- Home
- Contract Testing Tools
- SpecShield
SpecShield
What it is
SpecShield compares OpenAPI descriptions to identify changes that could disrupt existing API consumers, then reports its findings as GitHub checks. It flags removed endpoints, tightened types, and newly required fields in pull requests. A consumer registry records dependent services so a deploy gate can assess compatibility. GitHub checks include a diff and compatibility verdict and can block merges when a consumer would break. SpecShield also evaluates OpenAPI descriptions against OWASP and design rulesets, assigning a 0–100 score and letter grade. Integrations include a GitHub App and Action, a CI CLI, IntelliJ plugin, SARIF output, and an MCP server for AI agents. The Free plan costs nothing, with one user, unlimited comparisons, one GitHub App pull request check, and seven-day history. Team costs $89 a month, or $900/year ($75/mo billed annually), for up to 10 users and adds registry, deploy gate, audit trail, bidirectional contract testing, Slack alerts, shared workspace, and RBAC. Enterprise pricing is custom. The browser diff accepts OpenAPI 3.0 and 3.1 in JSON or YAML without persisting submitted specs.
For and against
For
- Flags breaking API changes in pull requests
- Consumer registry supports compatibility gates
- Provides OWASP and design-rule scores
- Integrates with GitHub, CI, IntelliJ, and SARIF
- Free browser diff does not persist submitted specs
Against
- Free plan is limited to one user
- Free plan includes one GitHub App check
- Team plan costs $89 a month
- Enterprise pricing is custom
The verdict
SpecShield focuses on preventing API contract changes from breaking dependent services. Its registry, GitHub verdicts, governance scoring, and team controls cover compatibility checks from pull request through deployment.
Who it suits
It is designed for backend, mobile, platform, microservices, and release engineering teams shipping OpenAPI APIs. Teams needing consumer verification, CI checks, governance scoring, or self-hosted deployment may find it suitable.
Plans and prices
SpecShield Free
1 user · unlimited spec comparisons · 1 GitHub App PR check · 7-day compare history
Read 29 Sep 2026 · specshield.io
SpecShield Team
Up to 10 users · consumer registry · can-i-deploy gate · audit trail
Read 29 Sep 2026 · specshield.io
SpecShield Enterprise
Unlimited users · SSO · on-prem/private-cloud on request · advanced RBAC
Read 29 Sep 2026 · specshield.io
On the record
- Breaking change detection
- It flags removed endpoints, tightened types, and newly required fields on pull requests.specshield.io · read 29 Sep 2026
- Consumer registry
- The consumer registry records which services depend on an API so the deploy gate can assess compatibility.specshield.io · read 29 Sep 2026
- Free diff privacy
- The free browser diff compares submitted specs in the request and says it does not persist them.specshield.io · read 29 Sep 2026
- Free plan limit
- The Free plan is limited to one user and includes seven-day compare history and one GitHub App pull request check.specshield.io · read 29 Sep 2026
- GitHub checks
- The GitHub App posts pull request checks with a diff and compatibility verdict, and can block merges when a consumer would break.specshield.io · read 29 Sep 2026
- Governance
- It scores OpenAPI descriptions against OWASP and design rulesets on a 0–100 scale with a letter grade.specshield.io · read 29 Sep 2026
- Integrations
- The product offers a GitHub App and Action, CLI for CI systems, IntelliJ plugin, SARIF output, and an MCP server for AI agents.specshield.io · read 29 Sep 2026
- Purpose
- SpecShield compares OpenAPI descriptions to flag changes that could break existing API consumers and reports results as GitHub checks.specshield.io · read 29 Sep 2026
- Security evidence
- The maker says its audit log records logins, invites, role changes, contract publishes, deploy verdicts, and breaking-change detections in an append-only table, with CSV export.specshield.io · read 29 Sep 2026
- Support
- Free includes community support, Team includes priority email support, and Enterprise includes a dedicated SLA.specshield.io · read 29 Sep 2026
- Supported specs
- The browser diff accepts OpenAPI specifications in JSON or YAML, including OpenAPI 3.0 and 3.1.specshield.io · read 29 Sep 2026
- Team features
- The Team plan includes an enforced can-i-deploy gate, audit trail, bidirectional contract testing, Slack alerts, shared workspace, and RBAC.specshield.io · read 29 Sep 2026
- Who it is for
- The maker describes the product for backend, mobile, platform, microservices, and release engineering teams shipping OpenAPI APIs.specshield.io · read 29 Sep 2026
