EvoMaster review
A broad, free API testing tool for teams covering REST, GraphQL, and RPC.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
EvoMaster is an open-source tool for automatically generating system-level tests and fuzzing web and enterprise applications. It is aimed at API teams working with REST, GraphQL, and RPC interfaces, including gRPC and Thrift. Its black-box mode can target APIs implemented in different languages, while white-box testing supports JVM applications such as Java and Kotlin. Generated tests can be written in Python, JavaScript, Java, or Kotlin, making the tool relevant to teams that want executable artifacts rather than only fuzzing output.
The product’s breadth is its main strength. REST test generation can start from OpenAPI schemas, while GraphQL and RPC testing extend coverage beyond a single API style. Authentication supports HTTP headers, cookies, and login endpoints. EvoMaster also analyzes databases and generates test data for PostgreSQL, MySQL, H2, and MongoDB. An interactive web report gives teams a way to review generated test results. The open-source pricing model makes the tool available at no cost, which suits engineering teams that want broad protocol coverage without a paid testing tier.
EvoMaster fits development workflows through GitHub Actions, with Docker and PyPI also listed in its integration ecosystem. The main trade-off is specialization: white-box capabilities are centered on JVM applications, while non-JVM targets rely on black-box testing. Database generation is likewise focused on the four supported systems. Teams choosing EvoMaster should value API-focused fuzzing, generated tests, and flexible testing modes; teams seeking a wider application-security platform or broader named ecosystem coverage should consider a different category of tool.
EvoMaster pros and cons
- Where it wins
- Supports REST, GraphQL, gRPC, and Thrift API testing
- Generates tests in Python, JavaScript, Java, and Kotlin
- Combines authentication, database data generation, and reporting
- Where it doesn't
- White-box testing is focused on JVM applications
- Database generation centers on four supported database systems
- Continuous integration integration is provided through GitHub Actions
EvoMaster fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update