Intelligent Edge Case Detection

Discover boundary conditions and edge cases humans miss.
Updated
Try It FreeSee a Demo

What It Does

Intelligent Edge Case Detection goes beyond happy-path testing. It turns schema constraints, data types and parameter combinations into tests that probe the edges of your API: a string where a number is expected, a value one past the maximum, a name one character too long, a required field left out. Each generated test has a clear name, description, expected behaviour and severity. With your own AI key configured, the platform can add up to eight further edge cases per endpoint, each grounded in a declared constraint. Combined with coverage gap detection, it shows which edges are still untested.

The platform reads the constraints of a POST /users schema, such as name length 1 to 50, age 18 to 120, email format and a role enum, and generates edge-case tests one by one: empty and over-long names, age 17, a wrong type, a missing email, an invalid enum value and an injection string, each with a technique and a severity

Overview

The platform reads every constraint in your OpenAPI spec — required fields, type, format, pattern, enum, minimum and maximum, minLength and maxLength — and plans a boundary or negative test for each, catching the cases manual testing overlooks: a value just below or above a limit, a string one character too short or too long, the wrong data type (chosen so the API cannot silently coerce it), a missing required field or an invalid enum value. Pairwise combinations across parameters are built in, and with the Security strategy switched on for a project it adds injection probes for SQL, NoSQL, XSS, SSTI and path traversal. Tests are rated by severity: High for missing fields and wrong types, Medium for boundaries, and High or Critical for authentication-bypass and injection probes.

Key Capabilities

Detects boundary values from schema constraints (min, max, length, pattern)
Generates missing-field, too-short, too-long and type-mismatch test cases
Pairwise combinations across parameters
Optional injection probes (SQL, NoSQL, XSS, SSTI, path traversal) with the Security strategy
Tests missing required fields, wrong data types and, where the schema forbids them, extra fields
Severity-rated: High for missing fields and wrong types, Medium for boundaries, Critical for auth bypass

How It Works

  1. 1

    Reads schema constraints: minLength, maxLength, pattern, enum, format and required fields

  2. 2

    Generates boundary-value tests for every constrained parameter

  3. 3

    Creates negative tests with wrong types and missing required fields

  4. 4

    Produces pairwise combinations across multi-parameter endpoints

  5. 5

    With the Security strategy on, adds SQL injection, XSS and path traversal probes in string parameters

Available on

All Plans

Included in the free trial — no credit card required.

Start Free TrialView Pricing
Included in all plans
See pricing →

Documentation

Step-by-step guides for setting up and using Edge Cases.

Go deeper

Guides and playbooks that show this capability in practice.

API Testing Best Practices (REST): 12 Patterns with Examples

Read the guide

API Security Testing: What It Is and How to Do It

Read the guide

Related Features

AI Test Generation

Generate a structured test suite from OpenAPI, Swagger, WSDL, GraphQL or Postman with one click, with or without an AI key.

Learn more

Coverage Gaps

See exactly which tests are missing for each endpoint, and close the gaps in one click.

Learn more

Assertions

Validate every aspect of API responses with 100+ built-in assertions.

Learn more

Try Edge Cases Today

Start your 15-day free trial — no credit card required.

Start Free TrialBook a Demo