- "Free" means three different things: genuinely free open source, a free tier with real limits, and a time-limited trial wearing the word free.
- The limit that bites is almost never features — it is seats and monthly runs.
- For a free request client: Hoppscotch or Bruno. For free load testing: JMeter or open-source k6.
- The real cost of free tools is the time spent writing the test cases, which usually exceeds any licence fee.
How to read "free"
Before the list, the distinction that matters. Tools described as free fall into three categories, and conflating them is how teams end up migrating twice.
| Category | What it means | Watch for |
|---|---|---|
| Open source | Free permanently, source available, self-hosted | You provide the infrastructure and the effort |
| Free tier | Free within limits, hosted | Seat caps and monthly run caps |
| Free trial | Paid, delayed | Ends after 14–30 days |
The most common unpleasant surprise is not a feature paywall. It is a seat cap of one — which means no team can actually adopt the tool — or a monthly run cap low enough that ordinary CI use exhausts it in days. Check those two numbers before anything else.
Free request clients
Hoppscotch
Open source, browser-based, no installation. The fastest way to send a request to an endpoint when you don't want to install anything. Supports REST, GraphQL and WebSocket. Self-hostable. Best for: quick manual exploration.
Bruno
Open source and git-native — collections are plain text files in your repository rather than data in a vendor's cloud, so they diff and review like code. Offline by default, which some security teams require. Best for: teams who want collections under version control. See Flasqo vs Bruno.
Insomnia
Polished multi-protocol client from Kong with a free tier. Supports REST, GraphQL, gRPC and WebSocket. Some collaboration features sit behind an account. Best for: developers wanting a refined desktop client. See Flasqo vs Insomnia.
Thunder Client
A VS Code extension, so requests live in the editor rather than a separate window. Free tier with paid tiers for team features. Best for: developers who don't want to leave VS Code.
Free load testing tools
Apache JMeter
Free under Apache 2.0 with no limits of any kind, and the broadest protocol support available — HTTP, JDBC, JMS, FTP, LDAP. The cost is entirely in time: test plans are JMX files built in a desktop GUI, and generating serious load means tuning the JVM. See Flasqo vs JMeter.
k6 (open source)
The open-source binary is free under AGPL-3.0 and runs anywhere. Scenarios are JavaScript, which makes them reviewable as code. Grafana Cloud k6 is the paid hosted product; the CLI alone has no run limits. See Flasqo vs k6.
Locust and Gatling
Locust defines load scenarios in Python, which suits Python-heavy teams. Gatling's open-source edition uses a Scala DSL and is efficient at high concurrency, with the enterprise edition paid. Both are genuinely free to self-host.
Free code frameworks
Libraries rather than products, and free by definition: REST Assured for JVM teams, pytest with requests or schemathesis for Python (the latter generates cases from an OpenAPI spec, which is unusual and useful), and supertest for Node. Maximum control, and every test case is yours to write and maintain.
Free platforms that generate the tests
The category above shares one property: they run tests you write. The labour of authoring and maintaining cases is the dominant cost of API testing, and no client or load tool reduces it.
Flasqo is free to use with unlimited runs and no credit card, and generates the suite rather than executing one you wrote. Point it at a URL, and discovery maps the endpoints while generation produces happy-path, edge-case, negative and security cases — across functional, smoke, load, regression, contract, GraphQL, fuzz and chaos testing. It is a browser platform rather than a local client, so it isn't the tool for air-gapped environments.
Picking one
- Exploring an API by hand: Hoppscotch, or Bruno if you want collections in git.
- Collections reviewed as code: Bruno.
- Load testing, self-hosted: k6 if your team writes JavaScript, JMeter for non-HTTP protocols.
- Tests as code in your language: REST Assured, pytest, or supertest.
- Coverage without writing cases: a platform that generates them.
- Air-gapped or offline: Bruno, JMeter or k6 — anything self-hosted.
Test your API without writing the tests
Paste a URL. Flasqo discovers your endpoints, generates the suite and runs it — free, no credit card.
Start testing free