All testing tools
193 tools across 17 categories. Filter by what you actually need — your language, your budget shape, whether it has to run on your own infrastructure.
38 tools
Amplitude
Session Replay
Behavioural product analytics with strong cohort and retention analysis.
Dependabot
Security Testing
Free dependency updates and vulnerability alerts, built into GitHub.
Faker
Test Data & Mocks
Generate realistic names, addresses, dates and text for fixtures, in any language.
LaunchDarkly
A/B & Flags
The enterprise feature-flag platform, with experimentation layered on top.
LocalStack
Test Data & Mocks
A local AWS cloud emulator so you can test infrastructure without an AWS bill.
Renovate
Security Testing
Highly configurable automated dependency updates, free and self-hostable.
Sentry
Monitoring
Error tracking with stack traces, release attribution and now session replay.
Snyk
Security Testing
Developer-first security across dependencies, code, containers and infrastructure.
SonarQube
Code Quality
The static-analysis standard: 30+ languages, quality gates, clean-as-you-code.
Testcontainers
Test Data & Mocks
Real databases and services in throwaway Docker containers, per test run.
Trivy
Security Testing
One open-source scanner for containers, filesystems, repos, IaC and Kubernetes.
WireMock
Test Data & Mocks
The standard HTTP mock server for JVM and beyond: record, replay, stub, simulate faults.
Checkmarx One
Security Testing
Enterprise application security platform: SAST, SCA, DAST, IaC and API security.
CodeQL
Security Testing
Query your codebase like a database to find vulnerability patterns across the whole repo.
Dynatrace
Monitoring
Full-stack observability with automatic dependency mapping and AI root-cause analysis.
GitGuardian
Security Testing
Secrets detection across your repositories, history and developer machines.
GrowthBook
A/B & Flags
Open-source feature flags and experimentation that runs on your data warehouse.
Mend.io
Security Testing
Software composition analysis with automated remediation and licence compliance.
Optimizely
A/B & Flags
The original web experimentation platform, now a full digital experience suite.
Pact
API Testing
Consumer-driven contract testing so services can deploy independently.
PostHog
Session Replay
Open-source product analytics, replay, flags and experiments in one self-hostable platform.
Semgrep
Security Testing
Pattern-based static analysis where rules look like the code they match.
Statsig
A/B & Flags
Feature flags, experimentation and product analytics in one warehouse-friendly platform.
TruffleHog
Security Testing
Open-source secret scanning that verifies whether the credential is still live.
Unleash
A/B & Flags
Open-source feature management with a privacy-first, self-hosted architecture.
Veracode
Security Testing
Application security as a service, with policy enforcement and compliance attestation.
Codacy
Code Quality
Automated code review with security scanning and coverage in the pull request.
ConfigCat
A/B & Flags
Simple, cheap feature flags with unlimited team members on every plan.
DeepSource
Code Quality
Static analysis with autofix, tuned hard for low false-positive rates.
Eppo
A/B & Flags
Warehouse-native experimentation with a serious statistics engine.
Flagsmith
A/B & Flags
Open-source feature flags and remote config with straightforward self-hosting.
Kameleoon
A/B & Flags
Experimentation and personalisation with a strong hybrid client/server model.
Qlty (formerly Code Climate Quality)
Code Quality
Maintainability and technical-debt tracking, spun out of Code Climate as Qlty.
Qodana
Code Quality
JetBrains' IDE inspections, running as a CI quality gate.
Split
A/B & Flags
Feature delivery with automatic impact measurement on every flag.
Vegeta
Load & Performance
Constant-rate HTTP load testing from the command line, in Go.
Hoverfly
Test Data & Mocks
Lightweight service virtualisation: capture real traffic, then simulate it.
Neosync
Test Data & Mocks
Archived: open-source data anonymisation, no longer maintained after the Grow Therapy acquisition.