# GraphQLmap

GraphQLmap is a Penetration Testing product. It runs on-premises. Pricing is free.

A scripting engine for interacting with GraphQL endpoints for pentesting purposes.

Checked October 2026.

## What is GraphQLmap?

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Tags: GraphQL

## Quick facts

- Category: [Offensive Security](https://cybersectools.com/categories/offensive-security-testing) · [Penetration Testing](https://cybersectools.com/categories/pentesting-tools)
- Deployment: On-Premises
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 1,541
- Website: github.com

## GraphQLmap FAQ

### What is GraphQLmap?

GraphQLmap is a product in the Penetration Testing category. It covers GraphQL.

### What is the pricing for GraphQLmap?

GraphQLmap is free. Download and setup instructions are at https://github.com/swisskyrepo/GraphQLmap/.

### What are alternatives to GraphQLmap?

Alternatives to GraphQLmap listed on CybersecTools:

1. [BU Creative Web App Penetration Testing](https://cybersectools.com/tools/bu-creative-web-app-penetration-testing) - Manual web app pentest service covering APIs, SPAs, auth flows & business logic. (Commercial)
2. [Agent Breach](https://cybersectools.com/tools/agent-breach) - AI-driven web and API pentesting with recorded evidence, reports, and retests (Commercial)
3. [XBOW Captcha Bypass Tool](https://cybersectools.com/tools/xbow-captcha-bypass-tool) - AI-powered automated penetration testing platform for vulnerability discovery (Commercial)
4. [Burp Suite Professional](https://cybersectools.com/tools/burp-suite-professional) - A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing. (Commercial)
5. [FireCompass AI-powered Pen Testing](https://cybersectools.com/tools/firecompass-ai-powered-pen-testing) - AI-powered automated pen testing & continuous red teaming platform (Commercial)

Compare all GraphQLmap alternatives at [https://cybersectools.com/alternatives/graphqlmap](https://cybersectools.com/alternatives/graphqlmap)

### What deployment and organization size does GraphQLmap fit?

GraphQLmap is available as on-premises. It is listed for smb, mid-market and enterprise organizations. It is free.

## Compare GraphQLmap with similar solutions

- [GraphQLmap vs BU Creative Web App Penetration Testing](https://cybersectools.com/compare/bu-creative-web-app-penetration-testing-vs-graphqlmap)
- [GraphQLmap vs Agent Breach](https://cybersectools.com/compare/agent-breach-vs-graphqlmap)
- [GraphQLmap vs XBOW Captcha Bypass Tool](https://cybersectools.com/compare/graphqlmap-vs-xbow-captcha-bypass-tool)

All alternatives to GraphQLmap: [/alternatives/graphqlmap](https://cybersectools.com/alternatives/graphqlmap)

---

Source: https://cybersectools.com/tools/graphqlmap

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on GraphQLmap: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md