Assertwise Lab / Rate limiting
Rate limitingAPI rate-limit indicator (light, max. 10 requests)
A quick indicator whether rate limiting is visible on an endpoint. It is explicitly not a rate-limit or load test.
RUNS ON OUR SERVER
Interpreting the result
A 429 within 10 requests means a strict limit is enforced. RateLimit headers (IETF draft) or X-RateLimit-* headers mean limits are documented to clients. Neither proves the limit is effective per user, per token or against distributed attacks – testing that properly needs an authorized test with controlled load, which we do in API security engagements.
Want a senior engineer to look at the results?
Free tools give you a first signal. In a free 20-minute check-up we review your API, performance or test setup and tell you what to fix first.