🔘Pynt for Newman (Postman CLI)
Run Pynt API security tests on a locally stored postman collection from a terminal
What is Newman?
Newman is a command-line interface (CLI) tool that allows developers to run and automate Postman collections directly from the command line. It enables you to execute Postman API tests in various environments, making it an essential tool for integrating API testing into continuous integration and delivery (CI/CD) pipelines. With Newman, you can run collections, manage environments, and generate reports, all while leveraging the powerful features of Postman without the need for a graphical user interface (GUI).
Pynt integration with Newman
Pynt for Newman allows you to integrate advanced API security testing directly into your command-line workflows. By combining the power of Newman with Pynt, you can automate security scans alongside your regular API tests, ensuring that each API run is thoroughly tested for vulnerabilities.
With Pynt’s context-aware security testing capabilities, you can enhance your Postman collections with automated security checks, all executed via Newman. This integration is perfect for teams looking to streamline their security testing within their existing CI/CD processes, providing a seamless way to ensure that your APIs are protected against potential threats.
After each run, Pynt generates detailed reports that highlight any security risks found during testing, giving you the insights needed to address vulnerabilities promptly. By integrating Pynt with Newman, you can maintain the flexibility and efficiency of your command-line testing while significantly boosting your API security.
Important Notes:
Please verify the above by running your functional test collection vs. your target before executing the Pynt security test.
Pynt utilizes your functional tests to perform the security tests. The more extensive the functional tests are, the more the security tests will cover. For example, more APIs, more users, more requests and full use of the parameters will trigger broader and richer dynamic security tests.
Here is an example:
Last updated