A capable open-source API testing tool with unverified marketing superlatives.
Keploy is an open source API and integration testing tool that captures live application traffic and converts it into test cases and mocks. It is built on eBPF, a Linux kernel technology that lets it record and replay HTTP calls, database queries, and message queue traffic without adding a software development kit to the codebase. The company was founded in 2021 and offers a free self-hosted core alongside a paid cloud product.
Keploy captures incoming HTTP requests and outgoing calls to databases, queues, and third-party APIs at the network layer using eBPF, and saves them as YAML test cases.
In test mode, Keploy replays the recorded requests in a sandboxed environment, automatically mocking dependencies and comparing responses against the original recording to catch regressions.
The tool tries to identify non-deterministic fields such as timestamps or random IDs so they do not cause false test failures.
A separate Unit Test Generator analyzes code or pull request diffs with an LLM, GPT-4o by default, to produce unit tests for JavaScript, TypeScript, or Go. Only source and test code are sent to the LLM, and a self-hosted model can be used instead.
AI synthesis of external reviews · not on bestaiq
Synthesized from 6 external reviews. Independent signal (Trustpilot / Reddit / verified aggregators) weighted higher than commission-carrying review sites.
The core Keploy engine is open source under Apache-2.0 and free to self-host indefinitely. There is also a free cloud 'Playground' tier with monthly limits: 30 test-suite generations, 100 test runs, and 5 AI credits. Paid Pro and Enterprise cloud tiers add higher limits and more support.
Keploy's official pricing page lists Pro at $19 per user per month plus usage-based overages, with $19 of usage credit included. A $24 per month figure appears on some third-party aggregator sites but does not match the official pricing page.
The core testing engine does not send code anywhere. The optional AI unit-test-generation feature sends source code and generated test code to a configured large language model, OpenAI's GPT-4o by default, unless a self-hosted or private LLM is configured instead.
Keploy's pricing page describes SOC 2, GDPR, HIPAA, and ISO 'aligned controls' and 'readiness' on paid plans. No completed SOC 2 report, ISO 27001 or 27701 certificate, or named auditor could be found published anywhere on the company's site or documentation.
Because it intercepts traffic at the network layer rather than through an SDK, Keploy is marketed as language-agnostic. Its separate LLM-based Unit Test Generator officially documents narrower support: JavaScript and TypeScript through Jest, and Go.
Keploy offers a genuinely open source, no-code approach to generating API tests and mocks from real traffic, with verifiable GitHub activity and a working VS Code extension. Its headline accuracy and coverage numbers are vendor-only and unconfirmed by outside testing, and its compliance claims stop at 'readiness' rather than completed certification. It is worth evaluating hands-on for teams with complex API dependencies, but buyers should verify pricing and compliance claims directly before relying on them.