
Gremlin
7.2#2 in chaos engineering platformsFrom $3,750 a monthWebAPILinuxSelf-hosted
Visit
| Fact | Gremlin | Toxiproxy |
|---|---|---|
| API | The public REST API uses the base URL https://api.gremlin.com/v1 and has an OpenAPI specification. | The HTTP API supports creating, updating, listing, and deleting proxies and toxics, resetting proxies, and retrieving version and Prometheus-compatible metrics. |
| Intended users | Gremlin describes its users as SRE and platform teams, and says financial services, retail, media, and B2B SaaS companies use the product. | The project is aimed at developers and teams testing service failure handling in development, unit and integration tests, and CI. |
| License | Gremlin's commercial reliability platform is not offered as an open-source product; a G2 reviewer specifically notes that no open-source version is available. | The GitHub repository identifies the project license as MIT. |
| Purpose | Gremlin helps engineering teams find failure modes, fix them, and validate reliability before failures become outages. | Toxiproxy is a TCP proxy for simulating network and system conditions in chaos and resiliency testing. |
| Security | Gremlin states it is SOC 2 Type II certified and encrypts data in transit with TLS and at rest with AES-256. | The HTTP API is unauthenticated by default and can create proxies to arbitrary upstreams; the project advises against exposing it to untrusted networks and supports bearer token authentication. |
Gremlin is aimed at SRE and platform teams, including teams in financial services, retail, media, and B2B SaaS. It also suits teams that need self-hosting rather than SaaS.
Toxiproxy suits developers and teams testing service failure handling in development, unit and integration tests, or CI. It is intended for checking that applications do not depend on a single point of failure.