惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
云风的 BLOG
云风的 BLOG
Microsoft Security Blog
Microsoft Security Blog
WordPress大学
WordPress大学
GbyAI
GbyAI
C
Check Point Blog
M
MIT News - Artificial intelligence
T
The Blog of Author Tim Ferriss
Jina AI
Jina AI
博客园 - 【当耐特】
U
Unit 42
月光博客
月光博客
腾讯CDC
Y
Y Combinator Blog
小众软件
小众软件
博客园_首页
Last Week in AI
Last Week in AI
酷 壳 – CoolShell
酷 壳 – CoolShell
The GitHub Blog
The GitHub Blog
博客园 - 聂微东
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
MongoDB | Blog
MongoDB | Blog
博客园 - Franky
T
Tailwind CSS Blog

Help Net Security

ChatGPT advanced account security adds passkeys and hardware keys Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months Automating Pentest Delivery: A Step-by-Step Guide - PlexTrac Open-source privacy proxy masks PII before prompts reach external AI services Shadow AI risks deepen as 31% of users get no employer training Identity is the control plane for distributed infrastructure AI traffic is getting bigger, louder, and less predictable New infosec products of the month: April 2026 cPanel zero-day exploited for months before patch release (CVE-2026-41940) Cisco releases open-source toolkit for verifying AI model lineage Met Police face criticism for using AI to spy on their own officers Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431) Hacker with a special interest in breaching sports institutions ends behind bars - Help Net Security IP Fabric MCP server adds governance and control to enterprise AIOps workflows - Help Net Security Aqua Compass MCP server enables real-time investigation and containment of runtime threats - Help Net Security Google brings instant email verification to Android, no OTP needed - Help Net Security If cyber espionage via HDMI worries you, NCSC built a device to stop it - Help Net Security Apple fixes iPhone bug that let FBI retrieve deleted Signal messages(CVE-2026-28950) - Help Net Security GopherWhisper APT group hides command and control traffic in Slack and Discord - Help Net Security OpenAI tackles a bad habit people have when interacting with AI - Help Net Security A year in, Zoom's CISO reflects on balancing security and business - Help Net Security Scenario: Open-source framework for automated AI app red-teaming - Help Net Security GDPR works, but only where someone enforces it - Help Net Security Ransomware, fraud, and lawsuits drive cyber insurance claims to new peaks - Help Net Security Google’s Workspace Intelligence promises privacy while running on your data - Help Net Security Cyberattack on French government agency triggers phishing alert - Help Net Security Claude Mythos finds 271 Firefox flaws, Mozilla believes zero-days are numbered - Help Net Security Prove Identity Platform connects verification, authentication, and fraud prevention - Help Net Security New Mirai variants target routers and DVRs in parallel campaigns - Help Net Security Acronis GenAI Protection gives MSPs control over AI usage and data risks - Help Net Security
Checksum API Agent generates and maintains stateful API t...
Industry News · 2026-06-25 · via Help Net Security

Checksum has launched the API Agent, a continuous testing agent that generates and maintains journey-based tests for backend APIs.

The agent builds multi-step tests that mirror how a product actually uses its API, keeps them current as the API changes, and runs them in a team’s existing pipeline. It closes the gap that opens when AI coding tools add endpoints faster than engineers can write tests to cover them.

Spec-based generators stop at the endpoint. They confirm a route exists or matches a schema, and miss the behavior that actually breaks in production: an ID passed between steps, a state change that has to hold across a sequence.

The API Agent generates stateful, multi-step journeys instead, capturing dynamic values like IDs and tokens at runtime, covering error cases alongside successful flows, and producing the tests as standard PyTest that engineers can read and own. Across Checksum’s platform, teams see 82% lower test failure rates than they do maintaining suites by hand.

“Every team knows it should have API tests. The reason it doesn’t is that the tests rot faster than they catch anything, so the suite becomes one more thing to maintain instead of something the team trusts,” said Gal Vered, CEO of Checksum. “We built the agent to carry that maintenance, so coverage grows with the API instead of decaying against it.”

Engineers can now generate a complete API journey (create a resource, capture the returned ID, read it, update it, verify the result) as readable PyTest, with the values wired between steps automatically. Previously that meant writing and repairing every flow by hand.

The agent starts from a spec or captured traffic, with no repo connection required, and reaches meaningful coverage across a large API surface in days. When an endpoint or schema changes, it identifies the affected journeys and proposes updates through a reviewable session, so engineers approve changes instead of hunting down broken tests. For teams already using Checksum’s end-to-end agent, API and end-to-end coverage now live in one platform.