Trustify load tests

Target trustify (scale snapshot, CI) · Latest run 2026-10-28 07:54 UTC

Test runs

2026-10-21 → 2026-10-28

Latest avg response

44.9 ms (+25.6)

Latest 95%ile

82 ms (+20)

Latest throughput

218.4 req/s (-288.7)

Latest failure rate

0.0%

9 of 130,963 requests

Endpoints tested

81 across all runs

Trends

Time range Endpoint

Response time

Per run, ms · click a point to open that run

Throughput

Requests per second, per run

Failure rate

Failed requests, % of all requests

Latest run vs previous

Comparing 2026-10-28T06-30-06_7f55826 with 2026-10-27T06-21-59_876219f. Flagged when 95%ile up or down by at least 10% and 5 ms.

Regressions 28

Endpoint	Prev 95%ile	Latest 95%ile	Δ ms	Δ %	Prev avg	Latest avg	Fails
GET /api/v3/purl?q=purl:namespace=redhat&total=true	260	2,700	(+2,440)	+938%	296	283	0 → 1
GET /api/v3/purl/base?q=namespace=redhat&total=true	130	470	(+340)	+262%	92.5	97.4	0 → 0
GET /api/v3/advisory?limit=1&total=true	610	2,200	(+1,590)	+261%	181	259	0 → 0
GET /api/v4/importer?total=true	27	72	(+45)	+167%	5.77	15.3	1 → 0
GET /api/v3/advisory-labels?filter_text=type&limit=1000	8,100	16,000	(+7,900)	+98%	5,327	10,236	1 → 2
GET /api/v3/analysis/status	41	75	(+34)	+83%	6.12	18.8	0 → 1
GET /api/v3/group/sbom?total=true	41	72	(+31)	+76%	6.08	13.8	0 → 1
GET /api/v3/purl?q=name=curl&total=true	160	280	(+120)	+75%	53.8	53.7	0 → 0
GET /api/v3/group/sbom?parents=resolve&total=true	46	72	(+26)	+57%	6.22	14.7	0 → 0
GET /api/v3/analysis/component/{component}	48	75	(+27)	+56%	6.47	19.7	0 → 0
GET /api/v3/group/sbom?totals=true&total=true	47	72	(+25)	+53%	6.27	14.3	0 → 0
GET /api/v3/analysis/latest/component/{cpe}	51	75	(+24)	+47%	6.65	20.2	0 → 0
GET /api/v3/vulnerability?q=base_severity=high&total=true	1,800	2,600	(+800)	+44%	335	402	0 → 0
GET /api/v3/advisory?q=CVE-2021-&total=true	2,200	2,900	(+700)	+32%	800	933	0 → 1
GET /api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true	75	94	(+19)	+25%	32.1	50.0	0 → 0
GET /api/v3/license?q=license~GPL&total=true	63	77	(+14)	+22%	18.9	30.7	0 → 0
GET /api/v3/license?limit=10&sort=license:asc&total=true	73	89	(+16)	+22%	25.8	44.1	0 → 0
GET /api/v3/license?q=ASL&sort=license:desc&total=true	67	81	(+14)	+21%	21.2	36.3	0 → 0
GET /api/v3/license?q=license~Apache&total=true	63	76	(+13)	+21%	19.2	31.5	0 → 0
GET /api/v3/purl?sort=purl:name:asc&total=true	370	440	(+70)	+19%	84.7	73.1	0 → 0
GET /api/v3/sbom/{sbom_id}/download	2,700	3,200	(+500)	+19%	2,404	3,096	0 → 0
GET /api/v3/license?total=true	110	130	(+20)	+18%	64.7	80.1	0 → 0
GET /api/v3/correlation/sbom/{sbom_id}?include_unmatched=true	8,600	10,000	(+1,400)	+16%	6,384	7,933	0 → 0
GET /api/v3/correlation/query?kind=purl	76	88	(+12)	+16%	27.8	32.9	0 → 0
POST /api/v3/purl/recommend	760	870	(+110)	+14%	294	455	0 → 0
GET /api/v3/advisory?offset={offset}&limit=1	2,100	2,400	(+300)	+14%	763	1,082	0 → 0
GET /api/v3/sbom/{sbom_id}/license-export	85	97	(+12)	+14%	37.9	54.3	0 → 0
GET /api/v3/sbom/{sbom_id}/all-license-ids	71	80	(+9)	+13%	31.8	34.2	0 → 0

Improvements 31

Endpoint	Prev 95%ile	Latest 95%ile	Δ ms	Δ %	Prev avg	Latest avg	Fails
POST /api/v3/correlation/verdict-counts	30,000	91	(-29,909)	-100%	21,562	45.2	1 → 0
GET /api/v3/purl?q=curl&total=true	1,700	280	(-1,420)	-84%	345	118	0 → 0
GET /api/v3/advisory?sort=modified:desc&total=true	570	200	(-370)	-65%	272	209	1 → 0
GET /api/v3/advisory?limit=10&sort=ingested:desc&total=true	300	110	(-190)	-63%	186	180	0 → 0
GET /api/v3/advisory?total=true	670	260	(-410)	-61%	259	212	0 → 0
GET /api/v3/sbom?offset=100&limit=10&total=true	1,700	680	(-1,020)	-60%	582	349	0 → 1
GET /api/v3/sbom?q=name~redhat&total=true	4,300	1,800	(-2,500)	-58%	1,876	1,102	0 → 0
GET /api/v3/vulnerability?q=cwes=CWE-79&total=true	3,500	1,500	(-2,000)	-57%	472	260	0 → 0
GET /api/v3/sbom?limit=10&sort=name:asc&total=true	2,000	890	(-1,110)	-56%	707	454	1 → 0
GET /api/v3/vulnerability?offset=100&limit=10&total=true	1,800	830	(-970)	-54%	220	141	0 → 0
GET /api/v3/sbom?q=published>2024-01-01&total=true	1,500	720	(-780)	-52%	512	280	0 → 0
GET /api/v3/advisory?offset=100&limit=10&total=true	390	200	(-190)	-49%	196	153	0 → 0
GET /api/v3/purl/base/{purl}	670	370	(-300)	-45%	169	127	0 → 0
GET /api/v3/sbom?sort=ingested:desc&total=true	1,800	1,000	(-800)	-44%	792	522	0 → 0
GET /api/v3/advisory?deprecated=Consider&total=true	360	210	(-150)	-42%	247	210	0 → 0
GET /api/v3/sbom/{sbom_id}/packages	750	440	(-310)	-41%	329	257	0 → 0
GET /api/v3/correlation/freshness/sbom?offset=0&limit=10&total=true	1,800	1,100	(-700)	-39%	1,141	783	0 → 0
GET /api/v3/correlation/sbom/{sbom_id}	15,000	9,200	(-5,800)	-39%	6,810	6,634	0 → 1
GET /api/v3/sbom/{sbom_id}/related	570	350	(-220)	-39%	257	197	0 → 0
GET /api/v3/purl/base?sort=name:asc&total=true	190	120	(-70)	-37%	75.8	70.6	0 → 0
GET /api/v3/sbom?total=true	1,100	710	(-390)	-35%	393	291	0 → 0
GET /api/v3/purl?offset=100&limit=10&total=true	170	120	(-50)	-29%	77.9	92.6	0 → 0
GET /api/v3/sbom/by-package?purl={purl}	330	240	(-90)	-27%	132	140	0 → 0
POST /api/v3/vulnerability/analyze	12,000	8,800	(-3,200)	-27%	3,797	3,908	0 → 1
GET /api/v3/purl?total=true	110	83	(-27)	-25%	60.7	56.3	0 → 0
GET /api/v3/advisory?q=title~openssl&total=true	530	400	(-130)	-25%	162	122	0 → 0
GET /api/v3/sbom/{sbom_id}	330	250	(-80)	-24%	161	172	0 → 0
GET /api/v3/vulnerability?sort=base_score:desc&total=true	4,900	3,900	(-1,000)	-20%	2,661	1,906	0 → 0
GET /api/v3/correlation/freshness	1,600	1,300	(-300)	-19%	996	756	0 → 0
GET /api/v3/purl/base?total=true	140	120	(-20)	-14%	73.6	69.5	0 → 0
GET /api/v3/correlation/confidence	100	86	(-14)	-14%	59.4	49.1	0 → 0

Top 10 slowest endpoints (latest run)

#	Method	Name	95%ile (ms)	Average (ms)	# Requests
1	GET	/api/v3/advisory-labels?filter_text=type&limit=1000	16,000	10,236	51
2	GET	/api/v3/correlation/sbom/{sbom_id}?include_unmatched=true	10,000	7,933	32
3	GET	/api/v3/correlation/sbom/{sbom_id}	9,200	6,634	47
4	POST	/api/v3/vulnerability/analyze	8,800	3,908	113
5	GET	/api/v3/vulnerability?sort=base_score:desc&total=true	3,900	1,906	48
6	GET	/api/v3/sbom/{sbom_id}/download	3,200	3,096	79
7	GET	/api/v3/advisory?q=CVE-2021-&total=true	2,900	933	260
8	GET	/api/v3/purl?q=purl:namespace=redhat&total=true	2,700	283	196
9	GET	/api/v3/vulnerability?q=base_severity=high&total=true	2,600	402	48
10	GET	/api/v3/advisory?offset={offset}&limit=1	2,400	1,082	55

All endpoints

Filter

Group	Endpoint	Runs	Latest 95%ile	Median 95%ile	Best	Worst	Latest avg	Latest fail %
sbom	GET /api/v3/sbom/by-package?purl={purl}	26	240	165	120	330	140	0%
sbom	GET /api/v3/sbom/count-by-package	26	90	80	70	91	54.7	0%
sbom	GET /api/v3/sbom/{sbom_id}	26	250	220	140	340	172	0%
sbom	GET /api/v3/sbom/{sbom_id}/all-license-ids	26	80	73	59	80	34.2	0%
sbom	GET /api/v3/sbom/{sbom_id}/download	26	3,200	3,200	2,000	3,400	3,096	0%
sbom	GET /api/v3/sbom/{sbom_id}/license-export	26	97	80	72	97	54.3	0%
sbom	GET /api/v3/sbom/{sbom_id}/packages	26	440	320	240	750	257	0%
sbom	GET /api/v3/sbom/{sbom_id}/related	26	350	290	180	570	197	0%
sbom	GET /api/v3/sbom?limit=10&sort=name:asc&total=true	27	890	670	12	2,000	454	0%
sbom	GET /api/v3/sbom?offset=100&limit=10&total=true	27	680	490	8	1,700	349	1%
sbom	GET /api/v3/sbom?q=label:type=product&total=true	27	79	73	7	92	29.5	0%
sbom	GET /api/v3/sbom?q=license~GPL&sort=name:desc&total=true	27	82	75	14	82	32.2	0%
sbom	GET /api/v3/sbom?q=name~redhat&total=true	27	1,800	1,300	7	4,300	1,102	0%
sbom	GET /api/v3/sbom?q=published>2024-01-01&total=true	27	720	520	7	1,500	280	0%
sbom	GET /api/v3/sbom?sort=ingested:desc&total=true	27	1,000	700	12	1,800	522	0%
sbom	GET /api/v3/sbom?total=true	27	710	440	12	1,100	291	0%
advisory	GET /api/v3/advisory/urn:uuid:{advisory_id}	26	120	110	100	120	69.8	0%
advisory	GET /api/v3/advisory/urn:uuid:{advisory_id}/download	26	88	78	67	95	39.3	0%
advisory	GET /api/v3/advisory?deprecated=Consider&total=true	27	210	110	10	360	210	0%
advisory	GET /api/v3/advisory?limit=1&total=true	27	2,200	110	50	2,200	259	0%
advisory	GET /api/v3/advisory?limit=10&sort=ingested:desc&total=true	27	110	84	9	300	180	0%
advisory	GET /api/v3/advisory?offset=100&limit=10&total=true	27	200	100	6	390	153	0%
advisory	GET /api/v3/advisory?offset={offset}&limit=1	27	2,400	580	51	2,400	1,082	0%
advisory	GET /api/v3/advisory?q=CVE-2021-&total=true	27	2,900	1,800	7	3,300	933	0%
advisory	GET /api/v3/advisory?q=identifier=CVE-2022-0981&total=true	27	120	110	6	130	77.7	0%
advisory	GET /api/v3/advisory?q=modified>3 days ago&total=true	27	75	72	7	79	29.4	0%
advisory	GET /api/v3/advisory?q=title~openssl&total=true	27	400	110	7	1,200	122	0%
advisory	GET /api/v3/advisory?sort=modified:desc&total=true	27	200	100	10	570	209	0%
advisory	GET /api/v3/advisory?total=true	27	260	190	10	670	212	0%
vulnerability	GET /api/v3/vulnerability?offset=100&limit=10&total=true	27	830	110	6	1,800	141	0%
vulnerability	GET /api/v3/vulnerability?q=base_score>=7.0&total=true	27	2,100	100	7	2,400	267	0%
vulnerability	GET /api/v3/vulnerability?q=base_severity=high&total=true	27	2,600	170	7	2,600	402	0%
vulnerability	GET /api/v3/vulnerability?q=cwes=CWE-79&total=true	27	1,500	170	6	3,500	260	0%
vulnerability	GET /api/v3/vulnerability?sort=base_score:desc&total=true	27	3,900	1,500	9	4,900	1,906	0%
vulnerability	GET /api/v3/vulnerability?total=true	27	890	75	9	890	85.3	0%
vulnerability	POST /api/v3/vulnerability/analyze	27	8,800	3,700	7	12,000	3,908	1%
purl	GET /api/v3/purl/base/{purl}	26	370	275	210	670	127	0%
purl	GET /api/v3/purl/base?q=namespace=redhat&total=true	27	470	140	49	470	97.4	0%
purl	GET /api/v3/purl/base?q=type=rpm&total=true	27	120	100	49	120	68.0	0%
purl	GET /api/v3/purl/base?sort=name:asc&total=true	27	120	330	50	370	70.6	0%
purl	GET /api/v3/purl/base?total=true	27	120	110	49	140	69.5	0%
purl	GET /api/v3/purl/{purl_id}	26	520	180	110	520	182	0%
purl	GET /api/v3/purl?offset=100&limit=10&total=true	27	120	110	49	3,600	92.6	0%
purl	GET /api/v3/purl?q=curl&total=true	27	280	900	71	1,700	118	0%
purl	GET /api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true	27	94	73	36	94	50.0	0%
purl	GET /api/v3/purl?q=name=curl&total=true	27	280	95	49	280	53.7	0%
purl	GET /api/v3/purl?q=purl:namespace=redhat&total=true	27	2,700	2,500	9	3,300	283	1%
purl	GET /api/v3/purl?q=purl:ty=rpm&total=true	27	150	2,400	9	3,200	243	0%
purl	GET /api/v3/purl?sort=purl:name:asc&total=true	27	440	450	8	4,500	73.1	0%
purl	GET /api/v3/purl?total=true	27	83	73	8	1,300	56.3	0%
purl	POST /api/v3/purl/recommend	26	870	1,450	690	1,500	455	0%
license	GET /api/v3/license/spdx/license/{license_id}	26	45	45	44	46	41.0	0%
license	GET /api/v3/license/spdx/license?q=apache&total=true	27	5	6	3	6	2.56	0%
license	GET /api/v3/license/spdx/license?q=gpl&total=true	27	45	46	44	48	41.9	0%
license	GET /api/v3/license/spdx/license?total=true	27	45	45	44	48	40.8	0%
license	GET /api/v3/license?limit=10&sort=license:asc&total=true	27	89	81	12	90	44.1	0%
license	GET /api/v3/license?q=ASL&sort=license:desc&total=true	27	81	76	11	85	36.3	0%
license	GET /api/v3/license?q=license~Apache&total=true	27	76	72	10	80	31.5	0%
license	GET /api/v3/license?q=license~GPL&total=true	27	77	71	51	80	30.7	0%
license	GET /api/v3/license?total=true	27	130	120	53	130	80.1	0%
analysis	GET /api/v3/analysis/component/{component}	26	75	69	48	75	19.7	0%
analysis	GET /api/v3/analysis/latest/component/{cpe}	27	75	69	7	75	20.2	0%
analysis	GET /api/v3/analysis/status	27	75	69	6	75	18.8	0%
importer	GET /api/v3/importer?total=true	24	–	66	6	67	–	–
importer	GET /api/v4/importer?total=true	3	72	71	27	72	15.3	0%
group	GET /api/v3/group/sbom?parents=resolve&total=true	27	72	69	6	74	14.7	0%
group	GET /api/v3/group/sbom?total=true	27	72	68	6	73	13.8	0%
group	GET /api/v3/group/sbom?totals=true&total=true	27	72	68	6	74	14.3	0%
labels	GET /api/v3/advisory-labels?filter_text=type&limit=1000	27	16,000	6,700	8	16,000	10,236	4%
labels	GET /api/v3/sbom-labels?limit=10&filter_text=&total=true	27	130	120	7	130	81.5	0%
labels	GET /api/v3/sbom-labels?total=true	27	130	120	6	130	80.6	0%
other	GET /.well-known/trustify	24	–	45	44	48	–	–
other	GET /api/v3/correlation/advisory/{advisory_id}/statement	3	82	79	60	82	37.5	0%
other	GET /api/v3/correlation/confidence	3	86	100	86	140	49.1	0%
other	GET /api/v3/correlation/freshness	3	1,300	1,300	1,300	1,600	756	0%
other	GET /api/v3/correlation/freshness/sbom?offset=0&limit=10&total=true	3	1,100	1,300	1,100	1,800	783	0%
other	GET /api/v3/correlation/query?kind=purl	3	88	81	76	88	32.9	0%
other	GET /api/v3/correlation/sbom/{sbom_id}	3	9,200	9,200	8,400	15,000	6,634	2%
other	GET /api/v3/correlation/sbom/{sbom_id}?include_unmatched=true	3	10,000	10,000	8,600	13,000	7,933	0%
other	POST /api/v3/correlation/verdict-counts	3	91	23,000	91	30,000	45.2	0%
other	POST /api/v3/ui/extract-sbom-purls	24	–	6	3	7	–	–

Runs

Started (UTC)	Run	Source	Duration	Users	# Requests	Fail %	RPS	Average (ms)	95%ile	99%ile
2026-10-28 07:54	2026-10-28T06-30-06_7f55826	Workflow run	9m 59s	10	130,963	0.0%	218.4 (-288.7)	44.9 (+25.6)	82 (+20)	440 (+320)
2026-10-27 08:01	2026-10-27T06-21-59_876219f	Workflow run	10m 00s	10	304,219	0.0%	507.1 (+290.5)	19.3 (-26.0)	62 (-18)	120 (-280)
2026-10-26 19:37	2026-10-26T18-09-45_6f08455	Workflow run	10m 00s	10	129,943	0.0%	216.6 (-367.0)	45.2 (+28.5)	80 (+19)	400 (+300)
2026-10-26 07:01	2026-10-26T06-20-43_a71a630	Workflow run	9m 58s	10	349,733	0.0%	583.6 (+48.9)	16.7 (-1.5)	61 (-3)	100 (-10)
2026-10-25 07:45	2026-10-25T06-59-22_a71a630	Workflow run	9m 58s	10	320,223	0.0%	534.6 (+37.1)	18.2 (-1.4)	64 (-1)	110 (-20)
2026-10-25 04:39	2026-10-25T03-52-01_a71a630	Workflow run	9m 57s	10	297,943	0.0%	497.5 (+39.9)	19.6 (-1.7)	65 (-2)	130 (-20)
2026-10-24 17:47	2026-10-24T17-00-53_a71a630	Workflow run	9m 58s	10	274,084	0.0%	457.6 (+130.1)	21.3 (-8.4)	67 (-5)	150 (-50)
2026-10-24 07:14	2026-10-24T06-24-07_9e14445	Workflow run	9m 58s	10	196,159	0.0%	327.5 (-6.1)	29.7 (+0.5)	72 (+1)	200 (+10)
2026-10-23 10:23	2026-10-23T09-33-25_38d6fa4	Workflow run	19m 57s	10	399,877	0.0%	333.6 (-3.3)	29.2 (+0.4)	71 (0)	190 (-10)
2026-10-23 07:31	2026-10-23T06-42-12_38d6fa4	Workflow run	9m 58s	10	201,857	0.0%	336.9 (+17.8)	28.9 (-1.7)	71 (-1)	200 (-60)
2026-10-23 04:14	2026-10-23T03-24-39_38d6fa4	Workflow run	9m 58s	10	191,090	0.0%	319.1 (+5.8)	30.5 (-0.6)	72 (-1)	260 (-20)
2026-10-23 01:36	2026-10-23T00-47-09_38d6fa4	Workflow run	9m 58s	10	187,649	0.0%	313.3 (-14.3)	31.1 (+1.4)	73 (+1)	280 (+70)
2026-10-22 22:07	2026-10-22T21-17-29_38d6fa4	Workflow run	9m 58s	10	196,251	0.0%	327.6 (+1.2)	29.7 (-0.1)	72 (0)	210 (+10)
2026-10-22 19:12	2026-10-22T18-22-03_38d6fa4	Workflow run	9m 58s	10	195,520	0.0%	326.3 (+6.0)	29.8 (-0.5)	72 (0)	200 (0)
2026-10-22 13:44	2026-10-22T12-52-49_7f38deb	Workflow run	9m 58s	10	191,872	0.0%	320.4 (-5.3)	30.4 (+0.5)	72 (0)	200 (+10)
2026-10-22 10:10	2026-10-22T09-20-25_7f38deb	Workflow run	9m 58s	10	195,113	0.0%	325.7 (+8.0)	29.9 (-0.7)	72 (0)	190 (-10)
2026-10-22 07:20	2026-10-22T06-30-29_7f38deb	Workflow run	9m 58s	10	190,341	0.0%	317.6 (-30.0)	30.6 (+2.7)	72 (+2)	200 (+20)
2026-10-22 04:12	2026-10-22T03-22-00_7f38deb	Workflow run	9m 58s	10	208,238	0.0%	347.7 (+13.7)	28.0 (-1.2)	70 (-1)	180 (-10)
2026-10-22 01:35	2026-10-22T00-45-42_7f38deb	Workflow run	9m 58s	10	200,085	0.0%	334.0 (+13.9)	29.1 (-1.3)	71 (-1)	190 (-10)
2026-10-21 22:07	2026-10-21T21-16-40_7f38deb	Workflow run	9m 58s	10	191,719	0.0%	320.0 (+1.5)	30.4 (-0.1)	72 (0)	200 (0)
2026-10-21 19:13	2026-10-21T18-22-42_7f38deb	Workflow run	9m 58s	10	190,782	0.0%	318.5 (-14.8)	30.6 (+1.3)	72 (0)	200 (0)
2026-10-21 17:30	2026-10-21T16-39-32_7f38deb	Workflow run	9m 58s	10	199,729	0.0%	333.3 (+5.4)	29.2 (-0.4)	72 (0)	200 (0)
2026-10-21 16:09	2026-10-21T15-18-38_7f38deb	Workflow run	9m 58s	10	196,557	0.0%	328.0 (+3.3)	29.7 (-0.3)	72 (0)	200 (+10)
2026-10-21 13:54	2026-10-21T13-03-53_1cdcbcd	Workflow run	9m 59s	10	194,540	0.0%	324.7 (+3.3)	29.9 (-0.4)	72 (0)	190 (-10)
2026-10-21 12:49	2026-10-21T11-58-52_1cdcbcd	Workflow run	9m 58s	10	192,569	0.0%	321.4 (-753.6)	30.3 (+22.4)	72 (+27)	200 (+151)
2026-10-21 11:36	2026-10-21T11-24-39_1cdcbcd	Workflow run	9m 58s	10	644,661	0.0%	1,075.0 (+747.8)	7.89 (-21.9)	45 (-27)	49 (-181)
2026-10-21 04:52	2026-10-21T04-03-31_1bc76b8	Workflow run	10m 00s	10	196,151	0.0%	327.2	29.8	72	230