Jazzer is a free, coverage-guided in-process fuzzer for JVM applications, based on libFuzzer.
Alternatives to ClusterFuzz
ClusterFuzz is a free, open-source fuzzing infrastructure for finding security and stability issues. It supports coverage-guided fuzzing with libFuzzer, AFL++, and Honggfuzz, as well as blackbox fuzzing. Its workflow can deduplicate crashes, minimize testcases, bisect revisions to find regressions, and automate bug handling. It can scale to clusters of any size, and its web interface includes pages for testcases, statistics, jobs, uploads, and configuration. ClusterFuzz may…
AFL++ is a free, coverage-guided fuzzer that changes program inputs and checks whether a target binary reaches previously unseen execution paths.
Mayhem brings code, API, and dynamic software bill of materials (SBOM) security into one dashboard.
- 4
cargo-fuzz
cargo-fuzz is a free, open-source Cargo subcommand for fuzzing Rust code with libFuzzer.
Free planLinuxmacOSWindows6.7Free plan - 5
boofuzz
boofuzz is a free, open-source framework for fuzzing network protocols, and a fork and successor to Sulley.
Free planAPILinuxSelf-hostedWindows6.4Free plan - 6
EvoMaster
Free planAPILinuxmacOSSelf-hosted6.4Free plan - 7
EvoMaster
EvoMaster is a free, open-source tool that generates system-level tests by fuzzing web and enterprise applications.
Free planAPILinuxmacOSSelf-hosted6.4Free plan - 8
Fuzzilli
Fuzzilli is a free, open-source fuzzer for finding problems in dynamic language interpreters.
Free planLinuxmacOSSelf-hosted6.4Free plan - 9
Schemathesis
Schemathesis generates property-based tests from OpenAPI and GraphQL schemas to help engineers find API bugs.
Free planLinuxmacOSSelf-hostedWindows6.4Free plan - 10
Fuzzinator
Fuzzinator is a free, open-source framework for automating fuzzing against software under test.
Free planWebLinuxmacOSWindows6.3Free plan - 11
Onyx Launcher
Onyx Launcher is a free, open-source desktop launcher for Minecraft on Windows and Linux.
Free planLinuxWindows6.3Free plan - 12
Netzob
Netzob is a free, open-source tool for reverse engineering communication protocols, generating traffic, and fuzzing.
Free planLinuxWindows6.0Free plan - 13

OSS-Fuzz
OSS-Fuzz is a free service that runs fuzzers for open-source projects and privately notifies developers about detected bugs.
Free planWeb6.0Free plan - 14
Wfuzz
Wfuzz is a framework for automating web application security assessments and finding and exploiting vulnerabilities.
Free planLinuxmacOSSelf-hostedWindows6.0Free plan - 15

Black Duck Coverity
Black Duck Coverity is a paid static analysis tool for finding security vulnerabilities and code quality defects in source code before software ships.
WebLinuxmacOSSelf-hosted5.9 - 16
Csmith
Csmith is a free, open-source generator of random C programs used to look for compiler bugs through differential testing.
Free planLinuxWindows5.9Free plan - 17

FuzzForge
FuzzForge is FuzzingLabs’ platform for fuzzing, emulation, and reverse-engineering campaigns against embedded and connected products.
WebSelf-hosted5.8 - 18
Metalware
Metalware is a binary analysis platform for locating crashes and vulnerabilities in embedded firmware.
WebAPILinuxSelf-hosted5.7 - 19
Fuzzware
Fuzzware is a Linux service for rehosting-based security testing and automated fuzzing of embedded firmware without physical hardware.
Linux5.6 - 20
Honggfuzz
Honggfuzz is free, open-source software for generating inputs that exercise programs and reveal failures.
AndroidLinuxmacOSWindows5.0 - 21
RESTler
LinuxmacOSWindows4.9 - 22
YARP
LinuxmacOSWindows4.8 - 23
syzkaller
LinuxmacOSWindows4.7 - 24
beSTORM
LinuxWindows4.6 - 254.3
