1

How to Automate UI, API, Performance & Security testing using a single Framework. One test case should check all these things. Any suggestions?

Improve this question
4
  • 3
    One test case should check all those things- why do you want to do this? – demouser123 May 29 '18 at 16:08
  • 4
    This is an unrealistic goal for an undefined objective. – Vishal Aggarwal May 29 '18 at 19:52
  • 1
    Why do you want only one framework ? – MasterJoe May 30 '18 at 22:06
  • One test case will check security, performance and functionality? Can you give a real example of such case? – dzieciou Jul 4 '19 at 20:05
2

My solution is to pick a language, for example Ruby (a good choice imho) or Java or C# as the 'framework' for your solutions (I'm avoiding the word framework lately though, badly abused).

Then select tools based on that toolset, for example, for ruby: cucumber, rspec, minitest.

Improve this answer
1

You need to choose a performance testing tool which supports all aforementioned requirements, for example take a look at Apache JMeter:

  1. UI tests can be integrated via WebDriver Sampler
  2. API testing is naturally supported via HTTP Request sampler, see Building a WebService Test Plan user manual entry for details.
  3. You can use JMeter for Security Testing as well, see Security Testing With JMeter - Learn How article for several use cases
  4. And last but not least you can kick off any external command or program via OS Process Sampler so theoretically you can integrate anything into JMeter test.
Improve this answer
1
  • +1 for jmeter. You can use jmeter for functional testing. You can schedule quick diagnostic checks to ensure that your website and/or API is up and running. One of my favorite things about jmeter is that you can setup an API test and use the exact same test for performance testing your API. Then there is the JSR223 Processor, where you can write custom scripts using your favorite language. – ToastMan Mar 4 '20 at 14:32
0

I've never heard about the all-in-one product, but should highly recommend Wallarm FAST as a framework for application security testing. You can easily run the Selenium test through docker-based fast proxy and it will automatically generate and run security tests based on it, including sophisticated things like base64, under JSON, under another layer of base64, etc

Framework for Application Security Testing

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.