposed by web browsers to the operating system, and thus to any assistive technology (AT) such as screenreaders.

Automated Accessibility Testing Tool - Open source tool tests web applications regarding conformance to the Web Content Accessibility Guidelines (WCAG) 2.1. Provides an accessibility API and custom web application. Using the AATT web application, you can configure test server configurations inside the firewall, and test individual pages. Includes HTML CodeSniffer, Axe and Chrome developer tool with Express and PhantomJS, which runs on Node. For node applications, it can be integrated into NemoJS testing framework to run accessibility testing during automated unit testing.

Tenon - A web-based API suite from Tenon LLC that facilitates accessibility testing of web-based products and services. Tests are performaned via the API which can be integrated into your existing toolset/workflows - whichever IDE you use, or CMS you use, or automated build and deploy tool you use, or what you use for unit testing, acceptance testing, or issue tracking. Enables catching and fixing accessibility issues before they happen, not after, and allows you to release accessible code from the beginning. API can test using Document Source or URL.

Readability Test Tool - Free online site readability test from WebpageFX - just enter a URL, or paste in text. Provides a score for the most used readability indicators: Flesch Kincaid Reading Ease, Flesch Kincaid Grade Level, Gunning Fog Score, Coleman Liau Index, Automated Readability. Index (ARI), SMOG Index. Results include explanations of each item. Relates to Guideline 3.1 of the Web Content Accessibility Guidelines (WCAG 2.0).

Functional Accessibility Evaluator - Free online accessibility test tool from University of Illinois, based on the W3C Web Content Accessibility Guidelines (WCAG) 2.0 Level A and AA requirements. Configurable to use ruleset HTML5 and ARIA Techniques, or HTML4 Legacy Techniques.

Readability Test - Free online test tool from JuicyStudio - enter URL and site will assess readability based on Gunning Fog, Flesch Reading Ease, and Flesch-Kincaid reading level algorithms.

Image Analyzer - Free online test tool from JuicyStudio - enter URL and site will assess image width, height, alt, and longdesc attributes for appropriate values.

CynthiaSays Portal - Compliance Sheriff Cynthia Says Portal is a free online web content accessibility/508 validation tool meant for personal, non-commercial use; checks one page at a time. Designed to identify errors in content related to Section 508 standards and/or the WCAG guidelines. From Cryptzone North America Inc./Cyxtera.

WAVE - Free web accessibility evaluation online tool provided by WebAIM. Online evalutation tool for checking a page at a time. It is used to aid in the 508 web accessibility evaluation process. Rather than providing a complex technical report, WAVE shows the original web page with embedded icons and indicators that reveal the accessibility of that page. Also available is a WAVE Runner service, subscription WAVE API and a stand-alone WAVE API for easily collecting data on many pages. Also available is the WAVE Firefox and Chrome extensions for evaluation of web pages directly within your browser. Also see Popetech Web Accessibility and Reporting paid service which automatically scans/crawls web sites; based on WAVE; pricing based on pages scanned per month.

Color Contrast Analyzer - Free downloadable tool from the Paciallo Group to help determine the legibility of text on a web page and the legibility of image based representations of text, can be used as a part of web accessibility testing. It is primarily a tool for checking foreground and background colour combinations to determine if they provide good colour visibility. It also contains functionality to create simulations of certain visual conditions such as colour blindness. Determining "colour visibility" is based on the Contrast Ratio algorithm, suggested by the World Wide Web Consortium (W3C) to help determine whether or not the contrast between two colours can be read by people with colour blindness or other visual impairments. For Win and Mac platforms.

Color Contrast Checker - Free online Color Contrast Checker for accessibility from WebAIM at the Center for Persons with Disabilities at Utah State University (who also provide the WAVE Web Accessibility Evaluation tool). Enter foregroundand background colors and the site will report contrast ratio and pass/fail for normal text, large text, and graphical objects and UI components.

CheckMyColours - Free online tool by Giovanni Scala for checking foreground and background color combinations of a page's DOM elements and determining if they provide sufficient contrast when viewed by someone having visual color deficits. Based on algorithms suggested by the W3C.

Color Oracle - Free downloadable tool from Bernhard Jenny - color blindness simulator for Window, Mac and Linux. Shows in real time what people with common color vision impairments will see. Applies a full screen color filter to visuals you are designing – independently of the software in use.

JAWS - JAWS (Job Access With Speech) is screen reading software from Freedom Scientific; for Win platforms. Provides speech and braille output for the most popular computer applications. Can be used for Web 508 ccessibility testing.

Total Validator - Downloadable Java-based desktop tool validates HTML/XHTML/WCAG/Section 508/Links/Spelling; for Win/Mac/Linux. HTML validation against the W3C Specifications; accessibility validation against the WCAG (1.0 and 2.0) and US Section 508 standard; checks each page for broken links; spell checks (English, French, Italian, Spanish, German). 1-click validation if using the Firefox or Chrome extension. Free and pro versions.

NVDA - NonVisual Desktop Access (NVDA) is a free and open source screen reader for Win platforms developed by NV Access. Support for over 20 languages and the ability to run entirely from a USB drive with no installation. Can be used for 508 accessibility testing.

PDF Accessiblity Checker - Downloadable freeware app assists in checking for problems with PDF files on the web, from Access for All, a Swiss non-profit. PDF docs on the web often present challenges for the visually impaired. Supports both experts as well as end users conducting accessibility evaluations. Based on the Matterhorn Protocol (for PDF) which utilizes a collection of Checkpoints and Failure Conditions for accessibility assessments. For Win platforms.

Return to top of web tools listing


Web Services Test Tools

Rest-Assured - Open source Java DSL for easy testing of REST services. Provides several authentication mechanisms. Supports any HTTP method but has explicit support for POST, GET, PUT, DELETE, OPTIONS, PATCH and HEAD requests and includes specifying and validating parameters, headers, cookies and body easily.

Traffic Parrot - A stubbing, mocking and service virtualization tool from Traffic Parrot Ltd. that helps find more bugs by simulating hypothetical situations. Can be used for both manual exploratory and automated testing. Can manually craft the virtual service based on request/response pairs or create them by recording traffic between your app and the backend or third party system. Designed for automation with Selenium, JBehave, Cucumber, JUnit and similar. Designed to integrate with Continuous Integration environments (Jenkins, Teamcity).

HTTPDebugger - Debug HTTP API calls to a back-end and between back-ends. Doesn't change the browser's configuration for the proxy. Can display proxy-connected traffic. Edit and resubmit tweaked HTTP sessions back to your server, test/detect security problems in your code. Identify and eliminate integration issues with third-party systems. Measure the network performance of your application, isolate and fix performance bottlenecks. Enables decrypting of SSL traffic virtually from any browser or desktop application. Automatically respond to requests, simulate server responses, add/remove HTTP headers and change HTTP content. For Windows. Free for personal non-commercial use.

Karate - Open-source tool that combines API test-automation, mocks and performance-testing into a single, unified framework. Utilizes the BDD syntax popularized by Cucumber. Besides powerful JSON & XML assertions, can run tests in parallel for speed. Enables easy building of or re-use of complex request payloads, and dynamic construction of more requests from response data. The payload and schema validation engine can perform a 'smart compare' (deep-equals) of two JSON or XML documents, and you can ignore dynamic values where needed. Test execution and report generation feels like any standard Java project. Also available is a stand-alone executable for teams not comfortable with Java - just write tests in a simple, readable syntax - carefully designed for HTTP, JSON, GraphQL and XML.

API Fortress - API testing platform for REST and SOAP, web services, and microservices. Can generate a test from a spec file, payload, or recorded API traffic. Edit tests in your own IDE, the downloadable IDE Forge, or the simple drag-and-drop GUI. Execute tests automatically with APIs and the built-in scheduler. Run them individually, by tag, or by entire collections. Test results are available via a unified dashboard, or leverage APIs that allow all data to be exported to any platform. Run from the cloud, or in a container behind your firewall. Extensive APIs, works out-of-the-box with most existing systems and tools.

HTTPie - Open source python user-friendly command-line HTTP client with intuitive UI, JSON support, syntax highlighting, wget-like downloads, extensions, etc. Consists of a single http command designed for painless debugging and interaction with HTTP servers, RESTful APIs, and web services. Includes sensible defaults, expressive and intuitive command syntax, colorized and formatted terminal output, built-in JSON support, persistent sessions, forms and file uploads, HTTPS/proxies/authentication support, Linux, Mac OSX, and Win support. Plugins and documenttion. Created by Jakub Roztocil.

Frisby.js - Open source REST API testing framework built on node.js, Jasmine BDD framework, and Jest Javascript testing framework that makes testing API endpoints easy and fast. Has many built-in expect handlers, or define your own custom expect handlers. Can use the Joi data validation library for Javascript to set the expectation that the JSON body response from the HTTP call meets a defined schema. By Vance Lucas.

Talend API Tester - Chrome extension for HTTP and REST API Testing, from Talend Inc. Visually create and run single HTTP requests as well as complex scenarios. Main functions include: API Invocation and Interaction - through an intuitive browser interface, make calls to HTTP APIs to validate their functional behavior, testing different parameters and values without writing a program or script; Create and run unit tests as well as complex API scenarios decorated by assertions to validate your APIs; Variables can be passed from one response to the next request; API Automation - API scenarios and tests execution can be easily done with Maven plugin which you can integrate to your CI/CD. Save calls history, locally or to the cloud, and organize it in projects; build dynamic requests with custom variables, security and authentication.

Runscope Radar - API test automation service from CA Technologies (formerly Runscope Inc.) for automated testing and monitoring of APIs and backend services. Build tests that verify services are returning expected data and receive notifications when things go wrong. Script Engine uses JavaScript for constructing customized API tests and validating API responses. Multipleworldwide monitoring locations available.

Assertible - Tool for continuously testing your web services, from Assertible, Inc. HTTP requests are made to application's staging or production environment and assertions are made on the response to ensure APIs and websites are running as expected. Free and $paid options.

JSON Pretty Print - A simple online JSON pretty printer - just paste and click.

Bench Rest - Open source Node.js client module by Jeff Barczewski for easy load testing/benchmarking of REST (HTTP/HTTPS) API's using a simple structure/DSL. Can create REST flows with setup and teardown and returns (measured) metric (average, total, min, max, histogram, req/s) can be used with CI server. Ability to automatically handle cookies separately for each iteration; automatically follows redirects for operations; errors will automatically stop an iterations flow and be tracked. Allows pre/post processing or verification of data. Allow iterations to vary easily using token subsitution.

sinon.js - Standalone JavaScript library by Christian Johansen; supports test spies, stubs and mocks. No dependencies, works with any unit testing framework. A helpful library for unit testing your code. Has cross browser support and also can run on the server using Node.js.

Sandbox - Web services mocking - automatically generate mock REST and SOAP webservices, from specs or codify behaviour from scratch - start simple with JSON or XML canned responses. Services can be made "intelligent" so app under test can make API calls needed to get similar behaviour back as it would from the actual component. Debug API calls with request inspector, see exact request and response data, down to HTTP level. Fault injection to simulate real application behaviour. Use your Apiary, OpenAPI, WDSL, or RAML API documentation to auto generate mock webservices. Free for up to 5000 requests. Source also available at https://github.com/getsandbox/sandbox on Github.

Dyson - Fake API server as Node app. Enables defining of JSON endpoints based on a simple template object. Capabilities include dynamic responses and status codes based on request path, GET/POST parameters, Cookies; includes random data generators. Supports GET, POST, PUT, DELETE, PATCH (and OPTIONS); CORS; delayed responses; required parameter validation.

Canned - Fake API server as Node app, by Philipp Fehre, supports basic REST-APIs; maps a folder structure to API responses.

Mocky - Free service - enables basic mocking of your HTTP responses to test your REST API; can also simulate response delays of up to 60 seconds; advanced mode enables custom headers.

Mockable - Configurable service to mock out RESTful API or SOAP web-services - enables quick defining of REST API or SOAP endpoints, and have them return static or dynamic JSON or XML data. Comprehensive Administration API - Integrate build tools with the service Mockable; admin is programmable. Control mocks using the REST API - provides 100% of the features of Mockable. Import from your API documentation straight into Mockable online - supports many well-known API description: RAML, Apigee, Swagger, Mashable for REST mocks. Import from WSDLs for SOAP mocks. Namespace aware - have your mocks on your own domain. Each space serves a domain on mockable.io. You can have as many spaces (domains) as needed. Mocks can also be served on your company DNS domain. Free and paid account types.

MockServer - Open source tool by James Bloom enables mocking of any server or service that you connect to over HTTP or HTTPS, such as a REST or RPC service. Useful for testing to easily recreate all types of responses. Isolate the system under test to ensure tests run reliably and only fail when there is a genuine bug, not due to dependencies and irrelevant external changes such as network failure etc. Set up mock responses independently for each test to ensure test data is encapsulated with each test, easily maintained, and avoid tests dependent on precursor tests. Enables more efficient development by providing service responses even if the actual service is not yet available or is still unstable. Available as: stand alone fully contained Netty web server, a deployable WAR that runs on any JEE web server, a fully encapsulated Docker container, a maven/npm/Grunt plugin, or a Homebrew package. Or build and run MockServer directly from source code.

WireMock An open source java library for stubbing and mocking web services, initially created by Tom Akehurst. Unlike general purpose mocking tools it works by creating an actual HTTP server that your code under test can connect to as it would a real web service. Supports HTTP response stubbing, request verification, proxy/intercept, record/playback of stubs and fault injection. Runs in unit tests, as a standalone process or as a WAR app; configurable via a fluent Java API, JSON files and JSON over HTTP. Other capabilities include record/playback of stubs and fault injection.

REST-driver Open source Test Driver in java to test your RESTful services and clients. Includes 2 libraries: a REST server driver - for testing your RESTful service, and a REST client driver - for testing your RESTful client & mocking remote services.

Parasoft SOAtest - Web services test tool from Parasoft. For RESTful web services, SOA web services, other microservices such as Kafka, RabbitMQ, WebSockets, etc. Data-driven testing through data sources such as Excel, CSV, DB queries, etc. Handles more than 120 message types.

Postman - Free app for Mac, Windows, Linux or as Chrome extension to create/test API requests quickly. Formatted API responses for JSON and XML; HATEOAS support; image previews; request history; basic and OAuth 1.0 helpers; key/value editors for adding parameters or header values -works for URL parameters too. Use environment variables to easily shift between settings - good for testing production, staging or local setups. Run automated tests using the Postman collection runner. Free, Pro and Enterprise versions available.

REST Test - An open-source native in-browser tool for testing REST/CORS services. Builds on jQuery and Bootstrap. by Jeroen. Requires browser with HTML5 support.

SoapUI - Free open source source desktop app from SmartBear Software for inspecting, invoking, developing, simulating/mocking and functional/load/compliance/automated testing of SOAP-WSDL and RESTful web services over HTTP. Testing can be done both interactively in soapUI or within an automated build/integration process using the soapUI command-line tools. REST discovery via recording interactions with API and automatically create test suites for an API based on the interactions. Data driven testing via the DataSource TestStep to read and loop test data from external sources, including Excel, XML, JDBC, and Files. Mocking for both REST and SOAP APIs. Implement an entire MockService and deploy to a standard servlet container - Apache Tomcat, GlassFish, or any other - using the advanced Deploy As War feature. SoapUI Pro paid version with more extensive features available also.

LoadUI Pro - Load testing tool for for REST & SOAP APIs, Databases, and Microservices from SmartBear Software. Simulate traffic via load agents that can generate load from Windows or Linux-based nodes using a mix of either on-premise or cloud traffic. Virtualize external APIs that don't allow or handle load tests very well. Can reuse existing SoapUI Pro functional tests. For Win, Linux, OSX.

SOAPSonar - Web services client simulation for service testing - for functional, automation, performance, compliance, and security testing; from CrossCheck Networks. Flexible Test Types - JSON, SOAP, XML, EDI, Batch, REST, etc - all variable-enabled and can be linked together for complex business scenario testing. Automation framework for creation and enforcement of rules for assessing pass/fail characteristics of each transaction - includes database and environment. Concurrent Virtual Clients - independent loading agents aggregate statistics for througput, latency, and TPS. Ramp-up, ramp-down, and weighted scenarios. Vulnerability Analysis includes dynamic XSD mutation security testing with automatic boundary condition testing. Risk assessment and risk mitigation extensible rule framework. Available as free personal edition, or enterprise edition.

ServiceV Pro - Dynamic mocking and service virtualization tool from Smartbear Software. Decouple your own process from time constrained access to external systems, quickly isolate bad actors and poor performers during integration and load testing. Enables developing and testing before the actual API is deliverable, enables testers to have control over simulated responses and error handling, and better deal with versioning problems and speed up resolution during continuous integration cycles. Supports HTTP, REST, SOAP, JMS, JDBC, more.

HTTP Master - Downloadable web development and test tool from Borvid, oriented to REST web services and REST API applications. Capabilities include: dynamic parameters of various data types to create batches of different API requests, various validation types and advanced validation expressions, support for the most common REST methods, validation of output data for popular REST formats, viewers for REST response data. Free 'Express' edition available. For Windows.

Return to top of web tools listing


Cross-Browser Testing Tools/Services

Note that many tools/services in the 'Web Functional/Regression Test Tools' section also have cross-browser testing capabilities

LambdaTest - Cloud-based cross-browser compatibility testing tool from Lambda Computing Inc. For live manual testing or running Selenium automation testing scripts on a scalable Selenium Grid online. Desktop sessions run on real browsers with real OS's powered by real machines. Mobile browsers run on emulators. 2000+ browsers, browser versions, operating systems, devices, and resolutions for Win, Mac, Android, iOS. Full access to download and upload functionalities, all browser settings. Full access to browser extensions and extension installations. LambdaTest online Selenium Grid supports all Selenium supported languages.Selenium Grid can be used to perform automation testing from any Selenium supporting automation framework like TestNG, Protractor, MUnit etc. LambdaTest restful API enables automation of your continuous testing workflow. Fetch test details such as build test status, individual test status, test run time, test logs, command by command screenshots, and more to build robust test reports. Plugins for Jenkins, Teamcity, Travis CI and Bamboo. Free plan available to run one session at a time.

Sauce Labs - Online service from Sauce Labs enables cloud-based testing on hundreds of real and VM-based devices/browsers/OSs/versions for Selenium Webdriver/SeleniumRC/Appium/Espresso/XCUITest, JS unit test automation, Appium mobile native/web/hybrid app test automation, and manual testing. Reports can include metadata, access to log files, list of commands and responses, screenshots, screencast, etc. Visual regression testing capabilities. Access to a live remote desktop session while running tests, can breakpoint tests to enable stopping/investigating problems. SauceConnect available for secure tunneled testing of local or firewalled sites. Plugins available for Travis, Jenkins, Bamboo, more.

BrowseEmAll - Browsers and Mobile Simulators in fast desktop application from Position Fixed UG. For all major browsers. Keeps track of new browser releases and updates. Reports contain browser specific full-page and original-size screenshots. See and interact with multiple different browsers side by side - all Browsers stay fully interactive. Navigate and reload in all browsers simultaneously. Capabilities include Selenium integration. App runs on Win platforms.

Microsoft Free Cross Browser Test Tools - 1) IE VM's: Test MS Edge and IE8 through IE11 using free virtual machines you download and manage locally. Available for Win/Mac/Linux and VirtualBox, Vagrant, VMWare, HyperV, VPC, more. (Note: downloads are of course very large.) 2) Free testing of Edge via Browserstack - No downloads required, test Microsoft Edge from the cloud. 3) Free BrowserStack-based screen shots for site rendering comparisons. 4)webhint linting tool for the web - checks accessibility, 'interoperabilty', performance, apple touch icons, 'Strict-Transport-Security' response header.

Browserling - On-the-web cross browser testing tool from Browserling Inc. provides unlimited browser sessions and SSH tunnels for multiple versions of Chrome, Firefox, Safari, Internet Explorer and Opera. Enables interactive cross-browser testing; fully interactive sessions, not static screenshots; powered entirely by canvas and javascript. Reverse-proxy your localhost into Browserling with Browserling ssh tunnels - just copy and paste an ssh one-liner from the UI. Free and $paid versions available.

Gridlastic - Cloud based selenium grid cross-browser testing tool from Gridlastic LLC that enables launching your own selenium grid in any Amazon data region. With 1 click you get an instant selenium maintenance-free auto-scaling cross browser testing infrastructure. The grid environment is updated regulary to support new browsers and selenium versions. Videos of every test are available for debugging.

CrossBrowserTesting - Test your website on a wide variety of real browsers and real devices; over 2000 combinations of real browsers, OSs, and devices - not emulators; including iOS, Android, Windows, Mac and more. Capabilities include scrolling and swiping, use of native browser debugging tools and consoles; record and track network logs for performance. Render your site across as many browsers as you’d like with automated screenshots. Compare layouts side-by-side. Works with selenium and Appium automation. Can work with test sites that are behind firewalls. From Smartbear Software.

Lunascape - A free 'triple engine' web browser from Lunascape Corp. that includes the three most popular rendering engines Trident (IE), Gecko (Firefox) and Webkit (Chrome and Safari). By clicking the smart engine-switch button next to the address bar, a user can switch rendering engine for any page, enabling running and testing of a website in multiple rendering engines. Comparisons can be made side by side with the Cascade view/tiled windows. Also included is a 'switch user agent' capability. Supports add-ons of IE and Gecko (Firefox), plus add-ons made specifically for Lunascape. For Windows platforms.

BrowserStack - Cloud-based testing on real browsers for hundreds of desktop/mobile/tablet browser-platform combinations. Capabilities include selenium automation integration, tunneling to any local server environment, HTTPS. Access to 2000+ browsers and real iOS and Android devices. Stacks include a wide variety of developer tools. Debuggin capabilities include text logs (steps executed during the test), visual logs (screenshots), console logs (the browser’s console output), network logs (performance data like network traffic, latency, etc.), video recordings, Appium logs, and raw system logs. Integrations with every major CI/CD tool including Jenkins, TeamCity, etc.

IEVMS - Open source multi-IE version cross browser VM tool from Greg Thornton. Microsoft provides virtual machine disk images to facilitate website testing in multiple versions of IE, regardless of the host operating system. With a single command, you can have IE6, IE7, IE8, IE9, IE10, IE11, and MSEdge running in separate virtual machines. Requires Virtual Box, Curl, Linux.

TestingBot - Cloud-based automated cross-browser testing service from TestingBot - utilize Selenium tests to run in the cloud on the TestingBot grid infrastructure. Compose a Selenium test with simple commands. Includes capability to run via a provided ssh tunnel allowing tests behind a firewall. Also allows running tests at a specific time and interval, with failure alerts. Infrastructure includes many browsers, browser versions, OS platforms; run mobile tests (Android or iOS) using Appium; run tests on real devices. Includes capabilities for headless testing and record/playback. Manual testing capability also.

Turbo - Turbo (formerly Spoon) is a lightweight, high-performance container platform for building, testing and deploying applications and services in isolated containers. Containerized applications can then be run on any Windows machine that has Turbo installed. The runtime environment of Turbo containers is supplied by the Turbo Virtual Machine or SVM, a lightweight implementation of core operating system APIs, including the filesystem, registry, process, and threading subsystems. Turbo overhead is generally negligible. For manual browser testing, you can run any version of any browser in a container or build a custom browser container with components like Java and Flash. Run development code in a pre-packaged, isolated environment with software-configurable networking. Rapidly rollback changes and execute tests across a span of application versions and test environments. Test in multiple client, server, and browser environments concurrently on a single physical device.

Utilu - Free utilities from Utilu that contain collections of standalone versions of IE or Firefox browsers; multiple versions can be used at the same time. Utilu Mozilla Firefox Collection contains more than ten versions of Firefox (English versions only); also includes the Firebug and Web Developer add-ons and Flash player; configurable to install only specified desired version. Supports upgrading - no need to uninstall a previous version before installing a newer version. Utilu IE Collection contains more than ten versions of Internet Explorer (English versions only); configurable to install only specified desired version; original version number is shown correcty in the User Agent string; version number also shown in window title; includes the IE Developer Toolbar.

Multi-Browser Viewer - Downloadable automated cross browser testing solution from Position Fixed UG, includes a wide variety of standalone virtualized browsers, multiple standalone mobile/tablet browsers or emulators, wide variety of screen capture image browsers. Enables debugging your site in iPhone, iPad and Android emulators with landscape/portrait toggles, developer tools and built-in video recording. Screenshot comparison function ('Onion Skin' or 'Side-by-Side'). Capabilities include Record/playback, MultiBrowser Test API for custom scripting. Each browser is virtualized into a single exe, enabling you to run multiple web browsers side by side locally on a single PC. Can run different versions of each browser simultaneously. Simulate mobile network conditions (offline/3G/4G/etc.). Integrated screenshot comparison tools, assess differences visually with onion skin and animated overlay screenshots comparisons. Preview web site across multiple devices and resolutions from iPhones to desktop computers in a single click.

IETester - Free browser compatibility checker from Core Services, for Internet Explorer Versions from 5.5 to 11. WebBrowser that allows you to have the Trident rendering and javascript engines of IE11, IE10, IE9, IE8, IE7 IE 6 and IE5.5 on Windows 8, 7, Vista and XP, as well as the installed IE in the same process.

IE Netrenderer - Free site allows you to check how a website is rendered by Internet Explorer from current versions back to 5.5, as seen from a high speed datacenter located in Germany. Just type in a URL. Able to process a large number of capturing jobs in parallel and in realtime, making for fast service. Targeted to web designers working on Mac and Linux, enabling verification of web designs natively on IE versions without the need to have Windows PCs. From GEOTEK Netzwerkservice Berlin.

Litmus - Cross-browser testing service from Litmus Software, Inc.; oriented to html email testing; but also does 'landing page' cross browser testing for multiple web browsers.

Return to top of web tools listing


Web Functional/Regression Test Tools

Note that some tools in the this section also have cross-browser testing capabilities and some have visual regression testing capabilities. (Also see the 'Cross-Browser Testing Tools/Services' section and the 'Visual Regression Testing tools' section.)

Cypress - Downloadable front end web test automation tool; install via npm, yarn, or direct download. No servers, drivers, or any other dependencies to install or configure. Does not use Selenium or WebDriver; leverages jQuery’s selector engine. Automatically waits for commands and assertions before moving on. Can automatically balance your spec files and run your tests in parallel across available machines when run in Continuous Integration. Readable error messages help you to debug quickly. Test Runner is free/open source downloadable; Dashboard Service web app providing video recording, screenshots, logs for tests run in CI - has free and paid tiered levels. For Mac, Linux, Win platforms.

MABL - An automated testing service powered by machine intelligence, from mabl, Inc. Mabl can execute default tests that apply to most web sites/apps. To complete these tests, mabl only needs to know the URL and, if applicable, login credentials for the app. The default tests are smart enough to figure out how to log in and traverse links for most applications. Beyond the default tests, mabl can be trained how to test an app using the Chrome Extension. Mabl accesses your app via Chrome browser sessions running in compute containers and virtual machines hosted on cloud infrastructure. It follows journeys to complete specific operations, captures the output, processes the results, and feeds information and insights back to you via the mabl application. When you create an application, mabl adds two default journeys and corresponding plans automatically. The first journey is a basic smoke test that visits the base URL of your environment and logs in, if applicable, and that journey is tested every 30 minutes or at every deployment to a particular environment. The second journey is a crawl through your entire application, following up to 50 layers of links within your domain. Includes cross-browser testing, PDF validation, email testing, API testing.

Testsigma - A unified platform for Web, iOS & Android Apps and API automated testing, from Testsigma Inc. Automated tests can be executed on a massive device cloud (Testsigma Labs) also on third party cloud platforms like Sauce Labs and BrowserStack and local physical devices. Does not require any installation. Complex automated tests can be written in simple English without coding and run on multiple device/OS/browser combinations in parallel. Capabilities include centralized object repository, AI-driven maintenance, data driven testing, integrations with CI/CD tools, detailed comprehensive reports (inluding videos, screenshots, error logs) of each test environment, Custom Functions for custom requirements, access levels based on user roles, more.

Jest - Open source JavaScript Testing Framework with a focus on simplicity. Works with projects using: Babel, TypeScript, Node, React, Angular, Vue and more. Aims to work out of the box, config free, on most JavaScript projects. Tests are parallelized by running them in their own processes to maximize performance. Runs previously failed tests first and re-organizes runs based on how long test files take. Can generate code coverage data - no additional setup needed. Uses a custom resolver for imports in your tests enabling mocking of any object outside of your test’s scope. Can use mocked imports with a rich Mock Functions API to spy on function calls with readable test syntax. From Facebook.

Appvance IQ - Utilizes 2 approaches: a visual script writer enabling creation of test scripts without coding; and machine learning-based automatic production of scripts based on a thorough mapping of the application and an analysis of actual user activity. Executes a wide variety of tests across functional, unit, performance, load and security testing. Works on-premises behind firewall or in cloud environment, or hybrid mode. For web and mobile apps. From Appvance, Inc.

TestProject - Free end-to-end test automation platform for web, mobile, and API testing on all operating systems. Supports Web, Android and iOS tests for all operating systems (Win, Linux and macOS). Supports Chrome, IE, Edge, Safari, Firefox browsers; Chrome browser on Android devices; Safari browser on iOS devices. Requires download and install TestProject Agent, a cross-platform local desktop automation component that communicates with TestProject’s cloud testing repository and is responsible for local test execution. Supported by the test automation community, built on Selenium and Appium. The Agent is pre-packaged with all Selenium and Appium dependencies needed to get started. The shared test repository enables sharing of and utilizing reusable actions worldwide with other test automaters. Create automation jobs and schedule executions to run on any local or remote environment with a single click. Utilize the RESTful API to easily trigger automation, send email notifications and tie into webhooks from other tools. Also includes Smart Test Recorder, community addons library, reporting capabilities ; View error messages, screenshots, execution durations and quickly identify failed steps.

Puppeteer - Open source Node library which provides a high-level API to control Chrome or Chromium over the DevTools Protocol. Maintained by the Chrome DevTools team. Runs headless by default, but can be configured to run full (non-headless) Chrome or Chromium. Most things that you can do manually in the browser can be done using Puppeteer, such as generate screenshots and PDFs of pages; crawl a SPA (Single-Page Application) and generate pre-rendered content (i.e. "SSR" - Server-Side Rendering); automate form submission, UI testing, keyboard input, etc. Has event-driven architecture - no need for sleep calls in puppeteer scripts.

CloudQA TruRT - Automation tool built on top of Selenium for high volume parallel, scalable and collaborative testing in cloud. Tests can run in Linux and Windows on Firefox, Chrome, IE. Test recorder runs as an extension in Chrome. Handles nested iFrames and dynamic elements. Set assertions. Automatic waits for dynamic and asynchronous elements. Smart CSS selector algorithm for elements with changing IDs. Manage tests with visual editor. Automate complex steps with JavaScript & select variable data sets. Switch between environments & browsers with a button click. Out of the box support for legacy & latest web technologies including Ember, React, Angular, Knockout and more. See live execution of your tests, share summary and detailed reports with screenshots. Capabilities include API testing. Also available are TruLoad for load testing and TruMonitor for site monitoring.

Codeception - Open source full stack testing framework for PHP. For writing acceptance, functional and even unit tests. Powered by PHPUnit. Associated libraries/plugins include CodeceptJS an acceptance testing framework for NodeJS, AspectMock mocking framework, Verify for BDD assertions, VisualCeption for visual regression testing, AssertThrows to handle exceptions without stopping tests, c3 for code coverage, and other associated libraries/plugins.

Leapwork Automation Platform - Test automation tool for testing of web apps, Windows apps and more, from Leapwork LLC. Test cases are built as flowcharts on a design canvas by combining building blocks including all the logic needed for test automation. The user can reuse sub-flows and data-driven patterns using databases, spreadsheets, web services etc. as part of the automation case design. With C# and JavaScript building blocks, can insert code to automation flows if desired; also available is a fully documented REST API. Test runs are documented via video recording of the entire run, a debug version of your design canvas, and an activity log with debug information from the building blocks; all are correlated and can be inspected simultaneously.

Katalon Studio - Free test automation tool from KMS Technology, Inc; supports Win and Mac, most browsers; web, mobile, API testing. Provides project templates for organizing test cases, object repository and keywords. Easy to integrate with Jenkins, GIT and JIRA with native plugins. Can record/generate tests automatically. Scripts can be edited or created in Groovy. Runs test cases or test suites using multiple configurations and data sets. Dynamic failure handling and auto re-execution. Includes run-time rules to automatically handle complex execution flows. Multiple report formats. Advanced logging, debug data and screenshots.

Nemo.js - Open source Node.js solution for running mocha-based selenium-webdriver tests. Nemo combines mocha.js, the confit configuration engine, plugin architecture, and flexible parallel options to the selenium-webdriver bindings for node.js. Supported by Paypal.

Protractor - Open source test automation framework for Angular and AngularJS apps. A Node.js program built on top of WebDriverJS, which uses native events and browser-specific drivers to interact with your application as a user would. Can automatically execute the next step in your test the moment the webpage finishes pending tasks, avoiding waits for your test and webpage to sync. Supports two BDD test frameworks out of the box: Jasmine and Mocha. Can also support Cucumber and Serenity/JS.

WebdriverIO - An open source testing utility for Node.js. Enables easy writing of selenium tests with Javascript in your favorite BDD or TDD test framework, which will run locally or in the cloud using Sauce Labs, BrowserStack or TestingBot. Lets you control a browser or a mobile app with minimal lines of code. Removes the cumbersome setup work and manages the Selenium session for you. The test runner comes with a variety of hooks that allow you to interface into the test process in order to e.g. take screenshots if an error occurs or modify the test procedure according to a previous test result. This is used by WebdriverIOs services to integrate your tests with 3rd party tools like Appium. Cucumber, Jasmine and Mocha+Chai are supported by the configuration wizard.

Intern - An open source test system for JavaScript designed to help you write and run consistent, high-quality test cases for your JavaScript libraries and apps. Write tests in JavaScript and TypeScript. Run tests from browser, in Node.js, or against many browsers & platforms at the same time with the Intern test runner. Get full code coverage reporting. Can be used to test Web pages generated by server-side languages (like Java, PHP, or Ruby), native or hybrid iOS, Android, and Firefox OS applications, and any javascript code. Enforces only a basic set of best practices designed to ensure your tests stay maintainable over time. Extensible architecture. Designed to work out-of-the-box with CI services like Jenkins and Travis CI.

MarathonITE - Marathon Integrated Testing Environment is a cross-platform test automation framework for Web applications as well as Java/Swing and Java/FX. Based on Marathon, Ruby and Selenium. Has an inbuilt script recorder - creates test scripts in Ruby. Capabilities include extract-method refactoring, data driven testing and object map maintenance. Reporting capabilities based on Allure reporting framework.

Enzyme - JavaScript Testing utility for React, from Airbnb. Enzyme's API is meant to be intuitive and flexible by mimicking jQuery's API for DOM manipulation and traversal, and is meant to be compatible with all major test runners and assertion libraries; documentation and examples use mocha and chai.

Expecco - A component based, modular test and quality assurance platform from eXept Software AG, for web, mobile, Embedded Systems, SAP, and other technologies. Tests are graphically formulated as UML activity diagrams at a high abstraction level; drag-and-drop for users without programming knowledge. Extensive libraries provide basic function modules; each module contains functionalities that have already been implemented and can be executed directly. Test reports can be customized and can specify output formats – PDF, HTML, XML, CSV, text, etc. Existing test and quality management systems can be conveniently integrated via the expecco API.

OpKey - Test automation tool from Smart Software Testing Solutions Inc. enables test teams to automate their web apps, mobile apps, and web services and integrate seamlessly with their Devops without requiring a coding background. Built-in test recorder, object repository, data repository. Smart Recorder for All Browsers. Secured Tunnel to test applications hosted behind your firewall. Test editor to create your new test or modify existing one with more than 400 Keywords to perform all possible actions on your application. Execute OpKey tests on over 50 OS & browsers through OpKey Cloud or on mobile devices via pCloudy. Gherkin support and integrations with JIRA, Jenkins, Bamboo.

Test Architect - Keyword-driven test automation tool from LogiGear Corp. Supports IE/Edge, Firefox, Chrome, Safari, Win, Mac, Linux, Android, iOS, REST, SOAP, XML, JSON, image-based comparison testing, data-driven testing, BDD testing and a wide variety of 3rd party controls. Intuitive spreadsheet IDE. Command-line execution, remote execution, parallel execution, distributed testing. Includes 400+ platform-agnostic, pre-coded actions that can work with multiple OSes, GUI apps (desktop, web), non-GUI apps (CLI, DB, Web Services), images and more. Includes capabilities for Selenium WebDriver integration and web Services testing - REST, SOAP, XML, JSON. User-defined actions can also be scripted in C#, Java or Python.

NighwatchJS - Open source automated testing framework for web applications and websites, written in Node.js and using the W3C WebDriver API (formerly Selenium WebDriver). It is a complete browser (End-to-End) testing solution which aims to simplify the process of setting up Continuous Integration and writing automated tests. Can also be used for writing Node.js unit tests.

QF-Test - Cross-platform software tool (Windows, Linux/Unix, macOS) for cross-browser test automation of web-based applications and Java apps; from Quality First Software GmbH. Includes test management capabilities, capture/replay mechanism, intuitive user interface and extensive documentation, reliable component recognition and can handle a wide variety of complex and custom GUI objects, integrated test debugger and customizable reporting. Image testing/comparison: Multiple algorithms also for fuzzy comparison. Convenient diff view for validation of deviations. Supports IE, Firefox, Chrome, Safari and Edge via WebDriver; headless browser for Chrome and Firefox. Supports HTML, AJAX: HTML5, AJAX: Angular, Smart (GWT), GXT/ExtGWT, ExtJS, ICEfaces, jQuery UI, jQueryEasyUI, Kendo UI, PrimeFaces, Qooxdoo, RAP, RichFaces, Vaadin, ZK. Scripting languages Jython, Groovy and JavaScript

Qualitia - Test automation tool provides step-wise approach to quickly build test automation and handle complexities easily with unique criptless approach. Provides point and click mechanism to identify objects for Selenium, and provides object integration with QTP/UFT. For Selenium, objects are learned based on list of locator types including ID, Name, Xpath or Link. Default priorities are set based on best practices; however flexibility in altering defaults is available. Includes test case management capabilities. For Win, Linux, Mac and Unix.

SideeX - A free Chrome/Firefox add-on, functions as an extended version of Selenium IDE with expanded record-playback automation capabilities. From the Software Engineering Lab at National Cheng Kung University, Taiwan. Capabilities include auto-generation of: commands for selecting unnamed windows and inner frames, commands for closing new popup windows, mouseOver and mouseOut commands, scrolling commands, commands for autocomplete feature, and more. Auto-wait for: AJAX requests completion, page loading completion, DOM change completion.

Gauge - Open source light weight cross-platform test automation tool for authoring test cases in business language, from ThoughtWorks. Replaces previous Twist tool. Has a rich markup based on markdown; support for writing test code in any programming language (currently java, ruby, C#) Modular architecture with plugin support. Supports External Data Sources, IDE's (including Eclipse and IntelliJ). Report plugins include HTML Report Plugin, XML Report Plugin.

FRET - FRET (FRont End Testing) puts a user friendly GUI in front of Selenium to automated and report on web tests. Screenshots can be taken at any step(s) in tests. Simplified automation setup using predefined commands. Test runs use real browsers and can be set to run a predefined intervals. Each test can have up to 13 steps. For Firefox, IE and Chrome.

Certify - Test automation management tool from WorkSoft, Inc. For managing and developing test cases and scripts, and generating test scripts. For automated testing of Web, client/server, and mainframe applications.

EveryStep - Downloadable point-and-click automation scripting tool from Dotcom-Monitor Inc. After recording a script it can be played back in the script editor to check for and resolve errors. Scripts can be saved to a local file and manually edited to inject certain verification steps, add time delays, timeout counters, or screen shots via the script editor and add the necessary tasks. The script player can automatically replay at set configurable intervals from a local machine. Playback results are recorded on your local machine, and you can set the player to send email alerts if any errors are detected. Scripts can also be uploaded and run from Dotcom-Monitor's locations around the world. Reports include overall percentages of page load speed for each type of element, fastest/slowest loading elements, and a waterfall chart detailing the progress and speed of each element in real time. For Win/IE. Free, pro, and enterprise versions available.

RoutineBot - A functional test automation tool from AKS-Labs that enables creation and execution of tests based on image patterns. Can use manual script design or automatic script recording. Supports Pascal, JavaScript and Basic scripting languages; supports a variety of events - mouse events (clicking, moving), keyboard events (entering text), taking screenshots, loading and saving data, downloading files, working with applications and windows; supports wide range of functions to log events which includes advanced htm log with screenshots of test cases.

Usetrace - Software testing service designed for agile, continuous development environments, from Usetrace Ltd. Automate functional end-to-end UI testing on web sites/apps; includes regression testing, monitoring and performance, and load testing. Automated tests are called traces, which are visual descriptions of the user paths through the application under test. Traces are made by interacting with your site as your users would. Usetrace records these interactions into modules that can be reused, building a highly maintainable automation test suite for your app's UI. Capabilities include automated screenshots, extendable with javascript, integrates with Jenkins and other CI systems, parameterizable (test data), record/playback, test reporting to email and chat. Tests on Chrome, Firefox and Safari.

SlimerJS - Open source scriptable browser for web dev/testing - enables web page interaction via an external JS script; by Laurent Jouanneau. Useful for doing functional tests, page automation, network monitoring, screen capture, etc. Similar to PhantomJs (which is built on top of Webkit), except that it runs on top of Gecko, the browser engine of Mozilla Firefox, instead of Webkit, and is not yet truly headless. In your JavaScript you can use modules, providing access to many APIs enabling read/write files, act on web page like a user, take screenshots; listen for network events to do network monitoring during the load of a webpage. Can execute CommonJS modules, so main scripts can be written with CoffeeScript as well. Page rendering in SlimerJS is strictly identical to the rendering in Firefox since it runs on top of Gecko.

SeLite - Open source extension of the Selenium IDE that enhances automation of Firefox; by Peter Kehl. It enables functional testing of web applications with an isolated test database, (isolated from the DB of the tested application). Other enhanced capabilities include: management and customisation of test configuration settings, extra test actions (e.g. random input generators), loading user extensions and their dependencies in order (ExtensionSequencer), making a snapshot and reverting test DB and app DB directly from Selenium IDE. Requires Firefox, Selenium IDE and SeLite AddOns.

TestCafe - Open source node.js tool to automate end-to-end web testing. Runs on Windows, MacOS, and Linux. Supports desktop, mobile, remote and cloud browsers (UI or headless); cross-browser. Does not require webdriver or Selenium - uses a URL-rewriting proxy which allows it to work without the WebDriver. The proxy injects the driver script that emulates user actions into the tested page. Write tests in JavaScript or TypeScript. TestCafe's Test API includes a high-level selector library, assertions, etc. You can combine them to implement readable tests with the PageObject pattern. Plugins provide custom reports, integration with other tools, launching tests from IDE, etc.

TestCafe Studio - Functional web testing framework and IDE from Developer Express Inc., built on top of TestCafe; can run tests in any browser that supports HTML5 (including IE9+, Chrome, Firefox, Safari, Opera). OS agnostic - run tests on Win, Mac or Linux. Run tests on remote computers and mobile devices, in multiple browsers and on multiple machines simultaneously. Provides wrapper-free access to DOM via jQuery or a browser's API - does not require WebDriver or other tools. Ships with powerful built-in visual test recorder, and can execute generated tests on demand or as part of a CI system. Tests can be edited or written with the provided IDE in JavaScript and TypeScript.

ZapTest - Offers true cross/platform cross/environment test automation for web as well as mobile, desktop, and API testing. From Zap Technologies. With 1Script scripting user can automate any GUI on any OS; execute it throughout these environments with same script; execute same script at once across different workstations/mobile devices. For Windows, Mac, Linux, iOS, Android, etc. Native Integration with many ALM Tools: JIRA, HP ALM, VSTS, TFS, and CA Rally. Easy integration with source Automation Servers: JENKINS, Bamboo and others. Free and Enterprise versions.

HTTP Master - Downloadable web development and test tool from Borvid, oriented to REST web services and REST API applications. Capabilities include: dynamic parameters of various data types to create batches of different API requests, various validation types and advanced validation expressions, support for the most common REST methods, validation of output data for popular REST formats, viewers for REST response data. Free 'Express' edition available. For Windows.

CasperJS - Open source navigation scripting & testing utility written in Javascript for PhantomJS (WebKit) and SlimerJS (Gecko/Firefox) headless browsers. Eases the process of defining a full navigation scenario and provides useful high-level functions & methods for doing common tasks such as defining & ordering browsing navigation steps, using forms and links, capturing screenshots of all/part of a page, testing remote DOM, logging events, downloading resources (including binary), writing functional test suites, saving results as JUnit XML, scraping Web contents. Written on top of PhantomJS, a node-independent Qt/WebKit based library. Will not work with node - to drive CasperJS from node, use SpookyJS. For OSX, Win, Linux. Requires PhantomJS, Python.

Tricentis TOSCA - Integrated functional testing and test management tool from Tricentis Technology & Consulting GmbH., for manual and automated testing, UI and non-UI, Mobile/Smart Device, Cross-Browser, SAP as well as Data Warehouse and BI Testing. Delivers a single administrative interface for manual, semi-automated, and fully automated test cases. Provides comprehensive integration with SAP, popular ALM systems, like HP, IBM, Polarion, popular defect tracking solutions and others.

GEB - Open source cross browser automation tool leverages the WebDriver library for browser automation - Works with any browser that WebDriver works with. Supports remote and headless browsers. JQuery-like API. Supports the Page Object pattern, leveraging Groovy's DSL; provides integration modules for popular testing frameworks such as Spock, JUnit, TestNG, and Cucumber (via Cuke4Duke).

Mink - Open source PHP Web acceptance testing framework library. Mink driver is a simple class implementing Behat\Mink\Driver\DriverInterface. (Behat is an open source BDD tool in PHP which comes bundled with Mink.) Comes with four drivers out of the box: GoutteDriver for the Goutte pure-php headless browser, SahiDriver for the Sahi JS browser controller; ZombieDriver for the Zombie.js headless browser emulator; SeleniumDriver for (deprecated) Selenium RC; and Selenium2Driver for Selenium Webdriver.

Selenium - Open-source tool set for browser automation, originally from Thoughtworks. Language bindings available for Java, C#, Ruby, Python, Javascript (Node), more. Consists of multiple related tools/projects including:
* Selenium WebDriver, for driving a browser natively either locally or on remote machines. Works with most browsers and OS's. Utilizes a common API along with drivers for each browser type.
* Selenium IDE, a Firefox add-on for record/playback tests in Firefox; can be used to generate code to run tests with Selenium Remote Control.
* Selenium Remote Control, a client/server system enabling control of web browsers locally or on other computers through its HTTP proxy, using almost any programming language and testing framework.
* Selenium Grid, which enables running many tests simultaneously, reducing time needed to test multiple browsers or OS's. Note: With the release of Selenium 2.0, the Selenium Server now has built-in Grid functionality.

Selenium WebDriver - Open source alternative to the initial Selenium approach for driving browsers; has been integrated into the Selenium 2.x project. Instead of being a JavaScript application running within the browser, WebDriver uses whichever mechanism is most appropriate to control the browser. For Firefox, it's implemented as an extension; for IE, it utilizes IE's Automation controls. This alternative mechanism of controlling the browser allows working around the JavaScript security model browser restrictions. Addtionally, where automation through the browser isn't enough, WebDriver can interact with the Operating System - such as in simulating typing at the OS level in Windows. Drivers available for most browsers. Can be controlled via C#, Python, Java, Ruby, Javascript (Node), and other languages.

Watir - 'Web Application Testing in Ruby', an open-source family of web automation libraries in Ruby. The libraries (for Watir-WebDriver, the most recent Watir version) support IE, Firefox, Chrome, Safari. Win, Mac, Linux. For a listing of additional tools that are available to extend some capabilities, see the Watir site. Note: Watir-Webdriver requires Selenium-Webdriver. Although that means the Selenium API's are of course available, there are some who find the Watir API's more intuitive and easier to use. Nerodia, a Python implementation, is also available.

PhantomJS - Open source headless browser based on WebKit, scriptable with a JavaScript API. Fast and native support for various web standards: DOM handling, CSS selector, JSON, Canvas, and SVG. Can run functional tests with frameworks such as Jasmine, QUnit, Mocha, Capybara, WebDriver, and many others. Can use for general command-line based testing, within a precommit hook, and as part of a continuous integration system. Can create web page screenshots with thumbnail preview. Available as executable binary for Win, Mac, Linux. Note: new development was suspended as of early 2018.

Rapise - Functional test automation platform for web, mobile, desktop, and API's from Inflectra, Inc. with an open, extensible architecture. Cross-browser testing capabilities support multiple versions of MSIE, Firefox, and Chrome. Built-in support for Ajax/GWT/YUI, Flash/Flex/AIR, Silverlight, etc. Keyword and data-driven testing using MS-Excel spreadsheets. Includes out of the box support for Dynamics AX, CRM, NAV and 365, as well as Salesforce Classic and Lightning. XPath and CSS based object identification. Built-in Optical Character Recognition (OCR) for bitmaps. Scripting in JavaScript; scripts and learned objects are stored in an open format rather than a proprietary binary file or database; includes a full-function JavaScript editor with automatic code completion. Pluggable active JavaScript debugger with watches and breakpoints is available.

Jubula - Open source tool for automated functional GUI testing for HTML and Java applications. Available as part of an Eclipse package, via an update site and as a standalone application with an easy-to-use installer. View current and previous test results in Jubula client; automatic screenshot on error. Supports HTML, Swing, SWT/RCP/GEF applications; heuristic object recognition, command line client for continuous integration, context-sensitive help in client, projects stored in multi-user database, portability and version control via exports in XML format. Contributed by BREDEX GmbH, who also develop GUIdancer, which is based on the Jubula core and offers additional features. Jubala is platform independent - Windows, Linux/Unix and Mac.

Fabasoft app.test - Web test tool from Fabasoft AG; tests are based on patterns to reduce the complexity of HTML and Java applications - no XPath or CSS expressions are stored in the test but meaningful and understandable statements. Patterns for web sites can be designed by using the point-and-click editor as an Eclipse Plugin. Tests can be recorded by using the point-and-click recorder in all supported web browsers (IE, Firefox, Chrome, Safari) and immediately be replayed in all other browsers without modification. Various Ant-Tasks provide seamless integration into Continuous Integration systems like Hudson. Generates various reports as HTML or PDF; errors documented with screenshots and various dumps. Supports Win, Linux, Mac OS-X; free and premium $paid versions available.

FuncUnit - Free open source web application testing framework enhances assertion libraries like QUnit and Jasmine, enabling them to simulate user actions, easily test asynchronous behavior, and support black box testing; uses API based on jQuery. Can be downloaded and used standalone or as the part of the full stack JavaScript framework - JavaScriptMVC. Supports all modern browsers on Win, Mac, Linux; tests can also be run via Selenium.

qUnit - JavaScript unit testing framework used by the jQuery, jQuery UI and jQuery Mobile projects to test their code and plugins, but is capable of testing any generic JavaScript code. Similar to other unit testing frameworks like JUnit, but utilizes JavaScript features and helps with testing code in the browser, such as with its stop/start facilities for testing asynchronous code.

Telerik Test Studio - Test suite from Progress Software for web, mobile and desktop applications handles GUI, performance, load and API testing. A point-and-click software testing tool that helps users build in-depth automated web and desktop. Users can use smart wizards to visually highlight an element and automatically generate verifications, without the need for coding. Test maintenance is faster using web element abstraction techniques. Scripting with C# and VB.NET. Handles HTML5, Angular, React, AJAX, JavaScript, Silverlight, WPF, MVC, Ruby and PHP, iOS, Android. Requires Windows.

TestOptimal - Functional/regression and load/stress testing automation platform for web applications and Java applications, from TestOptimal LLC. Utilizes Model-Based Testing (MBT) and Mathematical Optimization techniques; test case generation and execution directly from the application model. TestOptimal is a web application itself; can be integrated with JUnit and run inside Eclipse or NetBeans. Application modeling with graphs - state chart XML (SCXML) with drag and drop user interface running on standard browser; many test sequencers (test generation) to meet different testing needs, test automation with Java or mScript (XML-based scripting), statistical analysis on test executions and virtual (concurrent) users for load testing. Multiple browser support. For Windows, Mac

Ranorex Studio - A Windows GUI-based test automation framework from Ranorex GmbH for testing many different application types. Supports a wide variety of technologies, platforms, integrations, and browsers. Directly record tests on your device. Utilize the Ranorex API and create robust test automation projects entirely in C# or VB.NET. The IDE includes test project management, integration of all Ranorex tools (Recorder, Repository, Spy), intuitive code editor, code completion, debugging, and watch monitor. Endpoint panel UI provides a central command center to set-up and manage endpoints as well as configure their environments. Utilize Ranorex Agents on remote machines to deploy multiple Ranorex tests for remote execution in different environments, using different system configurations and operating systems.

Webrat - Ruby-based utility to enable quick development of web app acceptance tests. Open source by Bryan Helmkamp and Seth Fitzsimmons. Supports RSpec, Cucumber, Test::Unit, more. Leverages the DOM to run tests similarly to in-browser test tools like Watir or Selenium without the associated performance hit and browser dependency. Best for web apps that do NOT utilize Javascript; apps using Javascript in-browser tools may be more appropriate. Ruby gem also available.

Capybara - Ruby gem from Jonas Nicklas, Thomas Walpole and others; for testing Rails and Rack apps. It is inspired by and aims to replace Webrat as a DSL for interacting with a web application. Automatically waits for your content to appear on the page - manual sleeps not needed. It is agnostic about the driver running tests and comes bundled with support for Rack::Test and Selenium support built in. WebKit is supported through an external gem.

Mechanize - Open source Ruby library for automating interaction with websites; automatically stores and sends cookies, follows redirects, can follow links, and submit forms. Form fields can be populated and submitted. Also keeps track of the sites visited. It is a Ruby version of Andy Lester's Perl 'Mechanize' Note: does not handle javascript.

iMacros for Firefox - Firefox add-on to record and automate web interactions, from Ipswitch Inc. Can use variables inside the macros, and import data from CSV files. The recorded macros can be combined and controlled with Javascript, so complex tasks can be scripted. Macros can also be started via the command line e. g. via the Windows task scheduler, batch files, or a Linux cron job for unattended operation. Macros recorded with iMacros for Firefox can be replayed in iMacros for Chrome, iMacros for IE, and the iMacros browser without changes. Free and $paid versions available.

Sahi Pro - Test automation tool from Narayan Raman/Tyto Software, with versions available for any web browser/OS, desktop Windows, or mobile. Record/playback capabilities, automatic waiting for AJAX and pageloads. Identifies elements in simple stable ways; works on applications with dynamic ids. APIs to easily locate one element with respect to another. Detailed logging and reporting. Execute tests in parallel on one machine or distribute it across machines. Can run from command line. Sahi Script is based on Javascript, and enables interaction with File-System, Databases, Excel sheets, CSV files; call any Java code or library; inbuilt Excel Framework.

Fitnesse - A lightweight, open-source framework that makes it easy for software teams to collaboratively define Acceptance Tests - as web pages containing simple tables of data inputs and expected outputs - and run those tests and see the results. The tables are expressed in the form of a wiki; the Fitnesse wiki enables easy creation and editing of the Wiki/Fitnesse pages. FitNesse is a wiki web server.

Squish for Web - Cross browser automated testing framework from Froglogic GmbH for Win/Linux/Unix/OSX/iOS/Android. Handles HTML controls, AJAX toolkits (GWT, SmartGWT, ExtJS, etc.), Java applets, ActiveX/native controls, Flex. IDE is built on Eclipse, includes built-in objecr Spy, and enables execution of tests with built in debugger allowing setting breakpoints and stepping through test scripts. BDD Gherkin support. Record or create/modify scripts using Tcl, Python, JavaScript, Perl, Ruby. Can also handle flexible, configurable image-based verifications. Integrates with MS Visual Studio, TFS, RQM, Seapine TCM, CruiseControl, Jenkins, Hudson, Bamboo, Ant, Eclipse TPTP, Maven, and others.

AppPerfect WebTest - Web functional and regression testing tool from AppPerfect Corp. Capabilities include Object Spy, parameterized tests, support for basic authentication, cookies, SSL. Scripting language is javascript, users can view/edit the functional test using script editor provided. Recording and script running is supported on most commonly used browsers. Reports are available through the UI and can be exported into various formats like HTML, PDF, CSV, XLS, XML. Can integrate with Eclipse, Netbeans, Intellij, JBuilder, more. For Windows, Linux, Mac.

Test Complete - Automated test tool for web, desktop, and mobile from SmartBear Software. Use record and replay to create tests or script tests in Python, VB.net, or JAvascript. Supports most browsers and includes intelligent object recognition across major technologies. Support for HTML5, AJAX, React, and Angular. Built-in Data Generator Wizard. Requires Windows and MSIE.

jWebUnit - Open source Java framework that facilitates creation of acceptance tests for web applications. Provides a high-level API for navigating a web application combined with a set of assertions to verify the application's correctness including navigation via links, form entry and submission, validation of table contents, and other typical business web application features. The simple navigation methods and ready-to-use assertions allow for more rapid test creation than using only JUnit and HttpUnit.

SimpleTest - Open source framework for unit testing, web site testing and mock objects for PHP.

WinTask - Macro recorder from S.C Wintask S.R.L, automates repetitive tasks for Web site testing (and standard Windows applications), with its HTML objects recognition, keystroke and mouse handling. Includes capability to expand scope of macro scripts by editing and adding loops, branching statements, etc. (300+ commands); ensure robustness of scripts with Synchronization commands. For IE, Firefox, Chrome. Extensive ODBC functionality. Data extraction using native methods or OCR; Synchronization on a text through an OCR engine.

Canoo WebTest - Free Java Open Source tool for automated functional testing of web applications. XML-based test script code is editable with user's preferred XML editor; Groovy-based scripting also. Tests can be recorded and then edited. WebTest scripts are Ant scripts. Can group tests into a testsuite that again can be part of a bigger testsuite. Test results are reported in either plain text or XML format for later presentation via XSLT. Standard reporting XSLT stylesheets included, and can be adapted to any reporting style or requirements.

Badboy - Web test automation and debugging tool from Badboy Software. Based on a 'Script Tree' - a window pane that sits along side the embedded browser and monitors its activity, displaying information as you browse. Once a script is recorded/created, you can use ' the Playback functionality to replay the actions in sequence; because Badboy records everything about the actions performed by the browser, playing the script reproduces exactly the same result that the original browsing caused. You can choose to play back your whole entire script, or you can play it one step at a time. Parametrization capabilities make it simple to modify parameters to play back with different values. Once parameterized, Badboy automatically links new items to the same variable, minimizing maintenance as you record new items or change your script. The built-in Data Source tool can load values from any ODBC compliant database, and includes integrated support to loop over the values retrieved - thus making it easy to exhaustively test whole ranges of data values. A DOM View displays a powerful interface for examining and manipulating the loaded web page, including a full display of the browser DOM with CSS information and a JavaScript console for entering and executing JavaScript commands. For Windows/MSIE. Free for up to 5 users.

HttpUnit - Open source Java program for accessing web sites without a browser, from SourceForge.net/Open Source Development Network, designed and implemented by Russell Gold. Ideally suited for automated unit testing of web sites when combined with a Java unit test framework such as JUnit. Emulates the relevant portions of browser behavior, including form submission, basic http authentication, cookies and automatic page redirection, and allows Java test code to examine returned pages as text, an XML DOM, or containers of forms, tables, and links. Includes ServletUnit to test servlets without a servlet container.

iMacros - Macro recorder utility from Ipswitch Inc. automates repetitious aspects of web site testing. Records any combination of browsing, form filling, clicking, script testing and information gathering; assists user during the recording with visual feedback. Power users can manually edit a recorded macro. A command line interface allows for easy integration with other test software. Works by remote controlling the browser, thus automatically supports advanced features such as SSL, HTTP-Redirects and cookies. Can handle data input from text files, databases, or XML. Can extract web data and save as CSV file or process the data via a script. For Windows and MSIE. iMacros for Firefox add-on and the iMacros for Chrome add-on support Win, Mac and Linux.

MaxQ - Free open-source web functional testing tool from Tigris.org, written in Java. Works as a proxy server; includes an HTTP proxy recorder to automate test script generation, and a mechanism for playing tests back from the GUI and command line. Jython is used as the scripting language, and JUnit is used as the testing library.

TestDrive - Test tool from Original Software Group Ltd. utilizes a non-coding approach to recording/playback of web browser scripts. It analyses the underlying intentions of the script and executes it by direct communication with web page elements. IntelliScripting logic removes the reliance on specific browser window sizes, component location and mouse movements for accurate replay, and for easier script maintenance. Playback can run in background while other tasks are performed on the same machine.

Rational Functional Tester - IBM's (formerly Rational's) automated tool for testing of Java, .NET, and web-based applications. Enables data-driven testing, choice of scripting languages and editors. Scripting in Java or Visual Basic .NET; Java scripting is via the Eclipse Java editor, Visual Basic .NET scripting is via Visual Studio .NET. Can create, edit and execute tests on Linux, including everything except a test recorder. On Windows it provides all recording, editing and execution capabilities. Supports automated version control to maintain multiple test sets and to enable parallel development.

UFT - Unified Functional Testing (formerly QTP) functional/regression test tool from Microfocus (formerly HP, formerly Mercury). Uses an intuitive, visual user experience that ties manual, automated, and framework-based testing together in one IDE. Includes support for testing Web, Java, API, ERP, mobile, cross-browser, etc. Capabilities include record/replay capturing technology, integrated scripting and debugging environment with keyword view. Multi-layered interface displays both UI and API tests in an intuitive graphical canvas, providing representation of the test flow.

SilkTest - Functional test tool from Microfocus (formerly from Borland, formerly from Segue) for Web, mobile, Java or traditional client/server-based applications. Features include: test creation and customization, test planning and management, direct database access and validation, recovery system for unattended testing, and IDE for developing, editing, compiling, running, and debugging scripts, test plans, etc. Supports most browsers and browser technologies, iOS, Android, Java, SAP, Windows, and more.

Return to top of web tools listing


BDD (Behavior-Driven Development) Test Tools

Chai - Open source BDD/TDD assertion library for node and the browser for javascript testing frameworks. Similar to Node's built-in assert; makes testing much easier by providing wide variety of assertions. Has several interfaces that allow the developer to choose the most appropriate for your needs. The chain-capable BDD styles provide an expressive language and readable style; the TDD assert style provides a more classical feel.

Cucumber - Open source tool for executing plain-text functional descriptions as automated tests - it supports BDD (Behavior-Driven Development). This means that the 'tests' (plain text feature descriptions with scenarios, written in the 'Gherkin' domain-specific language) are typically written before anything else and verified by business analysts, non-technical stakeholders, etc. The production code is then written outside-in, to make the stories pass. Cucumber itself is written in Ruby (and also has implementations in Java, Groovy, Javascript, C++, etc.), but it can be used to 'test' code written in any language. Cucumber Pro version available which provides a collaborative environment designed for product owners and business analysts; enables publishing of Cucumber features as easily-readable documentation.

Jasmine - An open source behavior-driven development framework for testing JavaScript code; does not depend on other JavaScript frameworks; does not require a DOM. Available for node.js, ruby, python. From Pivotal Labs.

SmartBear HipTest - HipTest is a native Behavior Driven Development (BDD) collaborative platform from SmartBear Inc. to define test cases in a shared business terminology. Over 20+ frameworks and tools supported including Cucumber, Specflow, Java/Junit, Selenium, TestComplete, Jenkins, Jira, and more. Available SaaS or on-premise. Free for small teams and open source projects. Web app that works on all OS's.

Lettuce - A simple BDD tool for Python based on Cucumber. By Gabriel Falcăo.

JBehave - An open source Java BDD Framework that is the precursor of Cucumber. Integrates with all popular Java IDEs. Stories can be run on command-line (typically for continous-integration) or in any modern Java IDE that supports unit testing frameworks (JUnit supported by default, but any test framework can be easily adopted). Scenarios can be written in JBehave syntax or Gherkin syntax.

Behat - Open source Behavior-Driven Development framework for PHP. Many extensions available. Uses same Gherkin syntax as Cucumber and many other BDD frameworks

Concordian - An open-source BDD tool for automating Specification by Example, for Java or C#. Capabilities include screenshots, stack traces, results breadcrumbs, integrates well with Selenium WebDriver. Concordion specifications use an attractive stylesheet that makes them easy to read.

Yatspec - An open source Java BDD framework that generates HTML test reports from JUnit Java tests. Supports 3 levels of usage: 1) TableRowTest support for JUnit Methods (like in MBUnit / NUnit) 2) Specification support for Junit; produces readable HTML from your test 3) "Given/When/Then" support with automatic capturing and display of "givens" and captured inputs and output.

Serenity - An open source automated acceptance tests reporting java library. Helps structure your automated acceptance tests in order to make them easier to understand and maintain, and provides great reporting capabilties on top of tools like JBehave, Cucumber or JUnit. Also provides tight integration with WebDriver, to make automated web testing easier and more efficient. Works in two ways: 1) instruments your test code and reports on the steps that your tests execute to achieve their goals, and stores the test results in a standardized format;(2) aggregates these test results into clear and meaningful reports, that reflect not only the outcomes of your tests, but also the status of your project. For example, you can get Serenity to report on what requirements, features or stories you have implemented, and how well (or not) they were tested.

SpecFlow - Cucumber for .Net: BDD tool to define, manage and automatically execute human-readable acceptance tests in .NET projects. Oprn source from Handelsgesellschaft m.b.H. Supports the .NET framework, Xamarin and Mono. Integrates with Visual Studio, but can be also used from the command line (e.g. on a build server). Supports multiple testing frameworks: MSTest, NUnit, xUnit and MbUnit. Free and paid (SpecFlow+) versions.

Return to top of web tools listing


Web Site Security Test Tools

RIPS - Static code security analysis tool from RIPS Technologies that detects even complex security vulnerabilities in PHP and Java web applications. Industry standards and continuous integration support for tools such as Jenkins, Bamboo, SonarQube, TeamCity, GitLab, Bitbucket, Drone, Travis CI, CircleCI. Integrates with IDEs such as IntelliJ, PhpStorm, Visual Studio Code, Eclipse.

Seeker IAST - Interactive application security testing solution from Synopsys Inc. utilizes instrumentation techniques and runtime analysis to continuously monitor, identify, and verify security vulnerabilities in web apps, typically during integration testing and QA. Identifies vulnerability trends against compliance standards (e.g., OWASP Top 10, PCI DSS, GDPR, and CWE/SANS Top 25). Includes binary analysis which identifies third-party and open source components, known vulnerabilities, license types, and other potential risk issues. Applications can be on-premises, microservices-based, or cloud-based. Provides analysis results including a risk-prioritized list of verified vulnerabilities to fix; results available in real time, without need for any special scans.

Kiuwan Code Security - Static code analysis tool from Kiuwan meets standards including OWASP, CWE, MISRA, NIST, PCI, and CERT. Coverage for over 20 programming languages including Java, javascript, php, python, groovy, asp.net, more. Integrates with IDE's such as Eclipse, Visual Studio, IntelliJ IDEA, Phpstorm, Pycharm, Webstorm. Integrates with build systems including Jenkins, Bamboo, Visual Studio. For Windows, Linux and MacOS.

Beagle Security - Online web vulnerability testing platform that automatically scans your web app to identify open threats. AI-powered technology to cut down false positives. Developer-friendly reports with proper mitigation techniques and supports integration with Slack, Jira, Trello and Telegram. Requires domain verification by owner. Standard and pro plans; free basic security testing available at a rate of 2 basic tests per month

AppSpider - Web application security testing tool from Rapid7 includes interactive actionable reports that prioritize the highest risk security issues and streamline remediation efforts. Can drill deep into a vulnerability to get more information and replay attacks in real-time. Provides interactive actionable reports that behave like web pages with effective organization and links for deeper analysis.

Veracode Application Security Platform - Web application scanning toolset; handles multiple standards (NIST, PCI, OWASP, HIPAA, GDPR, NY DFS, etc.) and customized policies, with integrated unified reporting. Includes Veracode Greenlight, an IDE or CI integrated continuous flaw feedback and secure coding education solution; Veracode Static Analysis which tests web, mobile, desktop, or back-end applications of any size with consistent, repeatable processes and policies - even if you don't have the source code; Veracode Dynamic Analysis provides a unified Dynamic Application Security Testing (DAST) solution; Veracode Software Composition Analysis (SCA) integrates with your development processes to identify what code libraries are being used, if they contain vulnerabilities, and whether those vulnerabilities impact your applications.

OpenVAS - Open source full-featured vulnerability scanner, developed and maintained by Greenbone Networks GmbH. Capabilities include unauthenticated testing, authenticated testing, various high level and low level Internet and industrial protocols, performance tuning for large-scale scans and an internal programming language to implement any type of vulnerability test. The scanner includes a vulnerability tests feed of more than 50,000 vulnerability tests and daily updates. Build from source or install as a prepared virtual machine with readily available setup.

Brakeman - Open source ruby static code analysis tool checks Ruby on Rails apps for security vulnerabilities. Documentation discusses both advantages and limitations of the tool. Plugin available for Jenkins/Hudson.

W3af - Web Application Attack and Audit Framework, an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site Scripting, SQL injection and OS commanding. Has a graphical and console interface; written in python.

OWASP ZAP (Zed Attack Proxy) - Open source tool from OWASP - Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by hundreds of international volunteers. Helps automatically find security vulnerabilities in your web apps while you are developing and testing your applications. Also useful to experienced pentesters for manual security testing.

mitmproxy - Open source interactive HTTPS proxy; for debugging, testing, privacy measurements, and pen testing; can be used to intercept, inspect, modify and replay web traffic such as HTTP/1, HTTP/2, WebSockets, or any other SSL/TLS-protected protocols. Command line interface, web interface, and python API available.

Sboxr DOM - Client-side Security Analysis tool from Ironwasp Security that can automatically detect over 30 DOM security issues. Includes detection of issues with code execution, cross-site communication, data leakage, weak cryptography, sensitive data storage, malicious libraries, etc. Reporting includes validation and remediation advice.

Checkmarx CxSAST - Static code scanning tool from Checkmarx provides the ability to find vulnerable lines of code and learn how to fix them. Supports 20 coding and scripting languages and their frameworks. Incremental scan capability only analyzes new code or modified code. Identifies hundreds of known code vulnerabilities and ensures coverage of security standards (OWASP Top 10, SANS 25 and more).

Coverity SAST - Static Analysis and Static Application Security Testing (SAST) platform from Synopsys; provides actionable remediation guidance. Provides full path coverage, ensuring that every line of code and every potential execution path are tested. Supports 20 coding languages, many compilers, and more than 70 frameworks for Java, JavaScript, C#, and other languages. Integrates with popular IDEs, issue trackers, build and CI tools, source code management (SCM) tools, and ALM solutions. REST APIs enable use of Coverity scans in build automation.

Canvas - Pen testing tool From Immunity Inc. makes available hundreds of exploits, an automated pen testing system, and a comprehensive, reliable development framework for penetration testers and security professionals. Monthly updates. For Linux, Win, Mac OSX.

InsightAppSec - Cloud-based web application security scanner from Rapid7. Analyzes site exposure risk, ranks threat priorities. Provides a replay capability for each vulnerability, so that after a developer. has implemented a fix, they can quickly test their work with the replay capability immediately. 'Universal Translator' capability understands the formats, protocols, and development technologies used in modern mobile and browser-based applications. Provides actionable insights with reports that speed remediation.

Burp Suite - An integrated web app security testing platform from PortSwigger Ltd, written in Java. Its various tools work together to support the entire testing process, from initial mapping and analysis of an app's attack surface, through to finding vulnerabilities. Can combine advanced manual techniques with state-of-the-art automation, to enable faster and more effective security testing. Key components include: An intercepting Proxy, which lets you inspect and modify traffic between your browser and the target application; an application-aware Spider, for crawling content and functionality; an advanced web application Scanner, for automating the detection of numerous types of vulnerability; an Intruder tool, for performing powerful customized attacks to find and exploit unusual vulnerabilities; more. Extensible, allowing writing of custom plugins. Free and $Pro versions.

Web Server Security Test - Online free web server security test service by High-Tech Bridge SA. Test your Content Security Policy (CSP), HTTP Security Headers and overall web server security; API also available. Score reported as a grade A-F. Checks: Detailed analysis (syntax, validity, trustworthiness) of HTTP headers that may impact web server, web application or website visitors security or privacy; analysis of HTTP methods that may put web server, web application or website visitors at risk; detailed analysis of web application cookies for secure attributes that may improve web application and website visitors' security and privacy. Also available is a free online SSL/TLS Server Test, which tests the SSL/TLS implementation of any service on any port for compliance with PCI DSS requirements, HIPAA guidance and NIST guidelines.

Vega - A GUI-based, multi-platform, free and open source web security scanner from Subgraph Inc. that can be used to find instances of SQL injection, cross-site scripting (XSS), and other vulnerabilities in your web apps. Also includes an intercepting proxy for interactive web application debugging. Written in Java, GUI based; runs on Linux, OSX, and Win. Vega attack modules are written in Javascript, users can easily modify them or write their own.

ParosPro - Web security auditing platform from Milescan Technologies. Capabilities include a network spider to collect information about a site's hierarchy; vulnerability scanning based on plug-ins written to target common web vulnerabilities, including many popular Content Management Systems vulnerabilities; simulates hacker attacks; scan scheduling; more.

Skipfish - Open source active web application security scanner from Michal Zalewski/Google. Prepares interactive sitemap by carrying out a recursive crawl and dictionary-based probes. The map is then annotated with the security check output. The final output report is meant to serve as a foundation for professional web application security assessments. Goals for the tool are stated as: Raw speed; Unique brute-force capabilities: includes utilization of highly customized, hand-picked dictionaries, and a unique auto-learning feature that builds an adaptive, target-specific dictionary based on site content analysis; High quality security checks with an emphasis on well-crafted probes, and on testing for behavioral patterns, rather than signatures; Coverage of more nuanced problems - looks for significant security issues often neglected by other tools - such as caching intent mismatches, mixed content issues, XSSI, third-party scripts, cross-site request forgery, etc; Adaptive scanning for real-world applications - handles complex, mixed technology sites such as recognizing obscure 404 behaviors, unusual parameter passing conventions, redirection patterns, content duplication, etc. Written in C.

WebReaver - Web app security security scanner runs on Mac OS X, for novice as well as advanced users. Identify over 70 variants of severe vulnerabilities such as SQL Injection, XSS, Local File Includes and others. Export vulnerability reports in several document formats such as RTF, HTML, DOC and TXT.

Retina Network Security Scanner - Vulnerability assessment solution from Beyond Trust Corp. Available as a standalone app, host-based option, or as part of Retina CS enterprise vulnerability management solution. Scan and identify security exposures across network, web, container, database, virtual assets, without impacting availability or performance. Locate known and previously unknown assets and their profiles across network (local and remote), web, mobile, cloud and virtual environments. Group, assess, and report on assets by IP range, naming convention, operating system, domain, applications, business function, Active Directory and more. Vulnerability database is continually updated. Prioritization and reporting of risks with interactive reports including compliance reporting, configuration benchmarking, more.

beSECURE - Vulnerability Assessment and Management solution from Beyond Security Inc. Continually scan for network and application vulnerabilities; daily updates and specialized testing methodologies to catch detectable vulnerabilities; data driven, flexible reporting options to empower remediation teams. Flexible deployment models: cloud based, on premise or Hybrid Cloud options.

Wapiti - Open source vulnerability scanner for web applications. It checks vulnerabilities like XSS, SQL and XPath injections, file inclusions, command execution, LDAP injections, CRLF injections. Crawls webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets the list of URLs, forms and their inputs, Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable. Uses Python 3. Generates vulnerability reports in various formats (HTML, XML, JSON, TXT...). Support for HTTP and HTTPS proxies. Authentication via several methods : Basic, Digest, Kerberos or NTLM. Ability to restrain the scope of the scan (domain, folder, webpage).

sqlmap - Open source pen testing tool for SQL injection flaws. Support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase, SAP MaxDB, Informix, MariaDB, MemSQL, CockroachDB, HSQLDB, H2, MonetDB, Apache Derby, Vertica and Mckoi DBMS's. Supports six SQL injection techniques: boolean-based blind, time-based blind, error-based, UNION query-based, stacked queries and out-of-band.

Powerfuzzer - Open source automated customizable Web fuzzer; based on many other Open Source fuzzers available and information gathered from numerous security resources and websites. Capable of spidering website and identifying inputs. Capable of identifying common web vulnerabilities (incl. XSS, SQL Injection). Supports https. Written in python. Project leader is Marcin Kozlowski. Commercial version Powerfuzzer Online available as an online service.

SecPoint Penetrator - Site/network security testing tool from SecPoint - available as an appliance or virtual software/service. PDF & HTML reporting explains evidence of vulnerabilities and how to eliminate them. Scan your internal local IP addresses and your public Internet IPs. Checks for vulnerabilities in Firewalls, Routers, Linux, Windows Mac OS X, Mobile devices, Printers and any device with a local or public IP address. Scans include SQL Injection, XSS Cross Site Scripting XSS, SQLi, LFI, RFI and CSRF. Reports in PDF, XML, HTML formats with recommended solutions.

SSL Server Test - Free easy to use online service performs a deep analysis of the configuration of an SSL web server.

Netsparker - Web application security scanner from Netsparker Ltd.; cloud-based or on-premises. Automatically generates either a proof of concept or proof of exploit upon identifying a vulnerability, thus confirming it is not a false positive. Includes web services scanning. Supports a range of built-in report formats, and ability to design custom reports. Includes capability of manual overrides, enabling fine-tuning of scan strategy

Fortify - Security product suite from Microfocus (formerly HP, formerly Fortify Software) includes vulnerability detection. Integrates static source code analysis, dynamic runtime analysis, and real-time monitoring to identify and accurately prioritize the greatest number of critical security vulnerabilities.

OWASP Security Testing Tools - Variety of free and open source web security testing tools, training guides, etc via the OWASP (Open Web Application Security Project) site. Tools include Zed Attack Proxy (ZAP), OWASP Dependency-Check, OWASP OWTF, etc.

Trustwave AppScanner - Automated security testing tool set for web applications, web services and cloud and mobile apps, from Trustwave Holdings Inc. Available as a cloud-based on-demand service or installed on-premises enterprise app or managed service.

GamaSec - Set of website vulnerability assessment tools and services. Includes GamaShield for web app scanning and malware detection - crawls entire website, analyzes in-depth all files, performs automatic audit for common security vulnerabilities while launching a series of simulated Web attacks.

Nikto Scanner - Open source web server scanner from CIRT.net which performs comprehensive tests against web servers for multiple items, including over 6000 potentially dangerous files/CGIs, versions on over 1200 servers, and version specific problems on over 270 servers. Also checks various server configuration items.

Fortify WebInspect - WebInspect automated security assessment tool for web applications and services, from Microfocus (formerly HP, formerly SPI Dynamics). Available on-premise, as a service or hybrid. Ability to test the dynamic behavior of running web applications and services to identify security vulnerabilities and integrating runtime analysis to identify issues in hidden directories and pages that go undetected by black-box testing alone. Provides details and priorities of each vulnerability. Get compliance reports for all major industry and regulatory standards (such as PCI, DISA, NIST, ISO, OWASP, HIPAA).

IBM Security AppScan - Tool suite from Rational/IBM (formerly Watchfire) automates web and mobile application security testing, produces defect analyses, and offers recommendations for fixing detected security flaws. Assessment module can be used by auditors and compliance officers to conduct comprehensive audits, and to validate compliance with security requirements. Includes static code analysis capabilities

Defensics Fuzz Testing - Comprehensive fuzzing framework for security testing of digital supply chain/devices (such as routers, switches, firewalls, desktop and server systems, laptops, PDAs, cell phones, various embedded systems, etc.) from Synopsys Inc. (formerly Codenomicon Inc.) Includes library of more than 250 pre-built fuzz testing suites. SDK and advanced file and protocol template fuzzers enable users to build their own test cases. Provides detailed reports with vulnerability mapping to industry standards and injection type. Can generate remediation packages for suppliers.

Metasploit - The Framework is an open source project from Rapid7 that provides the infrastructure, content, and tools to perform pen tests and extensive security auditing. The platform includes the Metasploit Framework and its commercial counterparts, such as Metasploit Pro. New modules are added on a regular basis. Extensive documentation. Available as an executable file for Linux/Mac OSX and Windows OS's. Run from command line or via web UI.

Kali Linux - Open source Debian-based Linux distribution aimed at advanced professional Pen Testing and Security Auditing. Kali contains several hundred tools, such as Metasploit, nmap, sqlninja, etc. which are geared towards various information security tasks, such as Pen Testing, Security research, Computer Forensics, Wireless Attacks, Web App pen testing, Stress Testing, Forensics, and Reverse Engineering. Developed, funded and maintained by Offensive Security, an information security training company.

Perimeter Scan - Service from SecurityMetrics that analyzes external network devices like servers, websites, firewalls, routers, and more for security vulnerabilities which may lead to interrupted service, data theft or system destruction. Produces a downloadable summary report with identified vulnerabilities, listing target, vulnerability type, service (e.g., https, MySQL, etc.), severity.

Core Impact - Security testing platform from Core Security/Help Systems for web app and other security testing. Testing capabilities across systems, devices, services, networks, and applications. Provides a stable, up-to-date library of commercial-grade exploits and real world testing capabilities. Includes network pen testing, web app pen testing, client-side testing of end users and endpoints, identity-based attacks. Comprehensive customizable reporting capabilities for confirming exploitable vulnerabilities to plan remediation efforts, metrics that illustrate the efficacy of layered defenses, compliance with government and industry regulations, and remediation validation reporting.

Snort - Open source network intrusion prevention and detection system from Cisco; capable of performing real-time traffic analysis and packet logging on IP networks. It can perform protocol analysis, content searching/matching, and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more.

Nessus - Vulnerability scanner from Tenable Inc. with high speed discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of security posture. Nessus scanners can be distributed throughout an entire enterprise, inside DMZs, and across physically separate networks. Free for home users; annual fee for Professional license. Updated continuously. Includes scripting language for writing custom plugins.

Tenable.io Web App Scanning - Automated web app scanning - part of the Tenable Cyber Exposure Platform. Tracks digital assets and accomodates dynamic assets like cloud and containers. Prioritizes vulnerabilities while seamlessly integrating into your environment. Supports a wide vriety of authentication options. Provides safe external scanning that ensures production web apps are not disrupted or delayed. Dashboard provides list and descriptions of all vulnerabilities with detailed remediation instructions for developers.

GFiLANguard - Network vulnerability and port scanner, patch management and network auditing tool from GFI Software. Scans operating systems, virtual environments and installed apps using vulnerability check databases based on OVAL and SANS Top 20, providing thousands of vulnerability assessments.

Qualys Cloud Platform - Suite of cloud-based security tools/services from Qualys, Inc. for web app scanning, asset inventory, vulnerability management, continuous monitoring, security configuration assessment, and more. Also available is free 'Community Edition' to scan computers and apps on the Internet or in your network.

SAINT - Security Administrator's Integrated Network Tool - Security testing tool set from Carson & SAINT Corporation. An updated and enhanced version of the SATAN network security testing tool. Provides Security Configuration Assessment that identifies and helps remediate vulnerabilities, misconfigurations and exposure to malware; can import benchmarks from industry-standard security configurations, managed by NIST as well as from locally developed configurations. Pen testing mapping known exploits to discovered vulnerabilities, using SAINT’s or 3rd party Exploit data. Also includes SAINT’s social engineering platform for testing of staff, asset tagging and other prioritization features, and APIs for custom security solutions or to integrate with compatible technologies. Flexible reporting capabilities provide pre-defined reporting templates, pre-defined Compliance report templates, and many customization options. Also available is SAINT Cloud, SAINT for AWS, and SAINTbox scanner appliance. Runs on MacOSX and Linux.

NMap Network Mapper - Free open source utility for network exploration or security auditing; designed to rapidly scan large networks or single hosts. Uses raw IP packets in novel ways to determine what hosts are available on the network, what services (ports) they are offering, what operating system (and OS version) they are running, what type of packet filters/firewalls are in use, and many other characteristics. Runs on most flavors of UNIX, OSX, Win.

OWASP Security Testing Tools Listing - Listing of commercial, free, and open source security testing tools, source code analyzers, and binary analysis tools via the OWASP (Open Web Application Security Project) site.

Top 125 Security Tools - Listing of 'top 125' network security tools from survey by Gordon Lyon/Insecure.org/Sectools.org. (Includes various types of security tools, not just for testing.)

Return to top of web tools listing


External Site Monitoring Services

Website Uptime Monitoring - Web site monitoring service from Uptime.com provides one-minute website uptime check intervals, and detailed downtime reporting to any device. Global uptime monitoring measures performance across 6 continents.

ManageEngine Applications Manager - Application performance monitoring service suite from Manage Engine/Zoho Corp. includes web app monitoring service as well as many other monitoring capabilities including web services, app servers, database, cloud, mobile apps, etc.

Monitis - Monitoring service - websites, networks, cloud, servers, apps with a unified dashboard, from Monitis LLC. Website uptime and response time, Server health, Network performance, Custom metrics, and more. Easy-to-use API, integrations and plug-ins; archived performance history is stored for 2 years. More than 35 strategic monitoring locations.

CloudReady - Cloud-based solution monitors web pages, transactions, DNS and network path performance for internal and external web and SaaS applications. Captures real-time end-user experience with notifications and crowd-sourced benchmarks. From Exoprise Systems Inc.

AppBeat - Web-based monitoring service from Appbeat; supports integration with HipChat, OpsGenie, PagerDuty, Pushover, Slack, StatusPage and webhooks, allows monitoring of various protocols, global multi-location monitoring and public status. Capabilities include monitoring of web server certificates for validity and send alert before expiration; listen for periodic server ping responses; check connectivity for arbitrary port using TCP or UDP protocols; check DNS server entries for correct address resolution; check email servers (IMAP, POP3, SMTP); native support for HTTP and HTTPS protocols with granular control over web request creation: you can choose HTTP method (GET, POST, HEAD, ...), HTTP version, IP version, set authentication or use response matching.

AppViewWeb - Cloud-based page performance analysis/testing tool from AppNeta that provides visibility into the network performance of web applications. Get hop-by-hop details for internal and external networks from the end-user perspective. Selenium-based scripting. Monitor any application, immediately, from multiple global monitors. Store high-detail performance data for up to a year doe detailed trend analysis.

Web Performance Monitor - Monitoring service from Solarwinds Worldwide LLC; key features include continuous synthetic transaction monitoring, detailed load-time metrics, monitor from multiple locations, browser-based transaction recorder, transaction recording. For Windows servers.

Monkey Test It - Automated (no coding) website tester with scheduled checks/alerts as well as an API for easy CI system integration. Detects issues in JavaScript, CSS, broken links, oversized mobile pages, and other common mistakes; checks all page elements. Based on analysis of the most common issues that most websites have, and development of custom software for identifying these issues. Free (limited) and $paid versions available.

Apica Synthetic - Synthetic site monitoring service provides real browser monitoring, in real time - from many locations worldwide across Chrome, Firefox and IE browsers. Produce performance and SLA reports for technical & managerial staff. Monitor up to 5 websites or applications. Use advanced scripting tool or record, edit and replay network traffic from any application or device—without writing any code. Can use Selenium IDE scripts. Options include SaaS solution, hybrid, and on-prem deployments. Integrate with AppDynamics, New Relic and Dynatrace.

UptimePal - Site monitoring service for periodic checking of site availability, performance, and content validation. Real time dashboard includes response times by monitoring location, content validation, logs detailing performance, quality and alert listings. 15 worldwide monitoring locations available. Receive instant alerts via email, text/SMS, phone call.

Testomato - Automated SaaS-based web site monitoring/testing in the cloud from Testomato s.r.o. Paid plans can run tests as often as every 15 seconds.

SuperMonitoring - An online tool for monitoring website uptime, its content and basic functions. 60 second checking frequency. Instant email and mobile text (SMS) alerts. From SiteImpulse.

Monitive Uptime Monitoring Service - Web site monitoring services for websites, MySQL, FTP, POP3, IMAP, DNS and many other. Periodically checks a site from multiple worldwide locations and sends notifications when they go down via SMS text, email or Twitter DM. It also monitors performance by measuring server connect, transmit and response times, executes automatic diagnosis, sends weekly reports, displays charts and more.

Uptrends Website Monitoring - Service from Uptrends LLC to monitor websites, servers, API's, multi-step transactions, performance, SSL Certificates and more from a global and end-user perspective, all from the cloud.

GotSiteMonitor - Web site uptime monitoring service from Vannet Technology provides five free website monitors with 5-minute monitoring interval. Monitor website downtime/slowness, track website performance, check webpage content, check SSL secure certificate. Free limited phone/sms alert credits. 12 monitoring locations across 4 continents. Summary reports and logs. Upgrades available to paid plans.

SiteBeam - External site monitoring service from Silktide Ltd. Enterprise tool for automatically testing website accessibility, SEO, speed, spelling, cookie law, W3C compliance, check for analytics, redirections, broken links, and more. Test and compare scores between websites, e.g. competitors and peers.

SiteObservers - Monitoring services from SymbioWare Inc. with monitoring locations worldwide. Unified dashboard provides performance data of Web and Mobile applications, databases, servers and network. Emulate real user actions to check on critical functions - create automated monitoring Web tests - no programming or scripting skills required. Real Browser Web Transaction Monitoring. Linux and Windows servers' health monitoring.

SiteUpTime - Basic plan for monitoring one web site is free; others $. Highly configurable service options, multiple monitoring locations around the world; if more than one location detects a connection failure a notification is sent.

Panopta - Website, network, and infrastructure monitoring system from Panopta LLC provides monitoring from public internet as well as agent-based and appliance-based monitoring behind firewall. Global monitoring system checks from all 24 time zones. Provides ability to set up complex synthetic transaction checks.

Pingdom - Web site monitoring services from Pingdom AB; monitor uptime, performance, simple or complex transactions. Real user monitoring. Includes current and historical reporting; world-wide network of monitoring servers.

Site 24x7 - Monitoring of website uptime & performance from more than 90 geograph locations worldwide, from Zoho Corp. Synthetic monitoring using a real browser and multi-step user interactions using a powerful recorder tool, or import existing selenium IDE test cases. Email/ SMS/ voice/ instant messenger/ RSS/ push notification alerts and reports. Create public status dashboards to communicate downtime and notify customers of service status.

WebSitePulse - Monitoring service provides simultaneous monitoring from multiple global stations; alerts sent when web page errors occur, performance thresholds are exceeded or connectivity problems are detected and verified from up to three independent monitoring resources, and when unauthorized content changes are detected. Vulnerability monitoring includes security recommendations. DNSBL (DNS-based Blackhole List) blacklist monitoring. Customizable alert escalation schedules, configurable 'Do Not Disturb' times for contacts, create custom dependency rules for each alert target. Highly customizable monitoring choices and pricing.

internetVista - Service from InternetVista SA remotely monitors web sites and Internet services for availability (http, https, smtp, ftp, pop, nntp, tcp). Performance reports online or via email. Monitoring centers in U.S. and Europe.

Host Tracker - Website availability and performance monitoring service; checks site availability from 140+ locations through HTTP, ICMP(ping), SMTP, SNMP, TCP. Content monitoring, response time monitoring. Black lists check. Domain and security certificate expiration monitoring. Notifications via SMS, Email, SKYPE, Hangouts or Voice Call.

Neustar Website Monitoring - Monitoring service from Neustar. Scriptable alerting. Utilize commonly used browsers: IE, Firefox, Chrome or all and compare performance among them; or monitor with emulated browsers. Worldwide monitoring network, using real or emulated browsers.

Vertain Monitoring Service - Services from Vertain Software include verification that web site is up and running and that users can complete multi-page transactions. Scenarios are data-driven - scenario specifications are stored in a database, and can be entered and modified through heirarchical data entry pages, including a scenario level, page level and page component level. At each level one can specify validation rules, data entry logic and "click" logic using condition and value comparisons, branching, random selections, and other logic elements designed to enable interactions to mimic a real user. Scenarios do not require script programmers to maintain. Alerts by email or phone call, or by integrating with customer service ticket system; customizable alert scheduling and escalation.

AlertBot - Monitoring service from InfoGenius, Inc. tests website availability and performance from global locations, and alerts webmaster of downtime. Can verify every page element, every script, every interactive feature, including logins, signups, etc. Scan for errors and track load times. Monitor using real web browsers; configurable multi-step, mult-page interactions.

AlertSite - Web site monitoring service from SmartBear Software to ensure website/services/API's are available and performing optimally. Includes mobile web monitoring capabilities, and real browser monitoring. Monitoring from multiple worldwide locations. Synthetic interactions via DejaClick codeless web recorder, or use Selenium test scripts or SoapUI test scripts. Integrates with multiple Ops and DevOps tool stacks.

elkMonitor - Service from Elk Fork Technologies Inc. for websites and other Internet servers; monitors availability and performance. Transactional script based monitoring; SSL certificate expiration monitoring. Monitoring points across U.S. and Europe.

Catchpoint Monitoring - Monitoring service from Catchpoint Systems Inc.; both real user monitoring and synthetic monitoring available. Synthetic monitoring includes transaction monitoring via Selenium scripts; monitoring from backbone, broadband, cloud, last mile, and wireless providers, or from your own Enterprise Node. 20 pre-packaged monitor types or deploy a custom monitor on Enterprise Nodes. Measure request components, like buffering and bandwidth of a stream. RUM reporting tools provide full, unsampled, and unaggregated user data in one place alongside the tools to navigate it. Filter by various user attributes, like OS, page visits, ISP, browser, error messages, location, and more. View month-over-month or week-over-week performance. Provider and Zone Reports help detect and identify third-party content and resource slow-downs.

Aternity - Steelcentral Aternity End User Experience Monitoring from Riverbed Technology. Monitor the end user experience of all your enterprise apps, running on any physical, virtual, or mobile device. Automatically generates a baseline for every application, device and user performance metric collected. Baselines can automatically be split, by location, subnet or target server, etc. Automatic discovery of all local, cloud, web, or instrumented enterprise mobile app running on any physical, virtual, or mobile device. Automatically detect incidents and generate alerts to 3rd party service desk and ITOA systems. Oriented to internal enterprise monitoring.

AlertMeFirst - Remote monitoring service reports on the performance and availability of a web site from customer's perspective. Provides alerting via email or page and online graphs of performance data (response times, up time, averages, availability, etc.)

Dotcom-Monitor - External synthetic website monitoring/alerting/load testing service; monitoring locations worldwide. Works with complex application technologies, including Flash, Silverlight, HTML5, Ajax, Websockets. Supports full-cycle sequential transactions; 'macro recorder' capabilities for setting up monitoring of complex processes such as online ordering. Private Agents available for monitoring internal websites behind a firewall. Performance monitoring from over 30 worldwide locations with real browsers (IE, Chrome, Firefox). Customizable alert notifications and escalation chains. Review customizable reports and waterfall charts synced to video playback of your script.

SiteGuardianPro - Site monitoring solution from SmileyTech provides 24x7 monitoring of downtime, user experience, and application problems. Includes recommendations for resolving issues found. Configururable notification method and intervals.

WatchDog - Online website tracking and monitoring services from Network Solutions; geared to small business web sites. Provides uptime and load time reports, downtime alerts, etc. Distributed monitoring from multiple worldwide sites.

Dynatrace Digital Experience Monitoring - Real user monitoring and synthetic monitoring, from Dynatrace LLC. Provides end-to-end monitoring of every single customer journey. Performance analysis includes action duration, Apdex rating, JavaScript errors, 3rd party providers, and services. Finds errors on code level and provides an exact line number as well as a stack trace. Provides distribution of browsers/versions on which the end users are experiencing them. Monitors performance of 3rd Party providers. Checks availability, outages, total downtime and more crucial metrics; checks APIs, web pages and mobile pages perform properly from all customer locations. Synthetic monitoring uses all major desktop and mobile browsers to comprehensively simulate customer journeys from thousands of locations around the world. Integrated view of the user experience across all mobile and web applications.

Return to top of web tools listing


Web Site Management Tools

(This section includes products that contain: site version control tools, combined utilities/tools, server management and optimization tools, link checking tools, SEO optimization tools, and authoring/publishing/deployment tools that include significant site management or testing capabilities.)

Webhint - Open source configurable linting tool that assists with checking site's accessibility, speed, security and more, by checking code for best practices and common errors. Use the online scanner, or use the CLI with pre-configured set of rule checks to cover the basics.

Pulno - Web site analysis and SEO audit from DATAFIC sp. z o.o. performs technical SEO issues analysis several dozen site characteristics such as search engine guideline conformance, metadata, title and h1 headers analysis, page loading times, link flow and website structure. Also checks for duplicate content, title and meta description duplication. Handles site link change monitoring, metadata and content changes monitoring, performance monitoring, image optimization, more. Detailed report includes a comprehensive to-do list to make issues easy to find, understand and fix.

SortSite - Desktop app for Mac or Windows, from PowerMapper Software, that checks pages against W3C standards, checks for compliance with accessibility standards; link checker, browser compatibility checker; checks for regulatory compliance; checks site against Google/Bing search guidelines; checks for valid-but-deprecated HTML/XHTML tags and attributes, more. Cloud-based version available also.

Dareboost - Online service for testing, analyzing, and monitoring web pages. Includes: performance testing for page speed using multiple test locations and real Chrome browsers; web page analysis using 100+ checkpoints for SEO, Security, Performance, with optimization guidelines provided; comparison and benchmark analysis; performance synthetic monitoring for monitoring page speed at preset intervals.

DynoMapper - Online site management and accessibility tool from Dynomapper by IDC Interactive; includes a visual sitemap generator, content inventory and audit, content planning tool, accessibility testing for WCAG / Section 508 compliance. Also can automatically import keywords from a domain and receive daily keyword tracking reports about rankings on Google, Yahoo, and Bing with the ability to track by location or device.

Simply Testable - Web-based service provides one-click full-site automated HTML validation, CSS validation, JavaScript static analysis (using a configurable JSLint) and broken link checking.

Vervy - Free online tool - just enter a url. Checks how well a page follows the Google guidelines; has explanations and backround information on each guideline. By Patrick Sexton.

Nuxeo - Platform for Enterprise Content Management handles traditional content and rich media assets. Allows customers to leverage content stored in their existing enterprise content management systems, without the disruption associated with moving legacy applications onto a new platform. Uses schema-flexible metadata that can easily adapt and expand as customer requirements change over time.

Radiant CMS - A no-fluff, open source content management system designed for small teams. Features: elegant user interface, flexible templating with layouts, snippets, page parts, and a custom tagging language, extension/plugin system, simple user management and permissions.

BugDigger - Web bug reporting tool from BugsIO Solutions, Inc; works as a plugin for Chrome, Safari, MS IE and Firefox, adds a bug reporting button to browser toolbar. Automatically collects contextual data that may be of use to developers to isolate the bug to a specific area. Capabilities include screenshot of the web page, screenshot annotation editor, current and recently opened URLs on the web site, browser details, and more. Can send bug reports to hosted My BugDigger service or, via API's, to your Jira, Bugzilla, Fogbugz, Basecamp, Mantis, etc.

Webriq GLUE - Web-based site management and editing tool with drag and drop capabilities, for web, social and mobile marketing initiatives. Utilizes open-source web technologies – MongoDB, Javascript Content Framework, React.js, Webpack and CSS all glued together with API’s. From Webriq Pte Ltd, includes multiple language interfaces.

A1 Website Analyzer - Website analyzer and link checker from Microsys, also can check response times, spell check, html and CSS validation, track file sizes, check for page title duplication; optimize internal page link structure to maximize SE page rankings, list all images where one or more references are missing "alt" text. Also available is 'A1 Sitemap Generator' for crawling and generating sitemaps of large web sites. For Win and Mac platforms; free and $paid versions available.

BrowserCMS - Web content management system from BrowserMedia LLC for creating, managing, and publishing dynamic, information driven websites. Direct in context editing. Supports larger teams of editors, allows for varied permission models, customizable via modules. Browse by an intuitive sitemap of folders and pages Search for content, or browse by content type. Extensible Content API. Compatible with multiple server OS's and web servers; runs on Ruby on Rails. Related app available as an open source CMS .

Ahrefs - Web-based Site Management tool collection from Ahrefs Pte. Ltd. Includes tools for for improving marketing and SEO, competitive analysis capabilites, keyword research tools, content research tool, link building tools, rank tracking, backlink research, web monitoring, more. Reference data set of 30 petabytes; daily crawls 6 billion web pages.

DeepTrawl - Free downloadable site management tool from Deep Cognition Ltd. finds dead/slow/invalid links, finds common html flaws, has integrated HTML editor with problem highlighting, finds stale content. Finds slow content based on configurable settings, checks for undesirable user postings, exports to CSV / HTML, more. For Win or Mac.

WebWatchBot - Web site monitoring, notification, and analysis tool for web sites and IP Devices, from ExclamationSoft Inc. Capabilities include real-time charting of response times for multiple items, reporting of historical data, comprehensive dashboard view of all monitoring. Monitor web page transactions - execute any monitored item in sequence, handle login and web form posting, run as a windows service or application. Requires Windows, SQLServer.

Savvy Content Manager - Content management tool from Savvy Software Inc. Simplified editing process - click on an area of your web site in Savvy's browser-based interface, update the information and then publish to the Web with another click. No coding, no file transfers, no additional software.

WebCEO - Tool from Web CEO Ltd. oriented to SEO - keyword research, run in-depth SEO audits, monitor backlinks, conduct safe link building and link detox, social media analysis and competitor research. Technical site audit detects broken links, slow pages, and other technical issues. Check website rankings on 370+ search engines.

IBM Tealeaf CF - Web application customer experience analytics solution from IBM (formerly from TeaLeaf Technology Inc.). AI-powered struggle alerts and analytics, fraud detection, and more.

Enterprise Content Management Suite - Enterprise and Digital content management systems from Open Text Corp, designed to help organizations with digital transformation. Creates a centralized, unified information grid, connecting information from across the enterprise with the people and systems that need it,

Trellian InternetStudio - Suite of web site management utilities from Trellian Pty Ltd, including site upload/publishing tools, text editor, HTML editor, link checker, site mapper, spell checker, site spider, image handling, HTML encryptor/optimizer, HTML validator, image mapper, e-commerce site designer/generator. For Windows.

Oracle WebCenter Content - Content management tool - all content and content types are stored for management, reuse and access. Capabilities include digital asset management, records management, image management via intelligent data capture, annotation and markup of images, automates routing and approvals; capture, secure, share and distribute digital and paper-based documents and reports.

Rhythmyx - Web content management product from Percussion Software Inc.; provides a development platform that manages content infrastructure with the freedom to continue to build and integrate other web applications without restrictions. Publishing, version control, and customizable workflow. Manages Web content, documents, digital assets, etc. Content can come from any source and be formatted for any output, including websites, RSS feeds, XML, blogs, social media, print. Share content across websites, blogs, social networks, databases, and web applications. Business rules can be used to apply personalization to target content for each website visitor based on their behavior, and web analytics can be leveraged to provide metrics and automation. Freely integrate web content management with custom and legacy web applications and your existing technology stack. Section 508 compliant.

HTML-Kit Tools - Edit, preview, validate, publish and manage projects from a standards-compliant editor. Preview as you edit, inside the editor, or in PCs/Macs, tablets and smart phones for easily testing pages in multiple devices and operating systems. Full-screen mode gives you more screen space and clutter-free editing. Comes with dark and light color themes for the editor and UI. Edit a single site or manage hundreds of sites with built-in version history, projects and profiles. Built-in HTML Tidy can point out invalid markup and suggest improvements. Or use industry-standard W3C HTML/CSS Validators with a single click. For Windows. Various free online tools also available including CSS Poster, Image Embelisher, Image Splitter.

WS_FTP Pro - FTP/web publishing tool from Progress Software Corporation; manage, upload, and update websites; automatically resume interrupted transfers; drag-and-drop files. Files can be automatically compressed into .zip format before uploading. Supports SSH, SSL and HTTP/S. For Windows.

XMetal - XML development tool from Justsystems Corp. for XML-based web site authoring and validation. Uses XML standards such as the Darwin Information Typing Architecture (DITA). Publish XML content directly from author’s desktop to a variety of customer-facing output formats including PDF, EPUB, Kindle, HTML, online help systems and more. Integrate authoring with virtually any repositories, CMS's or source control systems. Can handle ontent in right-to-left languages. For Windows.

PowerMapper - From PowerMapper Software; for customizable automated site mapping, accessibility and usability checking, HTML validation, privacy, link checking, CSS validation, browser compatibility, and more (for tool suite that includes Powermapper and SortSite). Site maps in multiple visual perspectives. Downloadable version for Mac and Windows; also available as a web-based app.

Dreamweaver - Tool from Adobe to design, code, and publish responsive websites; support for HTML, CSS, JavaScript, and more. Create, code, and manage dynamic websites easily with the simplified coding engine. Access code hints to quickly learn HTML, CSS, and other web standards. Includes starter templates that you can customize to build HTML emails, About pages, blogs, e-commerce pages, newsletters, and portfolios. Code coloring and visual hints help read code more easily for quick edits and updates. Git support enables management of source code within Dreamweaver and performance of all common operations right from the Git panel.

NetObjects Fusion - Site authoring/management tool from NetObjects Inc. Visual site structure editor, layout editor, graphics management, staging/publishing control. Includes capabilities for mobile web sites. For Windows.

Content Management apps listing - Large listing of content management apps, in Wikipedia. Includes info re: Proprietary, Open source, etc; Platform (java, php, asp.net, Perl, python, etc.) supported databases and latest release date.

Return to top of web tools listing


Other Web Test Tools

XPath Finder - Chrome extension for finding xPath for any page element. Click on the plugin icon, cursor will be changed to the crosshair; hover over the element of interest to highlight it; then click on the element and the xPath will be displayed.

XPath Helper - Chrome extension that makes it easy to extract, edit, and evaluate XPath queries on any webpage.

Nock - Open source HTTP server mocking and expectations library for Node.js; can be used to test modules that perform HTTP requests in isolation. For instance, if a module performs HTTP requests to a CouchDB server or makes HTTP requests to the Amazon API, you can test that module in isolation.

Dirty Markup - Online HTML Beautifier; paste in HTML/JS/CSS/API; set other cnofigurations, and click on 'clean'. By 10 Best Design.

Window Resizer chrome extension - Enables emulation of various resolutions - helps test layouts on different browser resolutions. Resolutions list is completely customizable (add/delete/re-order). You can set the window's width/height, window's position, preset icon (phone, tablet, laptop, desktop). Option to apply the new dimensions to the entire window or just to the viewport. Also features customizable global key shortcuts, an option to export your settings and import them on another computer and more.

Page Ruler chrome extension - Draw a ruler to any page and view the width, height and top, bottom, left and right position, drag the edges of the ruler to resize it; use the arrow keys to move and resize the ruler, show guides extending from the ruler edges, manually update the size and position of the ruler from the toolbar to make precision changes, enable "Element Mode" to outline elements on the page as you move your mouse over them, navigate through parents, children and sibling elements of any measured element.

FireShot Chrome extension - Full webpage screenshots; capture, edit and save them to PDF/JPEG/GIF/PNG, upload, print, send to OneNote, clipboard, email, gmail. Can edit and annotate captures.

W3C Internationalization Checker - Free online service from the World Wide Web Consortium checks one web page at a time for its level of internationalisation-friendliness. Generates a table listing key international settings for a page, such as character encoding, language declarations, and text direction. Also provides a list of errors, warnings and helpful suggestions about the page, with pointers to resources where you can learn more. Takes into account both markup and HTTP headers.

PRTG Network Monitor - Network and server monitoring toolset from Paessler AG, available as downloadable app for windows or as a hosted service. Free and paid versions available.

Ghostery browser extension - Browser add-on works with most browsers; allows switching 3rd party items in page on/off; helps test for functional impacts if users block certain items or if 3rd party items block or delay loading of certain component(s) of you web pages.

HTTP Archive Viewer - HAR file viewer chrome extension; allows you to inspect HAR log files generated by browser. HAR (HTTP Archive) files can be generated by most browsers and contain a log of HTTP requests and responses, they can also contain body content. Good for debugging HTTP sessions.

Siesta - JavaScript unit testing tool from Bryntum AB that helps test any JavaScript code and also performs testing of the DOM and simulates user interactions. Can be used together with any type of JavaScript codebase – jQuery, Ext JS, React, Angular etc. Using the API, you can choose from many types of assertions ranging from simple logical JS object comparisons to verifying that an HTML element is visible in the DOM. Free 'lite' version for running tests in the browser; paid version can run from command line, enables automation, has an event recorder, can integrate with selenium, can generate code coverage reports, and more.

Browsersync - Open source tool for keeping multiple browsers & devices in sync when building/testing websites. Works by injecting an asynchronous script tag right after the body tag during initial request. Can eliminate many repetitive manual tasks such as URL pushing, form replication, clicks, scrolls, etc. Customise an array of sync settings from the UI or command line to create a personalised test environment. Easily integrated with most web platforms, build tools and other Node.js projects. Built on Node.js to support Windows, MacOS and Linux. Browsers are automatically updated as you change HTML, CSS, images and other project files.

HTML Comments Parser - Open source tool written in Python - visits user provided URL's and extracts the comments (HTML style, JS style, C style single line and multi-line) and writes the summary to a file. Among the extracted comments it will also search for user provided keywords (like password, pswd, passwd, author etc.) and writes those lines containing them to a file. This is useful for checking if any sensitive information is part of the comments.

Time Machine - Software virtual clocks from SolutionSoft Systems Inc. that enable 'time traveling' of apps into the future or the past, facilitating time shift testing on date and time sensitive application logic, such as month end, quarter end, year end processing, billing cycle, work flow, regulatory go live, and policy life cycle. Transparent to apps and databases so no code modification is required to do time shift testing and the system clock is never modified.

TimeShiftX - Date and time simulation software from Vornex, Inc. that enables instant "time travel" for web & software apps in the future or past to temporal test all date and time sensitive functionality and code such as end of year/month/quarter, daylight savings, leap year, billing, rates, policies, etc. Employs user level virtual time containers to provide simulated dates & times to apps & DB's. Virtual times can be in the future, past, frozen, or accelerated/decelerated.

ScienceLogic Hybrid IT - Monitor and visualize cloud-based as well as on-premises infrastructure - enables increased efficiency in offloading resources, controlling costs and cloud sprawl by seeing the linkage of technologies between off- and on-prem resources, and ensure application uptime. Gain complete visibility by seeing the interdependencies across your infrastructure from both high-level and detailed views. Monitor network, storage, compute, applications, and clouds. Map dependencies between components. From ScienceLogic Inc.

Trickle - A lightweight open source userspace bandwidth shaper for *nix. Can run in collaborative mode (together with trickled) or in stand alone mode. Download and upload rates can be set separately, or in an aggregate fashion. Can set the maximum download speed of your browser by creating a custom launcher via a simple command.

Yeti - Open source command-line tool by Reid Burke for launching JavaScript unit tests in a browser and reporting results without leaving your terminal. Designed to work with tests built on YUI Test, QUnit, Mocha or Jasmine just as they are. Capabilities include server-side AJAX testing with echoecho, JUnit XML output to work with Jenkins, optional Selenium/WebDriver browser launching. Requires Node.js

Karma - Open source tool that allows execution of JavaScript code in multiple real browsers (desktop, mobile, tablets, etc.) testing locally during development. Powered by Node.js and Socket.io. Oriented to test-driven development. Although not a testing framework it can be used or adapted as needed, and has ready-to-go support for Mocha, Jasmine, and QUnit. Works with multiple browsers including IE, Firefox, Chrome, Safari, Opera, PhantomJS. Simple integration with Jenkins, Travis or Semaphore.

Mocha - Open source JavaScript test framework running on node and the browser. Tests run serially, allowing for flexible and accurate reporting, while mapping uncaught exceptions to the correct test cases.

Testem - Open source Javascript Unit testing testrunner. Supports Jasmine, QUnit, Mocha, Buster.js, others via custom test framework adapters. Run tests in all major browsers and Node and PhantomJS. Supports TDD — streamlines TDD workflow; supports continuous integration - works with CI servers like Jenkins or Teamcity. Supports OS X, Windows, Linux; Preprocessor support for CoffeeScript, Browserify, JSHint/JSLint, etc.

Istanbul - Open source JS code coverage tool that computes statement, line, function and branch coverage with module loader hooks to transparently add coverage when running tests. Supports all JS coverage use cases including unit tests, server side functional tests and browser tests, for node and browser. Can be used on the command line as well as a library.

STB Tester - An open source video-capture record/playback system for automated testing of set-top boxes and similar devices, from David Röthlisberger. Can record a test case by listening for remote-control keypresses, taking screenshots from the set-top box as it goes; includes image-matching capabilities. Written on top of GStreamer, a library of media-handling components. Test scripting is in Python.

Robot Framework - Open source test automation framework for acceptance testing and acceptance test-driven development (ATDD), from Nokia Siemens Networks. Has a tabular test data syntax, uses keyword-driven testing approach. Can be extended by test libraries in Python or Java. Provides easy-to-read reports and logs in HTML format, and a command line interface and XML based outputs for integration into existing build infrastructure. Provides support for Selenium for web testing as well as support for Java GUI testing, running processes, Telnet, SSH, etc. operating system and application independent.

Charles - Web debugging proxy app by Karl von Randow is an HTTP proxy / HTTP monitor / Reverse Proxy that enables viewing all the HTTP and SSL/HTTPS traffic between the browser and the Internet. This includes requests, responses and the HTTP headers (which contain the cookies and caching information). Other capabilities include bandwidth throttling; breakpoints to intercept and edit requests or responses. For Win/Mac/Linux.

Fiddler - Free HTTP Debugging Proxy from Telerik which logs all HTTP traffic between your computer and the Internet. Inspect all HTTP Traffic, set breakpoints, and "fiddle" with incoming or outgoing data. Debug web traffic from any Windows-based PC, Mac or Linux system and mobile devices. Can also be used for performance testing and security testing. Handles HTTPS encryption/decryption - display and modify web application requests via man-in-the-middle decryption technique. Extend Fiddler using the .NET Framework by creating either Custom Rules or Inspectors. Extensibility model ranges from simple FiddlerScript to powerful Extensions which can be developed using any .NET language. Many existing useful addons available. Works on most browsers/OS's/platforms.

HTTPWatch - An HTTP viewer and debugger as an MSIE or Chrome extension, for Win and iOS, for HTTP and HTTPS monitoring without leaving browser window. From Neumetrics Ltd. Select a request in HttpWatch and everything you need to know is display in a tabbed window. Cookies, Headers, Query Strings and POST data can be quickly viewed, searched and exported to other formats. Groups together requests within a heading for each page making it much easier to understand multi-page steps, e.g. log in, search and update pages. Includes an HttpWatch API to collect performance data from your automated web site tests. Basic free and paid versions available.

WireShark - Free network protocol analyzer available under the GNU General Public License. Capabilities include deep inspection of hundreds of protocols, live capture and offline analysis, standard three-pane packet browser, runs on most platforms. Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility; rich VoIP analysis; read/write a very wide variety of different capture file formats. Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others. Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2. Coloring rules can be applied to the packet list for quick, intuitive analysis. Output can be exported to XML, PostScript, CSV, or plain text

HTTP Debugger - A proxy-less HTTP sniffer for debugging and analyzing HTTP API calls to a back-end and between back-ends. Doesn't change the browser's configuration for the proxy. Can display HTTP(s) traffic from any browser and JAVA/.NET apps. Edit and resubmit tweaked HTTP sessions back to your server and check how it handles such requests. Automatically highlights errors, slow and large requests. Create custom highlighting rules; contains many built-in viewers for various datatypes, including HTTP header viewers, HTML/JS/CSS viewers with syntax highlighting, XML/JSON tree viewers, Cookies viewer, URL Params viewer, Images viewer, HTTP Session Summary viewer and many others. Built-in URL/Text converter to decode (or encode) URL, Base64, or Hex encoded strings. Easily filter out unnecessary data by using Excel-like filters or creating even more advanced filters. Automatically numbers all requests in the chronological order.

Hoxy - Open source HTTP traffic-sniffing and manipulation API for Node.js for JavaScript programmers, for uses similar to Charles or Fiddler. capabilities include intercepting requests and/or responses, observing and altering all aspects of requests/responses, simulating network slowness and latency. Supports direct and reverse proxying. Request/response body types: JSON, string, jQuery, buffer, etc. Supports both HTTP and HTTPS.

Email on Acid - Service to preview an email in more than 70 variations of the most popular mobile devices, web-based email clients, and email apps. Tests can be run 3 ways - insert a URL, cut/paste HTML code, send an email directly to Email on Acid account. Uses two approaches: a) Screen Captures - the email is sent through each email client application with a screen capture of the final result, b) Code Based Simulations - a code based simulation of the email is generated by analyzing and parsing the HTML and CSS code much like each of an actual email clients does, and test results are displayed from within a web browser; for web based email clients, the email is displayed as it would appear in the browser being used to run the test. Free and $paid versions of service available.

Litmus - Email preview service via screenshots of how email would appear in more than 90 mobile devices, apps, and email clients. Allows uploading the HTML or sending a test email. Also provides cross-browser landing page and website testing, in addition to the email previews, by generating landing page previews in multiple web browsers.

Web Developer - Firefox extension with a vaireity of useful capabilities; one of the more popular Firefox extensions for dev/testing. Capabilities include inspect, edit and disable CSS, graphics; browser resizer; much more.

Greasemonkey - Firefox extension that enables user to customize the way a web page displays or behaves, by using small bits of JavaScript; hundreds of useful Javascript snippets available, or write your own.

FireShot - Firefox extension that creates screenshots of web pages entirely and enables annotations. save as PNG/GIF/JPEG/BMP/PDF. Also available for Google Chrome and IE.

RedBot - An open source tool that checks HTTP resources for feature support and common protocol problems. Public instance available, or you can install it locally and use it on the command line, or self-host your own Web checker.

W3C Spell Checker Online free spell checker for English or French from W3C.org.

Datayze Website Spell Checker - Free online web site grammar and spell checker from Datalyze.com for up to 1000 pages per user per day. Includes ability to configure various optional crawler parameters/arguments such as words to ignore or limit to or exclude specific elements, etc.

System Shepherd - An IT Performance Monitoring and Operations Management Platform for web and other systems; from Absolute Performance Inc. Delivers an enterprise-wide view of system performance and alert status; supplies analysis and reports based on real-time, recent, and historical data. Works with on-premise and SaaS environments.

UnmaskParasites - A free online service that checks web pages for hidden illicit content (invisible spam links, iframes, malicious scripts, unauthorized redirects and other signs of security problems By Denis Sinegubko/Sucuri Inc. Just type in the URL of the web site to be checked.

File Comparators - Web testing - or any type of testing - often involves verification of data vs expected data. While this is simple enough programmatically for single data points or small data sets, comparison of large amounts of data can be more challenging. This site, maintained by FolderMatch/Salty Brine Software, a windows file/folder comparator tool vendor, lists a large number of data comparators for Windows platforms. The FolderMatch tool from Salty Brine Software shows text differences between two ASCII text files, Microsoft Word documents, Excel Spreadsheets, RTF documents, or *Adobe PDF documents. (MS Word, MS Excel, and Adobe Reader not required); it handles eight comparison types: Filename Only, Size Only, Size and Date/Time, Contents, Attributes, Version Stamp, CRC32, and SHA-1. Supports HUGE files (> 4 GB)

TMX - Keyword driven test automation product from Critical Logic, provides automated, fully annotated, executable scripts for Ranorex, Selenium, RFT, etc. Enables non-technical resources to build automated tests using a Keyword script editor to access a powerful automation framework. An intuitive interface allows Keywords to be named and organized in a way that makes finding the appropriate Keywords easy and efficient.

HTT - Open source scriptable HTTP test tool for testing and benchmarking web apps, web servers, proxy servers and web browsers. Can act as client (requesting) and server (backend for reverse proxies). Pattern matching answers (both server and client) to test validity.

BWMeter - Bandwidth meter, monitor and traffic controller from DeskSoft e.U., which measures, displays and controls all traffic to/from computer(s) or on your network. Can analyze the data packets (where they come from, where they go, which port and protocol they use). Filter by network address, port, application, etc. For Windows platforms.

Aptixia IxLoad - L4-7 performance testing for multiplay services, application delivery platforms, and network security appliances - comprehensive performance testing for validating user quality of experience; works by emulating web, video, voice, storage, VPN, wireless, infrastructure, and encapsulation/security protocols to create realistic scenarios. Provides built-in reports contain concise performance metrics at test, protocol, and port level; customizable. Includes IxReporter Designer Studio to create new charting and analytics using all the raw metrics from IxLoad rest results as well external sources. Available on virtual platform, public cloud, or appliance.

Qutoric XML Editing Tools - Free tools for XML editing, XSLT editing, XPath editing, and XML visualisation, by Phil Fearon. Tools include XMLFlow, XMLQuire, PathEnq, XMLSpectrum; includes online and downloadable tools. Also XMLSpectrum-FX, a portable desktop java app providing a graphical front-end to XMLSpectrum allowing code to be edited in situ or drag-and-dropped for rendering in HTML.

Morae - Web site usability test tool from TechSmith Corp. for automated recording, analyzing and sharing of usability data. Consists of 3 components. A Recorder records and synchronizes video and data, creating a digital record of system activity and user interaction. An Observer component enables geographically dispersed observers to watch usability tests from any location; it displays test user's computer screen along with a picture-in-picture window displaying the test participant's face and audio; Remote Viewer observers can set markers and add text notes. The Manager component includes integrated editing functionality for assembly of important video clips to share with stakeholders. For Windows.

VisitorVille - Site traffic monitoring tool and log analyzer from Pronunciator LLC that depicts website visitors as animated characters in a virtual village; users can watch their web traffic as if they're watching a movie. Insert a snippet of HTML code into the pages to be monitored; traffic data stored on Visitorville servers. For Win platforms.

Sandra - 'System ANalyser, Diagnostic and Reporting Assistant' utility for Windows desktops and servers, from SiSoftware. Provides large variety of information about a Windows system's hardware and software. Includes CPU, mainboard, drives, ports, processes, modules, services, device drivers, ODBC sources, memory details, environment settings, system file listings, and much more. Provides performance enhancing tips, tune-up wizard, file system and memory bandwidth benchmarking, more. Reporting via save/print/fax/email in text, html, XML, etc. Free, Personal, Enterprise, and other versions available.

Co-Advisor - Tool from The Measurement Factory for testing quality of protocol implementations. Co-Advisor can test for protocol compatibility, compliance, robustness, security, and other quality factors. Has modules for HTTP (RFC 2616) and ICAP (RFC 3507) protocols. Other info: runs on FreeBSD packages, Linux RPMs, Windows (on-demand); available as on-line service, binaries, or source code.

TcpTrace - Tool by Simon Fell acts as a relay between client and server for monitoring packet data. Works with all text-based IP protocols. For windows; freeware. Also available: ProxyTrace open source tool.

XML Conformance Test Suite - XML conformance test suites from W3C and NIST; contains over 2000 test files and associated documentation, which includes background information on conformance testing for XML as well as test descriptions for each of the test files.

MRTG - Multi Router Traffic Grapher - free tool by Tobi Oetiker utilizing SNMP to monitoring traffic loads on network links; generates reports as web pages with GIF graphics on inbound and outbound traffic. For UNIX, Windows.

Return to top of web tools listing