Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

You can either submit API test requests through the user interface form or trigger the EthicalCheck API using tools like cURL or Postman. To input your request, you will need a public-facing OpenAPI Specification URL, an authentication token that remains valid for a minimum of 10 minutes, an active license key, and your email address. The EthicalCheck engine autonomously generates and executes tailored security tests for your APIs based on the OWASP API Top 10 list, effectively filtering out false positives from the outcomes while producing a customized report that is easily digestible for developers, which is then sent directly to your email. As noted by Gartner, APIs represent the most common target for attacks, with hackers and automated bots exploiting vulnerabilities that have led to significant security breaches in numerous organizations. This system ensures that you only see genuine vulnerabilities, as false positives are systematically excluded from the results. Furthermore, you can produce high-quality penetration testing reports suitable for enterprise use, allowing you to share them confidently with developers, customers, partners, and compliance teams alike. Utilizing EthicalCheck can be likened to conducting a private bug-bounty program that enhances your security posture effectively. By opting for EthicalCheck, you are taking a proactive step in safeguarding your API infrastructure.

Description

Test functional, performance, and security aspects of APIs. Provides Pass/Fail criteria rules to enable regression testing of API behavior. Tests can be run on-demand or automated from the command-line. Supports latest OpenAPI standards for parsing OpenAPI documents and building test cases for the defined operations. Authentication schemes including SAML, OAuth, Basic Auth, Amazon Auth, PKI, and Kerberos. Create behavior baselines and run regression tests to determine breakage or change of behavior. Includes JSON and XML Diff capability. Generate performance load across multiple virtual clients to measure and validate the performance criteria of the target APIs. Security and identity are processed for each request to ensure real world simulated inputs and not replays. Built-in support for AWSv4 signatures enables authentication to test Amazon AWS APIs.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Ansible
JUnit
Jenkins
OAuth
OWASP Threat Dragon

Integrations

Ansible
JUnit
Jenkins
OAuth
OWASP Threat Dragon

Pricing Details

$99 one-time payment
Free Trial
Free Version

Pricing Details

$80/month
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

EthicalCheck

Country

United States

Website

www.ethicalcheck.dev/

Vendor Details

Company Name

Crosscheck Networks

Founded

2005

Country

United States

Website

www.crosschecknet.com/products/soapsonar/

Product Features

API Testing

Functional Testing
Fuzz Testing
Load Testing
Penetration Testing
Runtime and Error Detection
Security Testing
UI Testing
Validation Testing

Product Features

API Testing

Functional Testing
Fuzz Testing
Load Testing
Penetration Testing
Runtime and Error Detection
Security Testing
UI Testing
Validation Testing

Software Testing

Automated Testing
Black-Box Testing
Dynamic Testing
Issue Tracking
Manual Testing
Quality Assurance Planning
Reporting / Analytics
Static Testing
Test Case Management
Variable Testing Methods
White-Box Testing

Alternatives

Alternatives

Tricentis Tosca Reviews

Tricentis Tosca

Tricentis
API Critique Reviews

API Critique

Entersoft Information Systems