Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

You can either submit API test requests through the user interface form or trigger the EthicalCheck API using tools like cURL or Postman. To input your request, you will need a public-facing OpenAPI Specification URL, an authentication token that remains valid for a minimum of 10 minutes, an active license key, and your email address. The EthicalCheck engine autonomously generates and executes tailored security tests for your APIs based on the OWASP API Top 10 list, effectively filtering out false positives from the outcomes while producing a customized report that is easily digestible for developers, which is then sent directly to your email. As noted by Gartner, APIs represent the most common target for attacks, with hackers and automated bots exploiting vulnerabilities that have led to significant security breaches in numerous organizations. This system ensures that you only see genuine vulnerabilities, as false positives are systematically excluded from the results. Furthermore, you can produce high-quality penetration testing reports suitable for enterprise use, allowing you to share them confidently with developers, customers, partners, and compliance teams alike. Utilizing EthicalCheck can be likened to conducting a private bug-bounty program that enhances your security posture effectively. By opting for EthicalCheck, you are taking a proactive step in safeguarding your API infrastructure.

Description

Test functional, performance, and security aspects of APIs. Provides Pass/Fail criteria rules to enable regression testing of API behavior. Tests can be run on-demand or automated from the command-line. Supports latest OpenAPI standards for parsing OpenAPI documents and building test cases for the defined operations. Authentication schemes including SAML, OAuth, Basic Auth, Amazon Auth, PKI, and Kerberos. Create behavior baselines and run regression tests to determine breakage or change of behavior. Includes JSON and XML Diff capability. Generate performance load across multiple virtual clients to measure and validate the performance criteria of the target APIs. Security and identity are processed for each request to ensure real world simulated inputs and not replays. Built-in support for AWSv4 signatures enables authentication to test Amazon AWS APIs.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Ansible No 
JUnit No 
Jenkins No 
OAuth Yes 
OWASP Threat Dragon Yes 

Integrations

Ansible Yes 
JUnit Yes 
Jenkins Yes 
OAuth No 
OWASP Threat Dragon No 

Pricing Details

$99 one-time payment
Free Trial Yes 
Free Version Yes 

Pricing Details

$80/month
SOAPSonar Enteprise Standard Edition
SOAPSonar Enterprise Professional Edition
SOAPSonar Enterprise Server Edition
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

EthicalCheck

Country

United States

Website

www.ethicalcheck.dev/

Vendor Details

Company Name

Crosscheck Networks

Founded

2005

Country

United States

Website

www.crosschecknet.com/products/soapsonar/

Product Features

API Testing

Functional Testing No 
Fuzz Testing No 
Load Testing No 
Penetration Testing No 
Runtime and Error Detection No 
Security Testing No 
UI Testing No 
Validation Testing No 

Product Features

API Testing

Functional Testing Yes 
Fuzz Testing Yes 
Load Testing Yes 
Penetration Testing Yes 
Runtime and Error Detection Yes 
Security Testing Yes 
UI Testing No 
Validation Testing Yes 

Software Testing

Automated Testing Yes 
Black-Box Testing Yes 
Dynamic Testing Yes 
Issue Tracking No 
Manual Testing Yes 
Quality Assurance Planning Yes 
Reporting / Analytics Yes 
Static Testing Yes 
Test Case Management Yes 
Variable Testing Methods Yes 
White-Box Testing No 

Alternatives

Alternatives

API Critique Reviews

API Critique

Entersoft Information Systems
Tricentis Tosca Reviews

Tricentis Tosca

Tricentis