Tumult
Tumult is a Rust-native platform for authoring, approving, running and analyzing resilience experiments.
What Tumult is
Tumult is a Rust-native platform for authoring, approving, running and analyzing resilience experiments. Experiments can be created in the web UI or written in TOON and run from the CLI. Its 16 plugins provide 91 chaos actions across databases, Kafka, containers, Kubernetes, SSH, and CPU, memory and I/O stress. Runs use T0–T3 risk tiers, with approval gates that can require a quorum, expire by TTL and pin experiment content hashes. Tumult records actions in a hash-chained audit trail and provides a two-step emergency stop and a stop-all kill switch. Its daemon ingests OpenTelemetry traces, metrics and logs into Kronika, an embedded DuckDB store with SQL queries and Parquet export. Telemetry can be sent to Jaeger, SigNoz or an OTLP backend. Tumult maps experiments to several compliance frameworks; R2 evidence packs are available for DORA, NIS2, ISO 27001 and SOC 2, while other listed frameworks are mapping-only. Compatible agents can use 40 MCP tools over stdio or Streamable HTTP. It is self-hosted, open source under Apache-2.0, and distributed as a static binary or Docker image.
Good
- Provides 91 chaos actions across 16 plugins.
- Offers risk-tiered approvals and a hash-chained audit trail.
- Includes emergency stop and stop-all controls.
- Analytics supports SQL queries and Parquet export.
Watch out
- Experiment scheduling is not supported.
- Script plugins can execute arbitrary commands if malicious.
- The stated assessment reports five Low or Medium dependency advisories.
Who it suits
Tumult suits teams running resilience experiments who need approval gates, audit records and telemetry analysis. It is self-hosted, so users should be prepared to deploy it in their own environment.
Verdict
Tumult combines fault injection, approval controls and telemetry analysis in a self-hosted platform. Its security assessment notes dependency advisories, and the documented trust in plugin scripts is important when registering plugins.
The facts
Each one read from Tumult's own pages, with the date it was checked.
What it does
- Agent integration
- The MCP server exposes 40 tools over stdio or Streamable HTTP for compatible agents to discover plugins, run experiments, query analytics, and recommend tests.checked 8 Oct 2001
- Analytics
- The daemon ingests OpenTelemetry traces, metrics, and logs into an embedded DuckDB store called Kronika, which supports SQL queries and Parquet export.checked 8 Oct 2001
- Audit and stop controls
- Tumult provides a two-step emergency stop, a stop-all kill switch, and a hash-chained audit trail.checked 8 Oct 2001
- Compliance reporting
- Tumult maps experiments to DORA, NIS2, PCI-DSS 4.0, ISO 22301, ISO 27001, SOC 2, and Basel III; its R2 evidence pack is available for DORA, NIS2, ISO 27001, and SOC 2, while the other listed frameworks are mapping-only.checked 8 Oct 2001
- Deployment
- Tumult is distributed as a static binary and as prebuilt Docker images on GHCR; the site says the binary needs no Python or runtime dependencies.checked 8 Oct 2001
- Emergency stops
- Tumult provides a two-step emergency stop and a stop-all kill switch to halt runs.checked 8 Oct 2001
- Experiment authoring
- Experiments can be created in the web UI or written in TOON and run from the CLI.checked 8 Oct 2001
- Fault actions
- The homepage describes 16 plugins and 91 chaos actions across databases, Kafka, containers, Kubernetes, SSH, and CPU, memory, and I/O stress.checked 8 Oct 2001
- Fault injection
- The site lists 16 plugins and 91 chaos actions covering technologies including Kubernetes, Docker, PostgreSQL, MySQL, Redis, Kafka, SSH, and CPU, memory, and I/O stress.checked 8 Oct 2001
- Install options
- The homepage provides a shell installer and a Docker image, and describes Tumult as a static binary with no runtime dependencies.checked 8 Oct 2001
- License
- Tumult is open source under the Apache-2.0 license.checked 8 Oct 2001
- License and pricing
- The site describes Tumult as open source under the Apache-2.0 license; the opened maker pages did not state a price or trial offer.checked 8 Oct 2001
- MCP integration
- Tumult provides 40 Model Context Protocol tools over stdio or Streamable HTTP for compatible agents to discover plugins, run experiments, query analytics, and make recommendations.checked 8 Oct 2001
- Observability integrations
- Tumult exports telemetry using OpenTelemetry; the homepage names Jaeger, SigNoz, and any OTLP backend as destinations.checked 8 Oct 2001
- Plugin security boundary
- The security assessment says script plugins execute shell scripts and that Tumult trusts plugin script content, so a malicious registered plugin can execute arbitrary commands.checked 8 Oct 2001
- Purpose
- Tumult is a Rust-native chaos engineering platform for defining, running, and analyzing experiments that test how systems behave under failure conditions.checked 8 Oct 2001
- Security
- The production deployment guide says HTTP exposure beyond loopback requires authentication and documents TLS configuration for the analytics daemon's HTTP and gRPC listeners.checked 8 Oct 2001
- Security assessment
- Tumult's security assessment dated 2026-06-08 reports zero known HIGH or CRITICAL vulnerabilities and five transitive dependency advisories, all rated Low or Medium.checked 8 Oct 2001
Where it runs
- Approval controls
- Runs use risk tiers T0–T3, with gated approvals that can require a quorum, expire by TTL, and pin the experiment content hash.checked 8 Oct 2001
- Approvals and audit
- Runs use risk tiers T0–T3, with gated approvals supporting quorum, time-to-live limits, content-hash pinning, and separation of duties; actions enter a hash-chained audit trail.checked 8 Oct 2001
- Platforms
- The site lists prebuilt binaries for macOS and Linux, and documents native Windows fault support through the tumult-windows plugin.checked 8 Oct 2001
- Supported binary platforms
- The homepage lists prebuilt binaries for macOS x86_64 and aarch64, and Linux x86_64 gnu/musl and aarch64 musl.checked 8 Oct 2001
Alternatives to Tumult
- 1
FaultMesh
Free planWebAPISelf-hosted7.2From $49 a month - 2
Gremlin
WebAPILinuxSelf-hosted7.2From $3,750 a month - 3
Reliably
Free planWebLinuxmacOSSelf-hosted7.1From £40 a month - 4
Krkn
Free planWebAPILinuxSelf-hosted6.7Free plan - 5
Chaos Mesh
Free planWebAPISelf-hosted6.5Free plan - 6
Toxiproxy
Free planAPILinuxmacOSSelf-hosted6.5Free plan