Skip to content

AddNewPlugin_JMXAuditor - Initial Release#831

Merged
undera merged 1 commit intoundera:masterfrom
sagaraggarwal86:AddNewPlugin_JMXAuditor
Apr 25, 2026
Merged

AddNewPlugin_JMXAuditor - Initial Release#831
undera merged 1 commit intoundera:masterfrom
sagaraggarwal86:AddNewPlugin_JMXAuditor

Conversation

@sagaraggarwal86
Copy link
Copy Markdown
Contributor

Hi,
I'd like to submit a new plugin — JMXAuditor — for inclusion in the repository.

I built this because the same classic mistakes keep slipping through to the load run. You leave a GUI listener on the load path, spin up the environment, generate the data, run for half an hour — and the throughput numbers are off. Or someone leaves a plaintext password in a request body and only spots it after it's already in the logs.

Existing approaches answer "is this test plan valid?" — does it parse, does it execute. JMXAuditor answers a different question: "is it well-designed?" A plan can be perfectly valid and still leak credentials in the request body, drop throughput from a GUI listener on the load path, or send identical requests with no think time. Those issues only surface at run time, when the cost of fixing them is highest. JMXAuditor scans the open test plan and flags those issues in seconds.

What it does:

  • Runs 25 rules across six categories — Correctness, Security, Scalability, Realism, Maintainability, Observability — over the currently-loaded test plan
  • Shows results in a modeless dialog with severity tabs (All / High / Medium / Low) and per-category toggles, so you can focus on what matters
  • Double-click any finding to jump straight to the offending element in JMeter's tree
  • Right-click a finding to hide that rule for the rest of the session if it's noisy on this particular plan
  • Export the report as HTML (a single self-contained file), JSON (schema v1.0), or Excel
  • Full keyboard control — Esc to close, F5 / Ctrl+R to rescan, Enter to navigate, 1–4 for severity, Alt+1–6 for category
  • Zero configuration. Drop the JAR in lib/ext/, restart JMeter, and Tools → Audit Script (Ctrl+Shift+A) is there. Open any .jmx, hit the shortcut, and you have findings.

Plugin is on Maven Central (io.github.sagaraggarwal86:jmxauditor-jmeter-plugin:0.6.0), Apache 2.0 licensed, and targets JMeter 5.6.3 / Java 17.

Happy to answer any questions or make adjustments to the entry.
[Sample_Report.html](https://github.com/sagaraggarwal86/JMXAuditor-jmeter-plugin/blob/main/docs/Sample_Report.html)

Image

@undera undera merged commit fcea225 into undera:master Apr 25, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants