EvoMaster
The facts below are what the maker publishes about EvoMaster, checked and dated. Our editors have not written about it yet.
Plans and prices
From EvoMaster's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| EvoMaster | Free | Open-source tool · no monetary cost · no paid external services required |
The facts
Each one read from EvoMaster's own pages, with the date it was checked.
What it does
- API types
- It targets REST, GraphQL and RPC APIs, including gRPC and Thrift.checked 8 Oct 2026
- Authentication
- It supports authentication headers and cookies, including declarative login endpoint configuration to obtain credentials dynamically for each test execution.checked 8 Oct 2026
- CI integration
- The project documents running EvoMaster in GitHub Actions through a custom action hosted in a separate repository.checked 8 Oct 2026
- Database support
- For white-box testing, it supports PostgreSQL, MySQL, H2 and MongoDB communications and can generate database initialization for tests.checked 8 Oct 2026
- Fault detection
- The project says it uses more than 30 oracles to detect faults including HTTP status problems, schema mismatches, BOLA and SQL injection.checked 8 Oct 2026
- Generated output
- It can generate JUnit 4 or 5 tests in Java or Kotlin and test suites in Python or JavaScript, and creates an interactive HTML report by default.checked 8 Oct 2026
- Limits
- White-box testing requires users to write a driver, RPC schema definitions are not directly supported, and support for external services such as other REST APIs is still work in progress.checked 8 Oct 2026
- Purpose
- EvoMaster automatically generates system-level test cases for web and enterprise applications by fuzzing APIs.checked 8 Oct 2026
- Runtime and schema limits
- The project recommends searches lasting one to 24 hours for stronger results, and REST APIs must provide OpenAPI 2.0, 3.0 or 3.1 schemas; OpenAPI 3.2 support is on hold.checked 8 Oct 2026
- Security and privacy
- The project states that it has no telemetry and does not require external internet services beyond the application under test, and says it can run in-house without leaking intellectual property to external parties.checked 8 Oct 2026
- Support and community
- The project directs users to GitHub issues and discussions for questions and says it offers academia-industry collaborations for closed-source APIs.checked 8 Oct 2026
- Test generation
- It uses evolutionary algorithms, dynamic program analysis and AI heuristics to evolve test cases and improve measures such as code coverage and fault detection.checked 8 Oct 2026
- Testing modes
- It supports black-box testing for APIs regardless of implementation language and white-box testing for APIs compiled to the JVM, such as Java and Kotlin.checked 8 Oct 2026
The company
- Founded
- 2016checked 28 Sep 2026
Where it runs
- Installation and platforms
- The recommended installation is through PyPI; the project also provides a JAR, Docker image and deprecated installers for Windows, macOS and Linux.checked 8 Oct 2026
Alternatives to EvoMaster
- 1
Jazzer
Free planOpen sourceAPILinuxmacOSSelf-hosted7.3Free plan - 2
AFL++
Free planAndroidLinuxmacOSSelf-hosted7.2From €20,000 a year - 3

Mayhem
Free planWebAPILinuxmacOS7.0From $236 a month - 4

ClusterFuzz
Free planWebLinuxmacOSSelf-hosted6.8Free plan - 5
cargo-fuzz
Free planLinuxmacOSWindows6.7Free plan - 6
boofuzz
Free planAPILinuxSelf-hostedWindows6.4Free plan