SOAtest, Virtualize, and CTP 2025.3

This release includes the following enhancements.

Release date: October 7, 2025

Adding MIME Attachments to Outgoing Messages

The new Attachments tool allows you to add MIME attachments to an outgoing message before it is sent. This tool is primarily used to add binary attachments to a SOAP message according to the "SOAP with Attachments" (SwA) specification. This replaces the SwA functionality that was removed in the 2024.1 release. See Attachments Tool for more information.

GraphQL Query Validator Tool

The new GraphQL Query Validator tool validates GraphQL queries against a schema defined using Schema Definition Language (SDL). The typical use case for this tool is to connect it to a tool that sends or receives messages in GraphQL format to verify that the queries are valid, but it can be used as a standalone tool to manually validate GraphQL queries as well. See GraphQL Query Validator for more inforamation.

Easier Generation of Dynamic Lists in Response Payloads

New JSON and XML list generators in Virtualize allow you to select items from a request payload to be processed individually, enabling you to build a dynamic list for use in a response. They can be used by chaining it to another tool (for example, a message responder or REST client) or as a stand-alone tool. By iterating over each item in the payload, the tool enables the aggregation of dynamic, item-specific data, such as data source lookups or calculations, within a single operation, eliminating the need for multiple separate requests. 

Manual Testing in CTP

You can now determine which tests have been impacted by code changes and need to be retested in CTP. The process for collecting code coverage from a manual test session has been streamlined. Manual Testing in CTP now requires a separate license.

AI Tools Updates

• You can now generate LLM-enabled assertions when you create test scenarios from the AI Assistant, allowing you to use your LLM integration to validate specific requirements in generated test scenarios. 

See Creating Tests with the AI Assistant for more information.

• The AI Assistant now supports multiple service definition files.
• You can now chain the AI Assertor and AI Data Bank to Browser Contents

MCP Tool Updates

• MCP Client now supports OAuth authentication and Basic authentication.
• MCP Client now supports Streamable HTTP transport.
• MCP Listener has updated the heartbeat mechanism and added the ability to disable heartbeat.

Utilization Report Updates

The Utilization Report in CTP can now be focused on folders in the VirtualAssets project in Virtualize and can now be exported to a CSV file. This is now the default focus for the Utilization Report.

The Utilization Report can now also report new metrics: Peak Hits per Second and Average Hits per Second. When viewed alongside current metrics like asset count, proxy count, hit count, and response time, you can get a better understanding of which assets are demanding the most performance.

Additional Updates

• SOAtest and Virtualize now ships with Eclipse 2025-09.

• You can now use multiple service definitions when generating test scenarios with the AI Assistant, making it easier to create comprehensive tests that span across multiple services. See Creating Tests with the AI Assistant for more information.

• You can now specify a request or response for the asynchronous socket listener and transport using hex values in a String, making it easier configure the payloads. See Asynchronous Socket Transport 1.1 and Asynchronous Socket Listener 1.1 for more information.
• CTP users with an LLM Integration license can now access Parasoft Intelligent Digital Assistance (IDA) from the Help menu in CTP. The Parasoft IDA is an LLM-powered chatbot designed to answer user's questions about Parasoft products.

• It is no longer necessary to pass a license to a coverage tool shipped with SOAtest when creating a static coverage file.

• Parasoft Search now scans environments in .tst and .pva files.
• Report now includes errors for .tst files that did not run because SOAtest couldn't open them.
• Standalone tools now resolve variables in the input tab text mode.

• Remote OS Command Injection (Time Based) rule added to supported Penetration Testing Rules.

Resolved PRs and FRs