EvoMaster

At a glance

• Editor score
  8.5 / 10
• Pricing
  Free plan
• Best for
  API teams testing REST, GraphQL, and RPC
• Free plan
  Yes
• Paid from
  Free
• Founded
  2016
• Facts checked
  21 Sep 2026

• Where it wins

  • Supports REST, GraphQL, gRPC, and Thrift API testing
  • Generates tests in Python, JavaScript, Java, and Kotlin
  • Combines authentication, database data generation, and reporting

• Where it doesn't

  • White-box testing is focused on JVM applications
  • Database generation centers on four supported database systems
  • Continuous integration integration is provided through GitHub Actions

Our verdict on EvoMaster

EvoMaster is an open-source tool for automatically generating system-level tests and fuzzing web and enterprise applications. It is aimed at API teams working with REST, GraphQL, and RPC interfaces, including gRPC and Thrift. Its black-box mode can target APIs implemented in different languages, while white-box testing supports JVM applications such as Java and Kotlin. Generated tests can be written in Python, JavaScript, Java, or Kotlin, making the tool relevant to teams that want executable artifacts rather than only fuzzing output.

The product’s breadth is its main strength. REST test generation can start from OpenAPI schemas, while GraphQL and RPC testing extend coverage beyond a single API style. Authentication supports HTTP headers, cookies, and login endpoints. EvoMaster also analyzes databases and generates test data for PostgreSQL, MySQL, H2, and MongoDB. An interactive web report gives teams a way to review generated test results. The open-source pricing model makes the tool available at no cost, which suits engineering teams that want broad protocol coverage without a paid testing tier.

EvoMaster fits development workflows through GitHub Actions, with Docker and PyPI also listed in its integration ecosystem. The main trade-off is specialization: white-box capabilities are centered on JVM applications, while non-JVM targets rely on black-box testing. Database generation is likewise focused on the four supported systems. Teams choosing EvoMaster should value API-focused fuzzing, generated tests, and flexible testing modes; teams seeking a wider application-security platform or broader named ecosystem coverage should consider a different category of tool.

Your product? Our editors can test EvoMaster in depth and publish a review, labelled as paid · from $149/mo →

EvoMaster pricing

EvoMaster fact sheet

EvoMaster integrations

EvoMaster lists 2 integrations on its own site.

• GitHub Actions
• Docker

Alternatives to EvoMaster

• MayhemMayhem brings broad hybrid fuzz testing, triage, and regression coverage to CI workflows.9.4
• OSS-FuzzA cloud-based continuous fuzzing service for qualifying open-source projects.9.2
• ClusterFuzzA broad, self-managed fuzzing platform for continuous security and stability testing.8.9

See all EvoMaster alternatives →

EvoMaster vs the competition

• EEvoMaster vs Mayhem
• EEvoMaster vs OSS-Fuzz
• EEvoMaster vs ClusterFuzz
• EAEvoMaster vs AFL++
• EEvoMaster vs FuzzForge
• EJEvoMaster vs Jazzer

Compare EvoMaster with any tool side by side →

Featured on iTechGuides

EvoMaster is listed in our Fuzz Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/evomaster/"><img src="https://www.itechguides.com/best/badge/evomaster.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update