API Test Automation Pricing for Modern Engineering Teams
Flexible plans for startups, growing teams, and enterprises. Start free — no credit card required.
What you get with every plan
Automate REST, GraphQL & OpenAPI
REST, SOAP and GraphQL, plus JSON-RPC/MCP and WebSocket-RPC on Trial and Enterprise.
CI/CD Native Integration
A GitHub Action, an Azure DevOps extension and a downloadable Jenkins plugin, generated pipeline files for GitHub Actions, GitLab CI, Azure Pipelines and Jenkins, and a REST API for any other pipeline.
AI-Powered Test Generation
Generate tests from your specs in one click; failing tests get grounded fixes you review.
Real-Time Reporting & Analytics
Track coverage, success rates, and response times in one place.
Not ready to pick a plan? Start with free lessons.
32 free, hands-on API testing lessons — REST, GraphQL, SOAP, JWT, OAuth2 and AI — running against a live sandbox. No signup required.
New: performance and load testing is available as a paid add-on to Professional, Custom and Enterprise, and is included in the 15-day Trial. See the add-on packages ↓ What it does →
New: API security testing is a second paid add-on on the same plans, and is also included in the Trial. See the add-on packages ↓ What it checks →
New: API Discovery is a third paid add-on on the same plans, and is also included in the Trial. See the add-on packages ↓ What it does →
Plans for every team
Trial, Citizen Developer, Professional, and Enterprise — pick the tier that fits your team.
Trial
Full Evaluation15-day full evaluation of the platform, including all three add-ons (performance, security and API Discovery), SSO configuration and secret references. Outbound webhooks are not part of the trial.
No credit card required
- Evaluates the Enterprise feature set, including persona dashboards, SSO configuration and all three add-ons (outbound webhooks excepted)
- JSON-RPC 2.0 / MCP and WebSocket-RPC testing
- Project Assistant, failed runs explained as causes, release verdicts, MCP server
- Unlimited users, endpoints, mocks, workflows
- Self-hosted or cloud deployment
- AI test & mock generation (BYO key)
- Performance & load testing included (Scale limits: 2,000 VUs per generator, 12-hour runs, load agents)
- API security testing included
- API Discovery included (up to 50 sources, any number of customer-side agents)
- API governance, requirement import from Jira, Azure DevOps, GitHub, GitLab and Confluence, Quality Agent reviews and prepared fixes
- Self-hosted LLM (Ollama / LM Studio / vLLM)
- Persona dashboards & analytics
- Audit logs, RBAC
- Trial-priority email support
Citizen Developer
FreeFree single-user tier with caps and no end date; the licence is renewed free every 6 months. Built for solo developers.
No credit card required · free renewal every 6 months
- 1 user / single-seat license
- 50 endpoints, 50 mocks, 50 workflows
- 10 steps per workflow, 1 concurrent run
- 3 auth profiles per project
- REST / SOAP / GraphQL authoring, Postman import, SSE streaming tests
- AI test & mock generation (bring your own cloud LLM key)
- Project Assistant and failed runs explained as causes
- One page for each API, an Overview of a project's APIs and a dependency map
- Mock scenarios, error responses, a contract check and stateful mocks (up to 50 mocks)
- Many requirement documents, one requirement set, traceability matrix; Jira and Azure DevOps CSV upload
- Data-driven testing and fill-tests-from-data
- Every auth method: OAuth 2.0, JWT Bearer, NTLM, mTLS and more
- Local Runner (.exe desktop)
- Reports include "Powered by Shift-Left Studio" watermark
Professional
Up to 25 seats with no caps — built for growing API teams.
Per user / annual
- Up to 25 seats
- Unlimited endpoints, mocks, workflows & runs
- Visual workflows with conditions, loops and data passed between steps
- Test Run Packs, Scheduler & CRON
- Performance & load testing available as a paid add-on
- API security testing available as a paid add-on
- Project analytics, trends and top failing tests
- Project Assistant, failed runs explained as causes, API change detection
- Release verdict per API, with a CI quality gate and generated pipeline files
- Spec change review: see the tests, mocks, load tests, workflows and requirements a change touches before you approve it
- API governance: lifecycle, required approvers and design-standard rules you switch on
- Requirements imported from Jira, Azure DevOps, GitHub, GitLab and Confluence tickets
- Quality Agent review reports, and export of the audit log, security compliance view and traceability matrix as CSV or PDF
- API Discovery available as a paid add-on
- RBAC with per-project roles, audit logs, comments & policies
- Webhooks and scoped API keys
- Public REST API, a GitHub Action, an Azure DevOps extension and a downloadable Jenkins plugin
- MCP server for AI agents (Claude, Cursor)
- Business-hours email support
Enterprise
Enterprise GradeUnlimited seats with SSO configuration, Vault secret references and governance built in; HA & white-label on the roadmap.
Annual / Custom
- Unlimited seats
- Persona-specific dashboards, shareable dashboards and scheduled reports
- Self-hosted LLM (Ollama / LM Studio / vLLM)
- Performance & load testing available as a paid add-on (up to Scale or Custom limits)
- API security testing available as a paid add-on
- API Discovery available as a paid add-on
- Quality Agent prepared fixes, on top of the Professional review reports
- JSON-RPC 2.0 / MCP and WebSocket-RPC testing
- Group-based access, configurable audit retention and the activity feed
- SSO configuration: Microsoft Entra ID, OIDC, SAML 2.0
- HashiCorp Vault secret references
- HA / clustering, custom domain, white-label (in development)
- SLA-backed priority support
- Dedicated success engineer
- Custom training & onboarding
Performance & Load Testing add-on
Performance testing is a paid add-on to a Professional, Custom or Enterprise licence. No edition includes it on its own, Enterprise included. The add-on’s package sets the limits. The 15-day Trial includes it with the Scale limits, so you can evaluate it before you buy.
| Package | Virtual users per load generator | Longest run | Runs at once | Load agents |
|---|---|---|---|---|
| Starter | 100 | 15 minutes | 1 | None |
| Team | 500 | 60 minutes | 1 | 2 |
| Scale | 2,000 | 12 hours | 2 | Any number |
| Custom | As agreed | As agreed | As agreed | As agreed |
Included in the Trial
A 15-day Trial runs performance tests with the Scale limits: 2,000 virtual users per generator, 12-hour runs and load agents.
Citizen Developer (Free)
Shows a preview of the performance screens. The add-on cannot be bought on the free edition.
Limits are per generator
A run split across load agents can send more in total, because each generator carries its own share.
If the add-on ends
Scenarios, runs, reports and targets stay readable. New runs, scheduled runs and scenario changes are refused until it is renewed.
API Security Testing add-on
API security testing is a paid add-on to a Professional, Custom or Enterprise licence. No edition includes it on its own, Enterprise included. The add-on’s package sets the limits. The 15-day Trial includes it, so you can evaluate it before you buy.
| Package | Endpoints per scan | Test users (principals) per project | Requests per burst check |
|---|---|---|---|
| Starter | 100 | 2 | 30 |
| Team | 500 | 3 | 60 |
| Scale | 2,000 | 5 | 120 |
| Custom | As agreed | As agreed | As agreed |
Included in the Trial
A 15-day Trial runs security checks with 1,000 endpoints per scan, 5 test users per project and bursts of up to 60 requests.
Citizen Developer (Free)
Sees a locked preview with example data. The add-on cannot be bought on the free edition.
Why test users matter
Authorization checks (BOLA, tenant isolation, privilege) need a second signed-in user. Each package sets how many a project can label.
If the add-on ends
Findings, scans and reports stay readable. New scans and changes to findings stop until it is renewed; an Administrator is warned 14 days before.
API Discovery add-on
API Discovery is a paid add-on to a Professional, Custom or Enterprise licence. No edition includes it on its own, Enterprise included. It keeps one inventory of the APIs you already run, built from specifications, gateways, repositories, traffic and logs. The add-on’s package sets how many sources and customer-side agents you can run. The 15-day Trial includes it, so you can evaluate it before you buy.
| Package | Sources | Customer-side agents |
|---|---|---|
| Starter | 10 | 1 |
| Team | 50 | 5 |
| Scale | 250 | Any number |
| Custom | As agreed | As agreed |
Included in the Trial
A 15-day Trial can connect up to 50 sources and run any number of customer-side agents.
Citizen Developer (Free)
The add-on cannot be bought on the free edition. The page for each API and the dependency map are still part of it.
What a source is
A specification, a gateway, a repository, a log folder, a Postman workspace or a similar place Discovery reads. Agents read sources inside your network and only call out; nothing connects in.
If the add-on ends
Your inventory and its history stay readable. No source runs, agents get no new work, and sources cannot be forgotten or removed until it is renewed.
Discovery sends no request to an API. The one exception is Scan for APIs in the desktop app, which probes the programs running on your own computer after it asks for your consent.
Compare plans
Shift-Left API feature matrix — see how Trial, Citizen Developer, Professional, and Enterprise stack up. ➕ Add-on = available as a paid add-on (Performance & Load Testing, API Security Testing, or API Discovery).
Legend
Trial = 15-day evaluation of the Enterprise feature set and all three add-ons (outbound webhooks excepted). Citizen Developer (Free) = free single-user tier with caps, no end date and a licence renewed free every 6 months. Professional = up to 25 seats, no caps. Enterprise = unlimited seats, SSO configuration, Vault secret references & governance; HA/white-label on the roadmap.
| Capability | Trial (15 days) | Citizen Developer (Free) | Professional | Enterprise |
|---|---|---|---|---|
| 1. Plan & Deployment | ||||
| Users / seats | Unlimited | 1 | Up to 25 | Unlimited |
| Self-hosted deployment | ||||
| Cloud (multi-tenant) | ||||
| License duration | 15 days | No end date (free renewal every 6 months) | Annual | Annual / Custom |
| High Availability / clustering | Roadmap | |||
| Custom domain | Roadmap | |||
| 2. Core Limits | ||||
| Endpoints (REST/SOAP/GraphQL combined) | Unlimited | 50 | Unlimited | Unlimited |
| Mock servers | Unlimited | 50 | Unlimited | Unlimited |
| Workflows / Integration Tests | Unlimited | 50 | Unlimited | Unlimited |
| Blocks per workflow (Start and Stop included) | Unlimited | 10 | Unlimited | Unlimited |
| Concurrent test runs | Unlimited | 1 | Unlimited | Unlimited |
| Auth Profiles per project | Unlimited | 3 | Unlimited | Unlimited |
| Projects | Unlimited | Unlimited | Unlimited | Unlimited |
| 3. Authoring & Protocols | ||||
| REST / SOAP / GraphQL testing | ||||
| JSON-RPC 2.0 & MCP server testing (OpenRPC import, MCP tool discovery) | ||||
| WebSocket-RPC testing | ||||
| Swagger / OpenAPI import | ||||
| Postman collection import (incl. auth, checks and variable captures) | ||||
| File uploads & form bodies (multipart, url-encoded, whole-file) | ||||
| Test Editor with Chai assertions | ||||
| Projects, Features, Tags | ||||
| Variables and environments | ||||
| 4. Mocks | ||||
| Mock servers | Unlimited | (50 max) | Unlimited | Unlimited |
| Mock subdomain routing | ||||
| Named mock responses (X-Mock-Scenario header or query parameter) and one response per documented error | (50 mocks max) | |||
| Mock responses that time out or cut the connection on purpose | ||||
| Contract check: each stored mock response reported as fits, differs or not checked | ||||
| Stateful mocks (create, read, update, delete, list), versions you can restore, and regenerate-from-spec that keeps your edits | ||||
| 5. Workflows / Integration Tests | ||||
| Visual workflow editor | ||||
| Sequential step execution | ||||
| Conditional & loop blocks (IF/ELSE, FOR EACH, WHILE) | ||||
| Data flow between steps | ||||
| Workflows built from use-case requirements | ||||
| 6. Execution | ||||
| Manual run (Run Now) | ||||
| Local Runner (.exe desktop) | ||||
| Concurrent runs | Unlimited | 1 | Unlimited | Unlimited |
| Test Run Packs (Functional and Workflow packs; tag-rule selection) | Upgrade | |||
| Run history retention | Default | Default | Default | Default |
| 7. Performance & Load Testing | ||||
| Performance testing (smoke, load, stress, spike, soak, breakpoint, concurrency, rate-limit probe) | Included | Preview only (not sold) | Add-on | Add-on |
| Virtual users (or requests in flight) per load generator | 2,000 | — | By package: 100 / 500 / 2,000 | By package: 100 / 500 / 2,000 / Custom |
| Longest run | 12 hours | — | By package: 15 min / 60 min / 12 h | By package: 15 min / 60 min / 12 h / Custom |
| Load tests running at once | 2 | — | By package: 1 / 1 / 2 | By package: 1 / 1 / 2 / Custom |
| Distributed load agents | Unlimited | By package: none / 2 / any number | By package: none / 2 / any number | |
| Performance targets (SLOs) judged in load tests, incl. Under load column in the traceability matrix | — | With add-on | With add-on | |
| Performance reports, exports (HTML, JSON, JUnit, CSV), share links, schedules | — | With add-on | With add-on | |
| 7b. API Security Testing | ||||
| API security testing (OWASP-mapped checks generated beside your functional tests) | Included | Preview only (not sold) | Add-on | Add-on |
| Authorization checks with a second test user (BOLA, tenant isolation, privilege) | — | With add-on | With add-on | |
| Findings with CVSS v3.1 base score, evidence and fix; "not evaluated" listed first | — | With add-on | With add-on | |
| Security checks in your packs, schedules and CI gate (JUnit; SARIF from the self-hosted headless runner) | — | With add-on | With add-on | |
| 7c. API Discovery and the page for each API | ||||
| API Discovery: one inventory of the APIs you already run, each row marked Confirmed, Observed or Inferred | Included | Not sold | Add-on | Add-on |
| Sources you can connect | 50 | — | By package: 10 / 50 / 250 | By package: 10 / 50 / 250 / Custom |
| Customer-side agents (they only call out; nothing connects in) | Any number | — | By package: 1 / 5 / any number | By package: 1 / 5 / any number / Custom |
| Source connectors: Postman, SwaggerHub, GitHub, GitLab, Azure Repos, Bitbucket Cloud, OpenTelemetry, Datadog, Splunk, Elastic, gateways | — | With add-on | With add-on | |
| One page for each API: its tests, security findings, mocks, load results, workflows and requirements | ||||
| Overview of a project's APIs, per-API PDF and CSV report | ||||
| Dependency map: which APIs come before and after an API, which use its values, and how each link is known | ||||
| Spec change review: tests, mocks, load tests, workflows, requirements and applications a change touches | ||||
| 8. Scheduling | ||||
| Scheduler | Upgrade | |||
| CRON / recurring schedules | Upgrade | |||
| Workflow Pack scheduling | Upgrade | |||
| Schedule end conditions (until a date or after N runs) | Upgrade | |||
| 9. Dashboards, Analytics & Reporting | ||||
| Persona-specific Dashboards | Upgrade | |||
| Analytics & aggregations | Upgrade | |||
| Trend & regression analysis | Upgrade | |||
| Shareable dashboards and scheduled reports (from persona dashboards) | ||||
| High-level workflow reports | Basic (single run) | |||
| Usage of each API over time, from what your Discovery sources report (needs the API Discovery add-on) | Upgrade | With add-on | With add-on | |
| Export the audit log, the security compliance view and the requirements traceability matrix as CSV or PDF | — | |||
| 10. AI / Intelligence | ||||
| AI test generation (BYO key) | ||||
| Multi-provider AI, bring your own key: 19 provider families, including Anthropic Claude (current models), OpenAI, Gemini and Azure OpenAI | ||||
| Self-hosted LLM (Ollama / LM Studio / vLLM) | ||||
| Rule Intelligence / requirements review | ||||
| Many requirement documents, cross-document conflicts, Excel workbooks, versions | ||||
| MCP server (AI agent integration) | ||||
| Requirements traceability matrix (with requirement verdicts) | ||||
| Requirements imported from Jira, Azure DevOps, GitHub, GitLab and Confluence tickets, traced to tests ticket by ticket | CSV / Excel upload only | |||
| Project Assistant (cited answers, actions with approval) | ||||
| Failed runs explained as causes + grounded Fix | ||||
| Release verdict per API + CI quality gate | ||||
| Quality Agent review reports | ||||
| Quality Agent prepared fixes | ||||
| 11. Identity & SSO | ||||
| Local authentication (JWT) | ||||
| Email-based user invitations | ||||
| Azure AD / Entra ID SSO | ||||
| Generic OIDC (Okta and other OIDC providers) | ||||
| SAML 2.0 SSO | ||||
| Group → Role mapping | ||||
| Auto-provisioning on first SSO login | ||||
| 12. Users, Roles & Governance | ||||
| User Management UI | ||||
| RBAC (Administrator / Contributor / Reviewer / Reader / Environment Manager) | ||||
| Project membership (a global role, overridable per project) | ||||
| Per-project role variations | ||||
| Editable role permissions (63 permissions; custom roles via API) | ||||
| Password policies | ||||
| API spec change approval | ||||
| API governance: lifecycle (draft, active, deprecated, retired), required approvers, Spectral-style design rules you switch on, risk register with expiring acceptances | ||||
| Group-based access | ||||
| 13. Secrets & Auth Profiles | ||||
| Project Auth Profiles | Unlimited | 3 max | Unlimited | Unlimited |
| Encrypted credential storage (AES-256) | ||||
| API Key / Basic / Bearer / Digest / NTLM / AWS SigV4 / mTLS | ||||
| OAuth 2.0 (five grant types incl. PKCE and device code, your own Callback URL), OAuth 1.0a, Hawk, JWT Bearer | ||||
| Sign in with steps (login, one-time code, token, refresh) | ||||
| HashiCorp Vault secret references | ||||
| 14. Audit & Observability | ||||
| Audit logs (capture, viewer, filters, stats, before/after values) | Upgrade | |||
| Configurable audit retention | ||||
| Activity feed (real-time team stream) | ||||
| System health & metrics | Basic | |||
| Real-time logs | Basic | |||
| 15. APIs & CI/CD Integrations | ||||
| Public REST API (test packs, runs, results, history) | Upgrade | |||
| Public API auth (configurable token expiry, allowed roles) | Upgrade | |||
| API key generation / rotation UI | ||||
| Webhooks (subscriptions, signed delivery, retry) | Upgrade | |||
| Azure DevOps CI/CD task (Visual Studio Marketplace) | Upgrade | |||
| Jenkins (Java plugin with quality gates; a downloadable HPI file, not in the Jenkins Update Center) | Upgrade | |||
| GitHub Actions (first-party action with quality gates; installs with @v1) | Upgrade | |||
| GitLab CI (generated pipeline file; catalog component not yet published) | Upgrade | |||
| Generated pipeline files for GitHub Actions, GitLab CI, Azure Pipelines and Jenkins, with an optional release-verdict gate | Upgrade | |||
| Send a test pack to Postman as a collection, after a preview and an explicit approval (needs a Postman source) | — | With add-on | With add-on | |
| CircleCI (via REST API — orb not yet on the registry) | Upgrade | |||
| Bitbucket Pipelines (via REST API — pipe image not yet published) | Upgrade | |||
| 16. Collaboration | ||||
| Shared projects (admin-managed multi-user access) | ||||
| Shareable dashboards (public, signed-in or password links with expiry) | ||||
| Comments on tests & endpoints | ||||
| Review / approval flows (general) | ||||
| 17. Support & Services | ||||
| Documentation & community | ||||
| Email support | Trial-priority | Business hours | Priority | |
| SLA-backed support | ||||
| Dedicated success engineer | ||||
| Custom training & onboarding | ||||
Note: Persona Dashboards are gated to Trial / Enterprise; Analytics & charts are available to Professional.
All Platform Features
Every capability of Shift-Left API, grouped by category, with the plan each one is on. Performance testing, security testing and API Discovery are paid add-ons. Open the comparison table above for per-plan limits.
| Feature | Description | Plan | Details |
|---|---|---|---|
AI-Powered TestingFor Developers & QA Leads | |||
AI Test Generation | Generate a structured test suite from OpenAPI, Swagger, WSDL, GraphQL or Postman with one click, with or without an AI key. | All plans | Details |
Coverage Gaps | See exactly which tests are missing for each endpoint, and close the gaps in one click. | All plans | Details |
Edge Cases | Discover boundary conditions and edge cases humans miss. | All plans | Details |
Multi-AI | Choose OpenAI, Anthropic Claude, Google Gemini, Azure OpenAI and 15 more, or your own self-hosted model on Trial and Enterprise. | All plans | Details |
Continuous Learning | Every passing run, every edit and every requirement document teaches the platform how your API really behaves. | All plans | Details |
AI Test Fix | Repair failing tests with one click, without hiding a real API bug. | All plans | Details |
Project Assistant | Ask about your project in plain language, and let it do the work once you approve. | All plans | Details |
Requirements IntelligenceFor Business Analysts & QA Leads | |||
Requirements | Turn specs and business documents into testable requirements. | All plans | Details |
Traceability (RTM) | Prove coverage from every requirement to the tests that verify it. | All plans | Details |
Test Strategy | Generate a full test strategy across proven design techniques. | All plans | Details |
Use-Case Workflows | Approved use cases become end-to-end workflows as soon as each step has a test. | All plans | Details |
Multi-Document Requirements | Upload every BRD, policy, spec and workbook together. Rules are counted once, and disagreements wait for a person. | All plans | Details |
Requirements From Trackers | Import epics and user stories from your tracker, turn them into reviewable requirements, and trace each ticket to its tests and results. | Pro, Trial, Ent. | Details |
Test Execution & CI/CDFor DevOps & Developers | |||
Shift-Left Agent | Run API tests from your own machine, against APIs only your network can reach. | All plans | Details |
CI/CD | A GitHub Action, Jenkins plugin and Azure DevOps task, ready-made pipeline files for GitLab CI, and a REST API for any other CI/CD tool. | Professional+ | Details |
Scheduler | Run test packs automatically, from every few minutes to monthly, in your time zone. | Professional+ | Details |
Test Packs | Group and batch-execute tests for focused regression runs. | Professional+ | Details |
Workflows | Build multi-step API flows with a visual DAG editor. | All plans | Details |
Performance Testing | Turn the API tests you already have into load, stress, spike and soak tests, and get a verdict in words. | Add-on | Details |
Load Agents | Add machines to send more load, or load from several places, and still read one merged report. | Add-on | Details |
Redirects & Certificates | Test a redirect itself, and run against test servers with private certificates, without weakening production. | All plans | Details |
API Security Testing | OWASP-mapped checks generated beside your tests, with CVSS-scored findings and what was not checked listed first. | Add-on | Details |
Workflow Doctor | Finds what is wrong with a workflow, in plain words, and offers the fix that is safe to apply. | All plans | Details |
Test Data ManagementFor QA Engineers & Developers | |||
Data-Driven Testing | Run one test across many rows of data automatically. | All plans | Details |
Data Sources | Connect the data your tests need from the sources you already use. | All plans | Details |
Fill Tests From Data | Push a CSV, Excel, JSON, YAML or XML data set into every existing test of a project: preview first, undo afterwards. | All plans | Details |
Multi-Protocol SupportFor Architects & Tech Leads | |||
REST | Full support for REST APIs with OpenAPI and Swagger import. | All plans | Details |
GraphQL | Test GraphQL queries and mutations with schema-driven test generation. | All plans | Details |
SOAP | Test SOAP web services with WSDL import and XML response assertions. | All plans | Details |
Assertions | Validate every aspect of API responses with 100+ built-in assertions. | All plans | Details |
Mock Server | Mock APIs that answer by name, fail on purpose, remember records and are checked against the contract. | All plans | Details |
Postman Import | Bring your Postman collections in and keep your tests. | All plans | Details |
JSON-RPC & MCP | Test JSON-RPC services and Model Context Protocol servers alongside your REST, SOAP, and GraphQL APIs. | Enterprise | Details |
WebSocket-RPC | Test RPC over WebSockets, with one authenticated connection across ordered steps. | Enterprise | Details |
File Uploads & Forms | Test multipart uploads, url-encoded forms and raw file bodies, sent the same way everywhere a test runs. | All plans | Details |
Streaming (SSE) | Read text/event-stream responses into numbered events and assert on them. | All plans | Details |
Enterprise & ComplianceFor CTOs & Engineering Managers | |||
RBAC | Control who can view and edit tests, per project. | Professional+ | Details |
Compliance Controls | Security and data-handling controls that support your HIPAA and GDPR programs. | All plans | Details |
Multi-Tenant | Isolated tenants per organization, each with its own database and subdomain. | Enterprise | Details |
Auth Profiles | OAuth 2.0, NTLM, JWT Bearer, Hawk, Digest, AWS SigV4 and more, configured once per environment. | All plans | Details |
SSO | Configure SAML 2.0 or OpenID Connect, with an Entra ID preset and group-to-role mapping. | Enterprise | Details |
API Keys | Scoped, rotatable keys for automation and integrations. | Professional+ | Details |
Webhooks | Push test events to your tools with signed, reliable delivery. | Pro & Enterprise | Details |
Secret Managers | Pull credentials from HashiCorp Vault at run time, so they never live in your tests. | Enterprise | Details |
Workspaces | Give each person a role per project, and whole teams access through groups. | Professional+ | Details |
Audit Logs | A filterable record of who changed what, when, with before and after values. | Professional+ | Details |
Comments | Discuss tests, endpoints and projects in context. | Professional+ | Details |
API Governance | Set where each API is in its life, hold it to your design standards, and record the risks you accept. | Pro, Trial, Ent. | Details |
Analytics & MonitoringFor QA Leads & Product Owners | |||
Dashboard | Track test coverage, pass rates, and response times at a glance. | Professional+ | Details |
Regression | Track failure trends, flaky tests and slowing endpoints over time. | Professional+ | Details |
Change Detection | Detect breaking API changes before they reach production. | Professional+ | Details |
Shared Reports | Share live test reports with stakeholders via secure links. | Enterprise | Details |
Persona Dashboards | Role-tailored views for every stakeholder, plus TV mode. | Enterprise | Details |
Scheduled Reports | Deliver test summaries to stakeholders on a schedule. | Enterprise | Details |
Failure Analysis | A handful of causes with verdicts, instead of a long list of red rows. | All plans | Details |
Release Verdict | One evidence-backed answer to "is this API ready to release?" | Pro, Trial, Ent. | Details |
Performance Targets | Say what "fast enough" means once, and see it judged on every run and in your requirements matrix. | Add-on | Details |
API Discovery | Find the APIs your organization already runs, see how sure we are that each exists, and bring the ones you choose into a project. | Add-on | Details |
API Quality Evidence | Open one API and see its tests, security findings, mocks, load results, workflows and requirements in one place. | All plans | Details |
API Dependencies | See which APIs run before and after an API, which use its values, and how we know. | All plans | Details |
Change Review | Before you approve a specification change, see every test, mock, load test, workflow and requirement it touches. | Pro, Trial, Ent. | Details |
Quality Agent | A scheduled review that finds what needs attention and, on Trial and Enterprise, prepares fixes for you to approve. | Pro, Trial, Ent. | Details |
The 15-day Trial includes every Enterprise feature and all three add-ons (performance, security and API Discovery); outbound webhooks are the one feature it leaves out.
Why Teams Choose Our API Automation Platform
Teams see reduced regression time, faster deployments, lower QA costs, and improved API reliability. Our platform is built for modern engineering: specification-driven, CI/CD native, and AI-powered so you can shift left without slowing down.
Manual Testing vs Our Platform
| Aspect | Manual Testing | Our Platform |
|---|---|---|
| Regression time | Days to run full suite | Minutes with automated runs |
| Deployments | Bottlenecked by late testing | Faster, confident releases |
| QA cost | High manual effort | Lower with AI and automation |
| API reliability | Reactive, post-release issues | Shift-left, catch issues early |
What every paid plan includes
Beyond the 15-day trial, here is what your team gets to ship APIs with confidence.
OpenAPI/Swagger import
Import specs from a file, a URL (including one your API gateway serves) or pasted text. OpenAPI 3.0, 3.1, and Swagger 2.0.
AI test generation
Generate comprehensive test suites from your spec — positive, negative, edge cases, and security checks.
Coverage tracking
Coverage measured against your spec: status codes, parameters and request-body fields per endpoint, with gap detection.
CI/CD execution
A GitHub Action, an Azure DevOps extension and a downloadable Jenkins plugin, plus generated pipeline files for GitHub Actions, GitLab CI, Azure Pipelines and Jenkins. REST API for CircleCI and more.
Contract validation
Generated tests assert the fields, types and status codes your spec declares. Failure analysis flags drift on every analysed run.
Grounded test repair
When tests fail, AI proposes fixes cause by cause that you review. It never "fixes" a test to hide a real API bug.
Local Runner
Test private APIs and development environments without exposing them to the cloud.
API mocking
Mock servers generated from your spec, with named responses for every documented error, a contract check and stateful records, for parallel development.
Analytics and reporting
Test run history, success rates, response times, and coverage trends across releases.
Failed runs explained
Failures grouped into a few causes, each with a verdict, and passing tests checked for weak assertions. Included on every plan.
Project Assistant and MCP server
Ask about your own project with cited answers, and connect Claude or Cursor. Changes happen only when you accept them.
Authentication and test data
OAuth 2.0, JWT Bearer, NTLM, mTLS and more configured once, plus data-driven testing from CSV, Excel, JSON, YAML or XML.
Pricing FAQ
How long is the free trial?
The free trial is 15 days with access to the whole platform — including AI test generation, CI/CD, mocking, analytics, RBAC, JSON-RPC/MCP and WebSocket-RPC testing, API governance, requirement import from trackers, and all three add-ons (performance testing, API security testing and API Discovery), plus SSO configuration, HashiCorp Vault secret references and group-based access. Outbound webhooks are not part of the trial. No credit card is required to start.
Do I need a credit card for the free trial?
No. You can start your 15-day free trial without entering a credit card. We'll remind you before the trial ends.
What happens after the trial ends?
When your trial ends, you can contact our team to choose a plan that fits your needs. We'll help you continue without interruption—no surprise charges.
What's the difference between Professional and Enterprise?
Professional (up to 25 seats) already includes CI/CD integrations and generated pipeline files, the Shift-Left Agent, test packs and the scheduler, mocks, workflows, RBAC with per-project roles, audit logs, project analytics, webhooks and API keys, plus the Project Assistant, failed-run analysis, release verdicts with a CI quality gate, spec change review, API governance, requirement import from trackers, Quality Agent review reports, and the MCP server. Enterprise adds unlimited seats, a self-hosted LLM (Ollama, LM Studio, vLLM), SSO configuration (SAML, OIDC, Entra ID), HashiCorp Vault secret references, group-based access, persona dashboards with shareable dashboards and scheduled reports, the activity feed, configurable audit retention, JSON-RPC/MCP and WebSocket-RPC testing, Quality Agent prepared fixes, and SLA-backed support with a dedicated success engineer. The performance, security and API Discovery add-ons are sold separately on both plans.
Which plans include performance and load testing?
Performance and load testing is a paid add-on to a Professional, Custom or Enterprise licence. No edition includes it on its own, Enterprise included. The add-on comes in packages: Starter (100 virtual users per load generator, 15-minute runs, one run at a time), Team (500, 60-minute runs, one at a time, 2 load agents), Scale (2,000, 12-hour runs, two at a time, any number of load agents) or Custom. The 15-day Trial includes it with the Scale limits. The free Citizen Developer edition shows a preview of the screens and cannot add it. Contact sales for add-on pricing.
What happens if the performance testing add-on ends?
Your performance scenarios, runs, reports and targets stay readable. New runs, scheduled runs and changes to scenarios are refused until the add-on is renewed. Administrators see a warning from 14 days before the end date.
Which plans include API security testing?
API security testing is a second paid add-on to a Professional, Custom or Enterprise licence, gated the same way as performance testing. No edition includes it on its own, Enterprise included. The 15-day Trial includes it so you can evaluate it end to end. The free Citizen Developer edition shows a locked preview and cannot add it. If the add-on ends, your findings, decisions and reports stay readable; new security runs are refused until it is renewed. It detects weaknesses with benign probes and is not a penetration test. Contact sales for add-on pricing.
Which plans include API Discovery?
API Discovery is a third paid add-on to a Professional, Custom or Enterprise licence. No edition includes it on its own, Enterprise included. The add-on comes in packages: Starter (10 sources, 1 customer-side agent), Team (50 sources, 5 agents), Scale (250 sources, any number of agents) or Custom. The 15-day Trial includes it with up to 50 sources and any number of agents. The free Citizen Developer edition cannot add it. The page for each API, the Overview of a project's APIs and the dependency map are part of every plan and do not need the add-on. Contact sales for add-on pricing.
What happens if the API Discovery add-on ends?
Your inventory, its evidence and its change history stay readable, and the assistant can still answer questions about them. New work is refused until the add-on is renewed: no source runs, scheduled or by hand, agents get no new work, and sources cannot be forgotten or removed.
Can I upgrade anytime?
Yes. You can upgrade from any plan at any time. We'll prorate where applicable.
Which AI providers can I use?
Bring your own key for any of 19 provider families, including Anthropic Claude, OpenAI, Google Gemini and Azure OpenAI, and the current Claude models are supported. On the Trial and Enterprise you can instead point the platform at a model you run (Ollama, LM Studio or vLLM). AI features are billed by your provider, not by us.
Do you support OpenAPI?
Yes. We support OpenAPI 3.0 and Swagger 2.0. You can import specs from a file, a URL (including one your API gateway serves) or pasted text; the platform discovers endpoints and organizes them automatically.
Do you offer on-premise deployment?
Yes. Every plan can be self-hosted on your own infrastructure (Windows server install against your own MongoDB), or used in our cloud. Contact sales to discuss private-cloud requirements.
Is there a limit on API calls?
There is no per-call quota. Free is capped at 50 endpoints, 50 mocks, 50 workflows and one concurrent run; paid plans remove the caps.
What AI usage limits apply?
AI features use your own provider key (or a self-hosted model on Trial and Enterprise), so usage is billed by your provider; the platform applies only abuse rate limits.
How does pricing scale?
Professional and Enterprise pricing is per-user based on your team size, projects, and usage. We'll provide a tailored quote so you only pay for what you need.
Do you offer discounts for startups?
We offer competitive pricing for early-stage and growth-stage teams. Contact us with your team size and use case and we'll share options.
Start Automating Your APIs Today
Launch your first automated API test suite in minutes.
By signing up you agree to our Privacy Policy and Terms of Service and Security Policy and AI Policy