Browse categories
Explore
Fiverr Pro
English
$
USD
I will do API testing and automation with postman and rest assured
Performance and load testing, SLO driven, verify your NFRs, not guess
Senior performance and QA engineer, 22 years in testing. I don't just run a load test and send a report - I build the load model, set the SLOs and verify your NFRs, giving you a clear go/no-go at your...
About this Gig
Your UI looks fine. But is your API?
Hands-on API testing and API automation for REST API and GraphQL services.
Broken APIs hide behind a nice UI: wrong data, leaked fields, missing auth checks, crashes on the first unexpected input. Users find them in production, and so do attackers.
I test the API layer directly, where most real bugs live. Every endpoint is checked against its contract, with tests you can re-run on every release.
What's included:
- Status codes, response schema, auth and permissions
- Negative and edge cases, input validation, error handling
- Postman collection or code suite (REST Assured, Playwright API)
- Clear bug report with reproducible requests
- CI job on every pull request (Standard and Premium)
Why me?
- 22 years in QA, plus a performance and security testing background
- REST and GraphQL, contract tests on Premium
- I look at your API the way an attacker and a peak traffic day would
Not sure which package fits? Send me your API docs (Swagger or OpenAPI), and I'll reply with an honest recommendation.
Testing application:
API
Development technology:
Java
•
JavaScript
•
Node.js
•
SQL
•
TypeScript
Device:
PC
•
Mac
•
Linux
My Portfolio
FAQ
Why should you choose me?
22 years in QA with a performance and security testing background. I don't stop at status 200: I check schema, auth, permissions and failure paths the way an attacker or a peak traffic day would, and you get tests you can re-run.
What's included?
Endpoint coverage for status codes, response schema, auth and permissions, negative and edge cases, a Postman collection or code suite and a bug report with reproducible requests. Standard and Premium add automation and a CI job.
What's not included?
Fixing your backend code, a full penetration test and a full load test with SLOs (see my performance testing gig for that). UI testing is not part of this gig. Test environment and credentials come from your side.
Which package should I choose?
Basic: up to 10 endpoints checked with a Postman collection and bug report. Standard: an automated suite with positive, negative and edge cases, data-driven runs and CI. Premium: Standard plus contract tests, basic security and a quick load check.
Postman or code-based tests, what will I get?
Your choice. Postman with Newman is fastest to start and easy for non-developers. REST Assured (Java) or Playwright API (TypeScript) fits better if the tests should live next to your code. If unsure, I recommend one based on your stack.
Do you test GraphQL and microservices too?
Yes. REST, GraphQL and service-to-service APIs. For microservices I focus on contracts between services and on the failure paths: timeouts, retries and partial outages, not only the happy path.
We have no API documentation. Can you still test it?
Yes. I can map endpoints from your frontend traffic or a short call with a developer. As a bonus you get a Postman collection that doubles as living documentation.
Will you test against production?
Only read-only checks and only with your written OK. Functional, negative and load tests run on staging or a test environment, so no real customer data is touched and nothing breaks for your users.
What do you need from me to start?
The base URL of a test environment, API docs if you have them (Swagger or OpenAPI), test credentials or tokens, and the endpoints or business flows that matter most. Repo access only if the suite should live in your codebase.
Can you run a full security or load test of my API?
Premium includes basic security checks (auth bypass, injection, data exposure) and a quick load check on key endpoints. For a full load test with SLOs, see my performance testing gig. A certified penetration test is out of scope.
