17.3
Jazzer is a free, coverage-guided in-process fuzzer for JVM applications, based on libFuzzer.
Free planOpen sourceAPILinuxmacOS
Alternatives to cargo-fuzz
27.2
AFL++ is a free, coverage-guided fuzzer that changes program inputs and checks whether a target binary reaches previously unseen execution paths.
Free planAndroidLinuxmacOS
37.0
Mayhem brings code, API, and dynamic software bill of materials (SBOM) security into one dashboard.
Free planWebAPILinux
- 4
ClusterFuzz
ClusterFuzz is open-source infrastructure for finding security and stability problems in software through fuzzing.
Free planWebLinuxmacOSSelf-hosted6.8Free plan - 5
boofuzz
boofuzz is a free, open-source framework for fuzzing network protocols, and a fork and successor to Sulley.
Free planAPILinuxSelf-hostedWindows6.4Free plan - 6
EvoMaster
Free planAPILinuxmacOSSelf-hosted6.4Free plan - 7
EvoMaster
EvoMaster is a free, open-source tool that generates system-level tests by fuzzing web and enterprise applications.
Free planAPILinuxmacOSSelf-hosted6.4Free plan - 8
Fuzzilli
Fuzzilli is a free, open-source fuzzer for finding problems in dynamic language interpreters.
Free planLinuxmacOSSelf-hosted6.4Free plan - 9
Schemathesis
Schemathesis generates property-based tests from OpenAPI and GraphQL schemas to help engineers find API bugs.
Free planLinuxmacOSSelf-hostedWindows6.4Free plan - 10
Fuzzinator
Fuzzinator is a free, open-source framework for automating fuzzing against software under test.
Free planWebLinuxmacOSWindows6.3Free plan - 11
Onyx Launcher
Onyx Launcher is a free, open-source desktop launcher for Minecraft on Windows and Linux.
Free planLinuxWindows6.3Free plan - 12
Netzob
Netzob is a free, open-source tool for reverse engineering communication protocols, generating traffic, and fuzzing.
Free planLinuxWindows6.0Free plan - 13
OSS-Fuzz
OSS-Fuzz is a free service that runs fuzzers for open-source projects and privately notifies developers about detected bugs.
Free planWeb6.0Free plan - 14
Wfuzz
Wfuzz is a framework for automating web application security assessments and finding and exploiting vulnerabilities.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 15
Black Duck Coverity
Black Duck Coverity is a paid static analysis tool for finding security vulnerabilities and code quality defects in source code before software ships.
WebLinuxmacOSSelf-hosted5.9 - 16
Csmith
Csmith is a free, open-source generator of random C programs used to look for compiler bugs through differential testing.
Free planLinuxWindows5.9Free plan - 17
FuzzForge
FuzzForge is FuzzingLabs’ platform for fuzzing, emulation, and reverse-engineering campaigns against embedded and connected products.
WebSelf-hosted5.8 - 18
Metalware
Metalware is a binary analysis platform for locating crashes and vulnerabilities in embedded firmware.
WebAPILinuxSelf-hosted5.7 - 19
Fuzzware
Fuzzware is a Linux service for rehosting-based security testing and automated fuzzing of embedded firmware without physical hardware.
Linux5.6 - 20
Honggfuzz
Honggfuzz is free, open-source software for generating inputs that exercise programs and reveal failures.
AndroidLinuxmacOSWindows5.0 - 21
RESTler
LinuxmacOSWindows4.9 - 22
YARP
LinuxmacOSWindows4.8 - 23
syzkaller
LinuxmacOSWindows4.7 - 24
beSTORM
LinuxWindows4.6 - 254.3