SwarmAI Guide
SwarmAI runs automated testing with multiple AI agents. For browser navigation, videos, logs and UX scoring, see TestingAI.
What is SwarmAI?
SwarmAI is an automated testing system that uses multiple AI agents working in parallel to:
- Find security vulnerabilities (XSS, SQL injection, CSRF, etc.)
- Detect performance bottlenecks
- Identify real-world usage issues
- Test edge cases and error handling
- Validate API endpoints and data flows
How SwarmAI Works
When you start a SwarmAI run:
- Agent Initialization: Multiple AI agents are spawned, each with a specific testing focus
- Parallel Testing: Agents work simultaneously to maximize coverage
- Pattern Detection: Agents identify vulnerabilities, performance issues, and bugs
- Report Generation: Results are compiled into actionable reports
- Auto-Patch Suggestions: Fixes are automatically generated for detected issues
Headless browser & Playwright
SwarmAI uses a headless browser (Playwright + Chromium) that runs on the Sublyzer backend, not inside your SDK code.
- No extra browser libraries are required in your app or SDK integration.
- On Sublyzer Cloud and the official backend image, Playwright/Chromium is already installed and wired into TestingAI/SwarmAI.
- If you self-host a custom backend, just keep the default Dockerfile /
npm installflow so the headless engine is provisioned automatically.
Running SwarmAI Tests
To run SwarmAI tests:
- Ensure your GitHub integration is connected
- Go to your Integration dashboard → Swarm AI tab
- Select the test type (Security, Performance, or Full)
- Configure test depth and number of agents
- Click "Start SwarmAI Run"
Test types:
- Security: Focuses on finding vulnerabilities and security issues
- Performance: Analyzes performance bottlenecks and optimization opportunities
- Full: Comprehensive testing covering all areas
Understanding Results
SwarmAI results include:
- Vulnerabilities Found: List of security issues with severity ratings
- Performance Issues: Slow endpoints, inefficient queries, memory leaks
- Error Patterns: Common error scenarios and edge cases
- Recommendations: Suggested fixes and improvements
- Auto-Patch Files: Ready-to-apply patches for detected issues
Best Practices
- Run SwarmAI tests regularly (weekly or before major releases)
- Start with Security tests for critical applications
- Review results carefully before applying Auto-Patch fixes
- Use Full tests for comprehensive coverage before production deployments
- Monitor test duration and adjust agent count based on codebase size
Limitations
SwarmAI is designed to complement, not replace, manual testing:
- May produce false positives that require manual review
- Complex business logic may require human verification
- Test coverage depends on codebase structure and documentation
- Some edge cases may only be found through real-world usage