The core offering from Crosscheck Networks, SOAPSonar is a .NET-based platform that provides the ability to test Web service-based applications in multiple ways; including functional/regression testing, performance testing, interoperability (compliance) testing, and vulnerability testing. The vendor bills their product as providing "code-free" testing; relying primarily on published or stand-alone WSDL files and mutation technology for the loading of Web service definitions and generation of test suites.

WSDL files (and therefore the Web services that they describe) can be loaded into the application by providing the WSDL file's URL or by dragging/dropping a stand alone WSDL into the product's interface. The product automatically parses the WSDL to generate virtual clients that have the ability to interact with the target Web service. The vendor states that multiple WSDLs can be loaded and tests can be mix-and-matched across different WSDL operations. Furthermore, tests can be chained such that the output from one operation becomes the input for another. Secure access testing is supported via integrated PKI and support for WS-UserName Token, WS-X509 Token, WS-Kerberos Token, WS-Encryption, WS-Signatures, SAML Assertions, and SOAP with Attachments MIME & DIME.

Test cases can be defined and saved (for functional/regression testing) via drag-n-drop management. Test results can be reported in PDF, CSV, and MS Word formats.

For interoperability testing, the product supplies both design- and run-time analysis; running a set of WSI Basic Profile 1.1-based tests during the loading of the WSDL, and additionally applying "WSI Profile Mutation" techniques to generate WSDL tests that determine whether or not the Web service responds per WSI Profile specifications.

For performance testing, the vendor notes that a "Performance Mode" is available for the Enterprise version of the product within which up to 100 virtual clients can be setup per instance. Additional distributed test agents can also be purchased, each supporting an additional 100 virtual clients, with the vendor noting that there is no limit to the number of agents that can be managed by the product. Performance tests can be setup to execute for a set duration or a set number of iterations; and previously saved regression tests can additionally be used as performance tests.

Finally, for vulnerability testing, the product relies on the vendor's "XSD-Mutation technology," which generates mutated requests based on the original WSDL and launches automated attacks against the Web services. Responses to these mutated attacks are captured and automatically analyzed for potential vulnerabilities; with results and remediation techniques reported.

New to the product is the inclusion of asynchronous message testing features with native IBM MQ, and native JMS support.

SOAPSonar is available now; in Personal and Enterprise flavors. The Personal Version can be downloaded for free from the vendor's Web site. The Personal version does not include support for compliance, performance, or vulnerability testing.

The Enterprise version is itself available in three versions: The Standard version, the Automation version (adds a command line interface, integration with HP Quality Center, Data Source driven testing, and other automation features), and the Platinum Version (adds a WSDL Socring Ruleset, various performance testing enhancements, and the XSD mutation security testing features, among others). Base Enterprise Standard version pricing starts at $799/per year/per instance.

Note that not all features described above are available in all versions. Visit the vendor's Web site for further information and version comparisons.

product submission by EITPlanet Staff

E-Mail this page to a colleague
send info about SOAPSonar Enterprise

Suggest a link
for the SOAPSonar Enterprise fact sheet