5.6 C
New York
Thursday, April 10, 2025
Home Blog Page 5

Fortinet embeds AI capabilities throughout Safety Material platform



“By embedding FortiAI throughout the Fortinet Safety Material platform, together with new agentic AI capabilities, we’re empowering our prospects to scale back the workload on their safety and community analysts whereas enhancing the effectivity, pace, and accuracy of their safety and networking operations,” stated Michael Xie, founder, president, and chief expertise officer at Fortinet, in a press release. “In parallel, we’ve added protection throughout the Material eco-system to allow prospects to watch and management using GenAI-enabled providers inside their group.”

Among the new capabilities embrace:

  • The flexibility to prioritize safety notifications based mostly on danger, context, and historic patterns, suppress duplicate alerts, and solely flag high-confidence threats.
  • Assist for adaptive menace searching, which scans logs, community visitors, and person conduct to seek for threats with out ready for human enter.
  • The flexibility to carry out root-cause tracing, which makes use of AI-driven reasoning to establish an assault’s origin, technique, and impression.
  • Improved proactive protection by correlating assault patterns and attributing adversary ways.
  • Assist for automating community configuration and safety coverage updates, validation and correction of present configurations.

Fortinet additionally embedded a brand new functionality inside the Safety Material platform designed to supply visibility, management, and superior menace detection capabilities for enterprise AI purposes. FortiAI-Defend can detect AI software utilization for over 6,500 AI URLs, together with genAI purposes, the seller acknowledged. The concept is to assist safety groups decide the supposed use circumstances of AI purposes, the coaching fashions they make the most of, and the place the info is being routed, the seller acknowledged.

Efficient Retrospective Coaching: Two Programs, One Answer


For numerous groups, dash retrospectives have grow to be another calendar invite nobody seems ahead to. As a substitute of energizing the staff, retros depart folks deflated.

As a substitute of surfacing insights, they rehash the identical issues in a recreation of blame. And as an alternative of driving change, they grow to be a repetitive ritual that feels pointless.

Why Retrospectives Really feel So Irritating

The frustrations are simple to acknowledge as a result of they’re in all places.

You’ve probably felt them your self:

The staff information into the retro, digital or in-person, and the facilitator asks the acquainted questions: What went effectively? What didn’t? There’s an extended pause. Some folks communicate up (typically the identical dominant voices) whereas others stare on the flooring or their digicam.

The dialog limps alongside.

The problems that emerge are surface-level: “Communication could possibly be higher” or “We had an excessive amount of work in progress.” Everybody nods. Somebody dutifully information motion gadgets. However by the following dash, nobody remembers what the motion gadgets even had been.

In the meantime, greater subjects—actual blockers, interpersonal tensions, systemic issues—keep buried as a result of nobody feels protected sufficient, or motivated sufficient, to lift them.

And it’s not that Scrum Masters and agile leaders are ignoring this cycle, in my expertise they’re making an attempt to sort things, for instance:

  • They tweak the template (Let’s strive Begin/Cease/Proceed this time).
  • They immediate staff members to take part (Please, everybody share one factor).
  • Or they scale the assembly again as a result of “we’re a mature staff now”—a quiet approach of admitting the retro seems like a waste of time.

And but, the issue stays. Groups get caught. Issues fester. Morale dips. Steady enchancment grinds to a halt.

Why “Altering the Template” Doesn’t Change the Consequence

Retrospectives don’t fail since you’re utilizing the unsuitable format—typically they fail as a result of the goal of the assembly has been misplaced.

The retrospective isn’t only a dialogue in regards to the final dash. It’s the center of staff enchancment—the place small, incremental modifications are born.

When executed proper, retrospectives:

  • Floor significant insights (not simply gripes)
  • Create an area protected sufficient for honesty
  • Result in particular, speedy motion
  • Make the staff really feel stronger, extra linked, and extra succesful each dash

That doesn’t occur accidentally. It takes skillful facilitation, intentional design, and a deep understanding of how people (not simply frameworks) work.

The excellent news? You don’t must determine it out by yourself.

Introducing the Higher Retrospectives Bundle — Two Programs, One Answer

For a restricted time, you will get our Higher Retrospectives Course and the Retrospectives Restore Information collectively—for the value of 1. These two programs are designed to work hand-in-hand: one provides you the framework to run glorious retrospectives, the opposite provides you sensible fixes when issues go unsuitable (and they’re going to).

Provide ends April 17, 9 PM PDT.

Right here’s what’s inside:

Higher Retrospectives: Construct the Basis for Actual Change

Most groups know what a retrospective is. What they’re lacking is how to design one that really delivers worth each time. This course is your blueprint.

You may study:

  • Why retros are like Components 1 pit stops—and the way groups lose their edge with out them
  • Easy methods to transfer past templates and design retrospectives that resonate with your staff
  • Facilitation abilities to show passive attendees into lively contributors—even your quietest teammates
  • Easy methods to adapt codecs, draw out deeper insights, and create psychological security (the hidden issue that makes or breaks each retro)

From the Derby & Larsen five-stage framework to inventive codecs like TRIZ and Three Little Pigs, this course reveals you precisely methods to craft retros that your staff really seems ahead to.

The Retrospectives Restore Information: Repair the Most Widespread—and Irritating—Issues

Even with the precise framework, retrospectives will hit roadblocks. Quiet groups. Recurring issues. Motion gadgets that vanish. That’s the place this course is available in.

Consider it as your troubleshooting guide—designed that can assist you diagnose and repair the true issues groups face in retros.

You’ll sort out questions like:

  • What do I do when my staff is simply too quiet, and it’s at all times the identical two folks speaking?
  • How do I dig deeper when the staff stays surface-level and nothing ever modifications?
  • What if the true issues are exterior our management—processes, legacy methods, different groups?
  • What if the staff thinks we’re “executed” bettering?

By way of knowledgeable methods, examples, and sensible fixes, you’ll discover ways to:

  • Construct psychological security (going past icebreakers)
  • Transfer from issues to actual, achievable actions (and monitor them!)
  • Hold distant retrospectives as partaking as in-person ones
  • Experiment with codecs to remain contemporary, related, and helpful

That is the course that helps you rescue retros once they’ve misplaced their approach—and guarantee they ship the influence they’re meant to.

Why This Bundle Issues Now

Retrospectives are the heartbeat of steady enchancment. After they work, all the things will get higher—communication, morale, supply, high quality.

After they don’t, groups stall. Small points flip into huge ones. Individuals disengage. Efficiency plateaus.

You don’t want one other retro template. You want the talents, instruments, and methods to make retrospectives crucial, helpful hour your staff spends collectively.

That’s what this bundle delivers.

  • Higher Retrospectives provides you the framework to get retros proper from the beginning.
  • The Retrospectives Restore Information provides you the instruments to repair what’s damaged when issues go off the rails.

And proper now, you will get each for the value of 1.

Restricted Time Provide — Till April 17, 9 PM PDT

Get the whole Higher Retrospectives Bundle and switch your retros from a painful ritual into a strong driver of staff efficiency.

Learn extra and get your copies right here

Don’t waste one other dash caught in a cycle of disengaged, ineffective retros. Let’s repair this—for good.

Final replace: April 2nd, 2025

Prime API Testing Instruments for 2025 (Free & Open-Supply)


Get Automation Testing Suggestions

What’s an API?

An API is a specification that acts as an interface for software program elements.

Whereas most useful testing entails testing a person interface like an online web page or a dot internet kind, API testing bypasses a person interface and communicates immediately with an utility by making calls to its APIs.

API useful testing lets you take a look at headless applied sciences like:

  • JMS
  • HTTP
  • Databases,
  • Net companies.

This testing approach is typically known as “headless” testing.

Most headless testing consists of bypassing the UI, sending a request on to an utility’s backend or service, and receiving a response whereas validating the response to make sure issues are working as we count on them to.

This easy instance is also known as a shopper/server relationship.

A shopper makes a request by asking for a useful resource; the request then goes out and finds a server that may fill that request. The server locates the specified useful resource and sends a response again to the shopper.

Be part of Take a look at Automation Coaching

What API Testing Instruments Can I Use to Automate API Testing?

Since Selenium is only for browser-based testing, chances are you’ll marvel which instrument to make use of for Relaxation and Cleaning soap net service-based testing.

Listed here are a few of the common API testing instruments that can be utilized for Relaxation and Cleaning soap Net Service Testing.

These automation instruments are nice as a result of, many occasions, you possibly can leverage one take a look at script to assist with API load/stress efficiency testing, API safety testing, and penetration testing.

So let’s get to it.

Though there are various nice paid choices, listed here are the highest free testing instruments it is best to take a look at for software program testing.

Postman Mail

Postman Logo

Postman is a relaxation shopper that began off as a Chrome browser plugin however not too long ago got here out with native variations for each Mac and Home windows. They’ve additionally not too long ago come out with an AI assistant function known as PostBot.

At a excessive degree, you should utilize it to ship a put up request to your net server, and it provides you a response again. It lets you arrange all of the headers and cookies your API expects after which test the response when it returns.

  • It may be used for each automated and exploratory testing
  • Could be run on Mac, Home windows, Linux &Chrome Apps
  • It has a bunch of integrations, like assist for Swagger & RAML codecs
  • Has Run, Take a look at, Doc, and Monitoring Options
  • It doesn’t require studying a brand new language

To listen to how Postman is utilized in the true world for testing video video games, take a look at Amber Race’s TestTalks episode on Testing Video Video games Utilizing API Automation.

CON: Postman’s options have not too long ago turn into paid choices, though they nonetheless have a free plan. That is why extra testers are migrating to instruments like subsequent on our lst Karate.

 

Karate DSL karate

Karate lets you create a take a look at to sequence calls to any net service (SOPA or REST) and assert that the responses are as anticipated. For those who’re a tester, it is a very tester-focused instrument that does not require you to know the way to code. This instrument has turn into so common that we have now even created two free take a look at information programs to get you in control on it rapidly.

Karate API Testing Course | Test Guild

Karate is thought for being straightforward to learn and, thus, very maintainable. That is an usually missed side of selecting a take a look at framework as a result of take a look at suites are used for steady integration so long as the API is reside in manufacturing.

  • It has an easy-to-use human-like syntax
  • Can run a take a look at and generate reviews like several normal Java undertaking
  • A take a look at will be written with none Java data required
  • Exams are straightforward to jot down, even for non-programmers

Right here is an instance Karate script:

Characteristic: TestGuild search

  Situation: Seek for a key phrase on testguild.com
    Given url 'https://www.testguild.com/'
    And driver
    When driver.get
    Then driver.findElementByCss('#s').enter('automation')
    And driver.findElementByCss('.search-submit').click on()
    And driver.waitForUrl('/?s=automation')
    Then driver.titleContains('automation')

Characteristic: TestGuild search Situation: Seek for a key phrase on testguild.com

Github starsIt at present has over 8.5k stars on GitHub.

Logo and text for Dredd, a tool aimed at preventing outdated API documentation. Text reads: "Dredd - No more outdated API Documentation" with icons for various programming languages and API Testing Tools.

Dredd

Dredd is an open-source API testing framework that validates API descriptions towards backend implementations. It helps builders guarantee their APIs work as supposed by working automated assessments based mostly on API documentation.

By verifying that responses match the anticipated outcomes, Dredd enhances the reliability and consistency of API deployments. Preferrred for RESTful APIs, it helps varied API description codecs like Swagger/OpenAPI, API Blueprint, and RAML, making it a flexible instrument for sustaining high-quality API companies.

Additionally utilizing  Dredd for API testing ensures that your APIs adhere to their outlined specs.

Github starsIt at present has over 4.2k stars on GitHub.

Step CI

New to our listing is Step CI.

This open-source, self-hosted platform is designed to automate API testing throughout varied languages and API varieties, together with:

Step CI presents versatility, permitting configurations through YAML, JSON, or JavaScript. Customers also can carry their very own take a look at knowledge or generate pretend knowledge for testing functions. And you may carry out different cool assessments utilizing it, like:

  • Fuzz Testing
  • Testing ChatGPT
  • CO2 Testing

One in all its standout options is working a number of assessments concurrently with out compromising efficiency.

For these with an OpenAPI specification, assessments will be generated immediately from it. For extra insights, it is best to discover Step CI’s official web site, documentation, and GitHub repository.

Github starsIt at present has over 1.4k stars on GitHub.

SoapUI soap

SoapUI API Logo

SoapUI is a headless useful testing instrument from SmartBear software program. It is available in two flavors:

  1. Free, open-source model 
  2. Professional Model

For the reason that free model is open-source, you possibly can really achieve entry to the total supply code and modify it as wanted.

The free model allows you to:

  • You’ll be able to simply create customized code utilizing Groovy
  • Drag and Drop Take a look at Creating
  • Can create complicated eventualities
  • Asynchronous Testing
  • SoapUI’s Mock Service allows you to mimic net companies earlier than they’re applied.

The SoapUI Professional model is user-friendly and has further performance, together with a kind editor, an assertion wizard for XPath, and an SQL question builder.  

Take heed to Mike Giller of Smartbear speak extra about SoapUI:

 

TraceTest Api Testing Logo

TraceTest

TraceTest takes a singular method to API Testing in comparison with the opposite api automation testing instruments open-source listed right here.

The innovation it brings is that it using OpenTelemetry and trace-based testing.

This instrument is designed to considerably pace up the method of making integration and end-to-end assessments, claiming to cut back the time required from days to minutes. Here is the way it differentiates itself from different API testing instruments on our listing:

  • Integration with OpenTelemetry: Tracetest leverages OpenTelemetry to seize traces of API calls and their interactions inside a system. This integration permits for a extra in-depth evaluation and testing of the API and the system’s conduct.
  • Hint-Primarily based Testing: In contrast to conventional API testing instruments that will focus solely on the request and response, Tracetest makes use of hint knowledge to claim the conduct and efficiency of the API and the underlying companies. This consists of the power to claim on the timing of hint spans (e.g., making certain a database span executes inside a sure timeframe) and wildcard assertions throughout frequent kinds of actions (e.g., all gRPC return codes needs to be 0).
  • No Want for Mocks or Fakes: Since Tracetest assessments towards actual knowledge and makes use of the precise traces of the system, there isn’t any want for the cumbersome setup of mocks or fakes. This will result in extra correct and dependable assessments.
  • Help for A number of Take a look at Triggers: Tracetest permits defining assessments via varied triggers comparable to HTTP requests, gRPC requests, and hint IDs. This flexibility accommodates a variety of testing eventualities and necessities.
  • Visible and Programmatic Take a look at Creation: Exams will be constructed visually via the Net UI or programmatically through YAML, making it accessible for each builders and testers. Moreover, the Tracetest CLI and YAML-based take a look at definition information assist GitOps workflows and CI/CD automation.
  • OpenTelemetry Instrumentation Evaluation: Tracetest not solely assessments APIs but in addition analyzes the standard of OpenTelemetry instrumentation throughout the system. This ensures adherence to requirements and may help enhance observability practices.
  • Complete Hint Evaluation and Validation: Past easy API testing, Tracetest presents options for detailed hint evaluation and validation, imposing OpenTelemetry guidelines and requirements. This may be essential for methods relying closely on distributed tracing for observability.

Tracetest’s distinctive worth proposition lies in its integration with OpenTelemetry, trace-based testing method, and complete options that transcend conventional API testing, providing a extra holistic view of a system’s conduct and efficiency.

Github stars It at present has over 1.1k stars on GitHub.

 

HttpMaster Categorical HTTP

HttpMaster Express Logo

HttpMaster describes itself as an online growth and take a look at instrument to automate the testing of internet sites and companies. It may be used to check RESTful net companies and API functions. HttpMaster additionally permits you to observe API responses.

  • HttpMaster undertaking presents world choices to customise your API request
  • Parameter capabilities allow you to incorporate dynamic knowledge together with your request
  • You should utilize request chaining to leverage request objects to incorporate some knowledge from the earlier request with the subsequent request

Relaxation- Assured rest

rest-assured api logo

Relaxation-Assured is an open-source Java Area-specific language (DSL) that simplifies handbook testing of REST service. It simplifies issues by eliminating the necessity to use boilerplate code to check and validate complicated responses. It additionally helps XML and JSON Requests/Responses. That is in all probability the best-known instrument to check relaxation API.

  • Removes the necessity to create boilerplate code required to work together with a relaxation service
  • Help BDD Given/When/Then syntax
  • Built-in seamlessly with Java initiatives
  • Most likely the usual for programmatically making a relaxation API testing instrument script

For those who use Java and desire a REST API net companies library you should utilize in your framework, Relaxation-Assured is an effective selection. Bas Dijkstra not too long ago additionally created a C# model.

Johan Haleby, creator of Relaxation-Assured, shares ideas and methods for getting began with REST testing with Relaxation-Assured.

 

Github stars It at present has over 7k stars on GitHub.

RoboHydra Server 

RoboHydra Server

Are you on the lookout for API integration testing instruments?

RoboHydra is a testing instrument for HTTP-based shoppers (i.e., software program that makes HTTP requests). As an alternative of connecting your clients-under-test to the true server, you join them to RoboHydra and make RoboHydra reply with no matter you want for every request.

To make use of RoboHydra to carry out, say, navigating to testguild.com and looking for “API automation testing,” you will must create a easy proxy server with RoboHydra after which write a take a look at script to carry out the search.

  • You’ll be able to take a look at many various sorts of shoppers
  • Written in Javascript, runs below Node 

Get Automation Testing Suggestions

 

Pyresttest 

PyRestTest is a Python-based REST testing and API micro-benchmarking API testing instrument.

  • You’ll be able to write your take a look at scripts in primary YAML or JSON config information; no code is required
  • Returns exit codes on failure
  • It solely works on Mac and Linux

it is easy to get began. All that you must do is set up pip set up pyresttest

Then Create a YAML take a look at file that, for instance, the take a look at will test if the GitHub API returns a 200 standing code when requesting public repositories.

---
- config:
    title: "GitHub API Take a look at"
    timeout: 5
    headers: {'Person-Agent': 'PyRestTest'}

- take a look at:
    title: "Get public repositories"
    url: "https://api.github.com/repositories"
    methodology: "GET"
    expected_status: [200]

And run the take a look at:

resttest.py https://api.github.com github_api_test.yaml


Get Automation Testing Suggestions

Airborne Plane

Airborne is an open-source Ruby-based framework constructed on prime of RSpec. RSpec is a well-liked behavior-driven growth (BDD) testing framework within the Ruby ecosystem. Airborne simplifies testing RESTful APIs by offering a set of handy strategies and matchers for making HTTP requests and validating responses.

Key options of Airborne:

  • Works with Rack functions like Sinatra and Grape
  • Works with APIs written in Rails
  • Straightforward to make use of: Airborne offers a easy and readable DSL (Area-Particular Language) that makes it straightforward for builders and testers to jot down assessments.
  • JSON assist: Airborne is designed with JSON in thoughts, making it straightforward to parse, validate, and manipulate JSON response our bodies in your assessments.
  • Constructed on RSpec: As Airborne is constructed on prime of RSpec, you possibly can leverage the total energy of RSpec matchers and its BDD-style syntax.
  • Customized matchers: Airborne features a set of customized matchers to validate API responses, comparable to checking the presence of particular keys or validating the kinds of values in JSON objects.
  • Extensible: You’ll be able to simply lengthen Airborne by including customized matchers or utilizing current RSpec plugins to boost your API testing expertise

To make use of, all that you must do is use the next gem information

gem set up airborne
gem set up rspec

Then create a take a look at file github_api_spec.rb:

require 'airborne'

describe 'GitHub API' do
  it 'retrieves public repositories' do
    get 'https://api.github.com/repositories'
    expect_status(200)
    expect_json_types('*', id: :integer, title: :string, full_name: :string)
  finish
finish

After which run the take a look at: rspec github_api_spec.rb

Github starsIt at present has over 1.1k stars on GitHub.

Citrus Framework 

Citrus API Logo

I am not sure why extra of us aren’t conscious of the Citrus Framework. Citrus is an open-source framework that may provide help to automate integration assessments for nearly any messaging protocol or knowledge format. It has good take a look at outcomes reviews as properly.

  • Works with REST, SOAP, HTTP, JMS, TCP/IP, and extra
  • Create assessments utilizing Java or XML
  • Mature – has been round some time

For more information on Citrus and integration testing, test out API Integration Automation Testing With Citrus Framework.

 

Github starsIt at present has over 465 stars on GitHub.

ZeroCode

ZeroCode API

ZeroCode describes itself on GitHub as a community-developed, free, open supply, microservices API automation and cargo testing framework constructed utilizing JUnit core runners for HTTP REST, SOAP, Safety, Database, Kafka, and way more. Zerocode Open Supply lets you create, change, orchestrate, and preserve your automated take a look at circumstances declaratively simply.

Listed here are some advantages of utilizing ZeroCode:

  • ZeroCode is constructed on JUnit core runners (no plugins wanted)
  • Simply your IDE or any JSON editor is sufficient to drive the assessments
  • Very straightforward to jot down assessments – so simple as Postman REST-Shopper
  • You’ll be able to nonetheless do BDD, however with out syntax overhead
  • Efficiency testing – Load/Stress era is kind of straightforward, and current assessments will be reused
  • Environment friendly Experiences – You are able to do a fuzzy search in addition to filter by any textual content, and observe by creator

Github starsIt at present has over 934 stars on GitHub.

Katalon Studio

Katalon Mobile Automation Frameworks

Katalon Studio is an all-in-one take a look at automation resolution that helps net, cell, and API testing. It presents complete options and a user-friendly interface, making it appropriate for inexperienced persons and skilled testers. Katalon Studio can be utilized for headless testing to make sure your RESTful and SOAP net companies’ performance, reliability, efficiency, and safety.

Some advantages of Katalon Studio are:

  • It isn’t open-sourced, however it’s free
  • It’s a whole bundle and framework. So it’s straightforward to put in and get working
  • Small studying curve
  • It has performance that lets you take a look at net companies and REST APIs

Take heed to my interview with Raghav Pal to find extra about Katalon Studio.

 

JMeter

JMeter API testing

As you would possibly already know, JMeter was developed for load testing, however many testers additionally use it for useful API testing and as an API load testing instrument as properly.

Some advantages of JMeter are:

  • Can leverage one script for each API and API Efficiency testing
  • JMeter has been round some time, so it is time-tested
  • Simply built-in into CI/CD environments

Tavern

Tavern API Logo

Tavern is a pytest plugin, command-line instrument, and Python library for automated testing of APIs. It is designed for testing RESTful APIs. It makes use of the highly effective pytest testing framework to create a easy, concise, and versatile solution to write API assessments. Tavern lets you create automated API assessments in YAML format, making them straightforward to learn and preserve. Moreover, since Tavern is constructed on prime of pytest, you possibly can leverage pytest’s superior options and plugins to boost your API testing expertise.

    • Easy, concise, and versatile YAML-based syntax
    • Very easy to get began
    • Extremely customizable for complicated assessments
    • Helps testing RESTful APIs in addition to MQTT-based APIs

Github starsIt at present has over 1,1k stars on GitHub.

Chakram

Chakram API logo

Chakram is a REST Javascript API testing instruments framework with a BDD testing model and totally exploiting guarantees. So you should utilize it for

  • HTTP Assertions
  • Chakram totally exploits javascript guarantees
  • BDD formatting and hooks
  • Very extensible

Github starsIt at present has over 908 stars on GitHub.

Free TestGuild Programs

For those who learn this far, you would possibly ask your self, “Cannot you additionally use a few of the extra common browser automation testing instruments for API testing?” The reply is YES, as an example.

Playwright automation framework

Playwright for API testing

You are able to do API testing utilizing Playwright, though Playwright is primarily designed for end-to-end testing of net functions. Playwright is a Node.js library that automates browser actions, making it good for testing net functions in a number of browsers, together with Chromium, Firefox, and WebKit. Nonetheless, you may as well use it with different libraries to carry out API testing.

Here is an instance of how one can carry out API testing utilizing Playwright, together with the “axios” library to make API requests:

First, set up the required libraries:

npm init -y
npm set up playwright axios

Create a take a look at file, e.g., api_test.js, and import the required libraries:

const { chromium } = require('playwright');
const axios = require('axios');

Outline an async operate to carry out the API testing:

async operate testAPI() {
  // Launch a browser occasion utilizing Playwright
  const browser = await chromium.launch();
  const context = await browser.newContext();
  const web page = await context.newPage();

  // Navigate to the goal API URL (substitute together with your API URL)
  const apiUrl="https://api.instance.com/knowledge";

  // Use axios to make an API request
  const response = await axios.get(apiUrl);

  // Examine the response standing and knowledge
  if (response.standing === 200 && response.knowledge) {
    console.log('API Take a look at Handed:', response.knowledge);
  } else {
    console.error('API Take a look at Failed:', response.standing, response.statusText);
  }

  // Shut the browser occasion
  await browser.shut();
}

testAPI();

Do not forget that this is only one solution to carry out API testing utilizing Playwright. Playwright is a flexible library that may be mixed with many different libraries and frameworks to carry out extra complicated API testing.

Additionally a PW-API-PLUGIN for API testing in Playwright was not too long ago launched to assist

On-Demand API Testing Coaching

What about API testing utilizing Cypress — certain!

Cypress Automation Testing Framework

Cypress for API Testing

Identical to Playwright, Cypres is a well-liked end-to-end testing framework for net functions. Though Cypress is principally designed for browser automation and testing net functions, it additionally provides performance for testing APIs utilizing the cy.request operate.

Right here is an instance of how that will look

describe('API Take a look at', () => {
  it('GET request', () => {
    // Exchange together with your API URL
    const apiUrl="https://api.instance.com/knowledge";

    // Make a GET request utilizing Cypress
    cy.request(apiUrl).then((response) => {
      // Examine the response standing and knowledge
      count on(response.standing).to.equal(200);
      count on(response.physique).to.have.property('knowledge');
    });
  });
});

Prime API Testing Instruments Recap

Automation Guild 2024 online event promo

I feel software program testers must embrace APIs this 12 months, which is why I’ve so many classes at this 12 months’s Automation Guild to assist. Examine them out now.

These are the highest instruments I’ve come throughout, however tons of SOAP and REST API take a look at instruments are popping up all over the place, so I’ll undoubtedly add to this listing as time passes.

If considered one of your favourite API take a look at instruments just isn’t listed, please let me know, and I’ll add it.

Let’s Discuss!

9 Programs for Community Professionals in 2025


Community professionals frequently hone their abilities to maintain knowledgeable about technological developments whilst they oversee legacy applied sciences and methods. Schooling suppliers preserve tempo with these information wants, providing quite a lot of programs geared to professionals who wish to sharpen their current abilities in addition to courses that introduce extra junior workers members to the basics of community administration.

Listed here are 9 networking programs for brand spanking new and veteran networking professionals.

Community fundamentals and starting programs

1. Introduction to Networking

Supplied by NVIDIA by way of Coursera

This two-module course contains 4 movies and takes roughly one hour to finish. It’s adopted by a 40-minute quiz-exam. The course covers networking fundamentals, together with the next:

  • A dialogue of the OSI mannequin and TCP/IP and what they do.

  • The varied elements and features of a community.

  • The fundamentals of Ethernet-wired networks.

Value: Examine with Coursera.

Greatest suited to: Junior networking workers who’re simply beginning their careers in networking. Others in IT and consumer organizations who want a working information of networks, comparable to para-networking workers in edge services.

2. Community and Techniques Administrator Technical Coaching

Supplied by Udemy

This course supplies an summary of community and system administration features, cut up between 49 separate on-demand video modules and 7 articles. There isn’t any closing examination, however members who full the course obtain a certificates of completion.

Course modules cowl the next:

  • Networking fundamentals, networking units and connectors.

  • IP configuration, routing and switching.

  • Community administration and safety.

  • Wi-fi, LAN and WAN networks.

  • Networking in a Microsoft Home windows surroundings.

Value: As little as $14.99 per pupil for brand spanking new learners.

Greatest suited to: Junior networking, methods, cloud, IT and safety staffers advancing alongside an administrative profession path and those that require an entire introduction to Microsoft-based community administrator duties.

3. CompTIA Community+ Prep (N10-009) eLearning Course

Supplied by Certstaffix

That is an eight-module, self-paced course delivered in a collection of movies which are accessible over a six-month interval. Course modules cowl the subjects included within the CompTIA Community+ (N10-009) examination, comparable to the next:

The course additionally contains 4 bonus modules in mushy abilities: time administration, digital abilities, creativity and common.

Value: $475 per individual.

Greatest suited to: Junior networking, methods, IT and safety, and cloud technical and administrative personnel who wish to develop their abilities to advance their careers.

4. Introduction to Networking and Cloud Computing

Supplied by Microsoft by way of Coursera

This five-module course is designed for many who wish to deepen their information of cloud networking. Particular person modules take three to 6 hours to finish and canopy the next subjects:

  • Community units and protocols.

  • Cloud computing and networking.

Value: Examine with Coursera.

Greatest suited to: Community workers members with junior to intermediate abilities who wish to broaden their understanding of how networks work in cloud environments, and who work in Microsoft Azure outlets.

Intermediate and superior networking programs

5. Introduction to Community Automation

Supplied by Cisco Studying & Certifications by way of Coursera

Developed for networking professionals at an intermediate ability stage, this Cisco community automation course acquaints college students with the basics of automation and the way it’s utilized in networks. The course takes two hours to finish and consists of the three following modules:

  • Introduction to Community Automation.

  • Analyzing Community Administration and Operations.

  • Utilizing Python for Community Automation.

This course is an entry level into Cisco’s Community Automation Engineering Specialization curriculum, which is a five-part collection taken over three months that leads to certification.

Value: Examine with Coursera.

Greatest suited to: Intermediate-level community professionals who wish to deepen their community automation abilities inside Cisco environments.

6. Identification and Entry Governance

Supplied by Udemy

Designed for community safety professionals, this course breaks down the variations between identification entry governance and identification entry administration (IAM). It covers the architectures that accommodate each methodologies and supplies college students with finest practices they’ll use to handle consumer entry and permissions. The course consists of 43 subject lectures accessed by way of 5 hours of on-demand video. A course certificates is issued upon profitable completion.

Value: Ranges between $74.99-$84.99 and is usually discounted.

Greatest suited to: IAM and cybersecurity consultants and engineers, data safety professionals, CISOs and IT professionals.

7. Cybersecurity

Supplied by edX

This four-course, eight-month curriculum teaches members tips on how to arrange and safe primary laptop methods and networks. It familiarizes college students with data safety danger administration frameworks and methodologies. Moreover, college students are taught tips on how to implement community safety methods, detect intrusions and conduct a court-admissible digital forensics investigation. The course additionally covers the next:

  • Threat administration and mitigation.

  • Contingency planning for assaults.

Members obtain a certificates after finishing the course.

Value: $1,436.40 per pupil.

Greatest suited to: Superior networking workers members who wish to deepen their abilities in cybersecurity administration and methods.

8. SEC530: Defensible Safety Structure and Engineering: Implementing Zero Belief for the Hybrid Enterprise

Supplied by SANS Institute

This can be a hands-on class with lab workouts that target tips on how to deploy zero-trust networks in hybrid environments. The seller-neutral curriculum teaches college students tips on how to retool community elements — comparable to switches and next-gen firewalls — to make sure they’re proof against cyberattacks. Course instructors have intensive cyber protection expertise. Members who efficiently full the course obtain the World Info Assurance Certification Defensible Safety Architect designation.

Value: $8,780 per pupil.

Greatest suited to: Superior community personnel who work in hybrid computing environments and use zero-trust networks as a part of their community safety technique.

9. Web of Issues

Supplied by Curtin College by way of edX

This six-module course focuses on IoT safety points, with subjects starting from programming to combatting assaults geared to IoT sensors and units. The three-month capstone undertaking requires members to design their very own IoT safety frameworks. College students should go all 5 modules to take part within the closing undertaking. The course runs for 12 weeks, with a dedication of 4 to 10 hours per week. Graduates obtain a certificates.

Value: $1,544 per pupil.

Greatest suited to: Community professionals who work or plan to work in an IoT surroundings.



Prioritize media privateness with Android Picture Picker and construct consumer belief



Prioritize media privateness with Android Picture Picker and construct consumer belief

Posted by Tatiana van Maaren – International T&S Partnerships Lead, Privateness & Safety, and Roxanna Aliabadi Walker – Product Supervisor

At Google Play, we’re devoted to constructing consumer belief, particularly on the subject of delicate permissions and your information. We perceive that managing information and media permissions might be complicated, and customers typically fear about which information apps can entry. Since these information typically include delicate data like household photographs or monetary paperwork, it is essential that customers really feel in management. That’s why we’re working to supply clearer decisions, so customers can confidently grant permissions with out sacrificing app performance or their privateness.

Under are a set of greatest practices to think about for bettering consumer belief within the sharing of broad entry information, in the end resulting in a extra profitable and sustainable app ecosystem.

Prioritize consumer privateness with information minimization

Constructing consumer belief begins with requesting solely the permissions important on your app’s core features. We perceive that photographs and movies are delicate information, and broad entry will increase safety dangers. That is why Google Play now restricts READ_MEDIA_IMAGES and READ_MEDIA_VIDEO permissions, permitting builders to request them solely when completely obligatory, usually for apps like photograph/video managers and galleries.

Leverage privacy-friendly options

As a substitute of requesting broad storage entry, we encourage builders to make use of the Android Picture Picker, launched in Android 13. This instrument provides a privacy-centric manner for customers to pick particular media information with out granting entry to their total library. Android photograph picker gives an intuitive interface, together with entry to cloud-backed photographs and movies, and permits for personalisation to suit your app’s wants. As well as, this technique picker is backported to Android 4.4, guaranteeing a constant expertise for all customers. By eliminating runtime permissions, Android photograph picker simplifies the consumer expertise and builds belief by means of transparency.

Construct belief by means of clear information practices

We perceive that some builders have traditionally used customized photograph pickers for tailor-made consumer experiences. Nonetheless, no matter whether or not you employ a customized or system picker, transparency with customers is essential. Customers need to know why your app wants entry to their photographs and movies.

Builders ought to try to supply clear and concise explanations inside their apps, ideally on the level the place the permission is requested. Take the next in consideration whereas crafting your permission request mechanisms as attainable greatest practices pointers:

    • When requesting media entry, present clear explanations inside your app. Particularly, inform customers which media your app wants (e.g., all photographs, profile photos, sharing movies) and clarify the performance that depends on it (e.g., ‘To decide on a profile image,’ ‘To share movies with associates’).
    • Clearly define how consumer information can be used and guarded in your privateness insurance policies. Clarify whether or not information is saved domestically, transmitted to a server, or shared with third events. Reassure customers that their information can be dealt with responsibly and securely.

Learn the way Snap has embraced the Android System Picker to prioritize consumer privateness and streamline their media choice expertise. Here is what they need to say about their implementation:

A grid of photos in the photo library is shown on a smartphone screen, including a waterfall and two people smiling and posing for the camera. The Google Photos interface is at the top, with the Photos tab selected, and one photo from the grid is selected for use

“Considered one of our objectives is to supply a seamless and intuitive communication expertise whereas guaranteeing Snapchatters have management over their content material. The brand new stream of the Android Picture Picker is the proper stability of offering consumer management of the content material they need to share whereas guaranteeing quick communication with associates on Snapchat.”

Marc Brown, Product Supervisor

Get began

Begin constructing a extra reliable app expertise. Discover the Android Picture Picker and implement privacy-first information practices at present.

Acknowledgement

Particular due to: Could Smith – Product Supervisor, and Anita Issagholyan – Senior Coverage Specialist