Best Fuzz Testing Software in 2026
Updated
Testing with fuzzing means exercising software with inputs that can expose behavior outside expected cases. Compared on input generation methods, supported languages, and target types, these entries offer ways to assess technical fit. Execution mode, coverage guidance, and crash triage are also worth checking against your testing process; CI/CD support matters if integration is a concern. Free-plan availability and paid-from pricing provide further comparison points. Mayhem, boofuzz, and cargo-fuzz are among the software represented. Use the listed criteria to focus on targets, languages, and workflow support relevant to the code you need to test.
27ranked
19free plans on this page
$236/molowest paid tier
9 Oct 2026last checked
Fuzz Testing Software, one module each.A lit port is something its maker publishes; 5 of 5 with a known API signal have a public API.
- 01 boofuzz API yesFREE yesDOCS 7.4Free
- 02 Mayhem API yesFREE yesDOCS 7.3$236/mo
- 03 EvoMaster API yesFREE yesDOCS 7.2Free
- 04 EvoMaster API yesFREE yesDOCS 7.2Free
- 05 Metalware API yesDOCS 6.9
- 06 cargo-fuzz FREE yesDOCS 6.0Free
- 07 ClusterFuzz FREE yesDOCS 6.0Free
- 08 Fuzzilli FREE yesDOCS 6.0Free
- 09 Accessibility Test Framework for Android FREE yesDOCS 5.9Free
- 10 AFL++ FREE yesDOCS 5.9€1666.67/mo
- 11 Csmith FREE yesDOCS 5.9Free
- 12 Jazzer FREE yesDOCS 5.9Free
- 13 Netzob FREE yesDOCS 5.9Free
- 14 Onyx Launcher FREE yesDOCS 5.9Free
- 15 OSS-Fuzz FREE yesDOCS 5.9Free
- 16 Scout Suite FREE yesDOCS 5.9Free
- 17 Fuzzinator FREE yesDOCS 5.8Free
- 18 Roslynator FREE yesDOCS 5.8Free
- 19 Schemathesis FREE yesDOCS 5.8Free
- 20 Wfuzz FREE yesDOCS 5.8Free
- 21 FuzzForge DOCS 5.6
- 22 Fuzzware DOCS 5.6
- 23 Black Duck Coverity DOCS 5.4
- 24 Fortra ZTNA DOCS 5.4
- 25 Honggfuzz DOCS 5.2
Compare all 25 in a table
| # | Platform | Score | Free plan | From | Free plan | Paid from | Input generation methods | Target types |
|---|---|---|---|---|---|---|---|---|
| 1 | boofuzz | 7.4 | Free plan | Free | Yes | hybrid | network protocols, serial, Ethernet/IP, UDP broadcast, TCP, UDP, SSL, raw sockets | |
| 2 | Mayhem | 7.3 | Free plan | $236/mo | hybrid | Linux binaries; Windows PE binaries; TCP/UDP applications; REST APIs; gRPC APIs; containers; automotive vECUs | ||
| 3 | EvoMaster | 7.2 | Free plan | Free | Yes | |||
| 4 | EvoMaster | 7.2 | Free plan | Free | Yes | |||
| 5 | Metalware | 6.9 | generation and mutation, with symbolic input generation | ELF and raw .bin firmware; ARM Cortex-M, embedded peripherals, DMA, RTOS, and bare metal targets | ||||
| 6 | cargo-fuzz | 6.0 | Free plan | Free | mutation, generation, hybrid | raw byte buffers, structured Rust data, libraries, APIs, compiler code, allocator operations | ||
| 7 | ClusterFuzz | 6.0 | Free plan | Free | mutation, generation, hybrid | binary formats, HTML, JavaScript, browser DOM, native programs | ||
| 8 | Fuzzilli | 6.0 | Free plan | Free | mutation, generation, hybrid | JavaScript programs and JavaScript engines/interpreters | ||
| 9 | Accessibility Test Framework for Android | 5.9 | Free plan | Free | generation, mutation | operating-system kernels and syscall interfaces: FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, Windows | ||
| 10 | AFL++ | 5.9 | Free plan | €1666.67/mo | Yes | mutation | source-code targets, binary-only targets, file inputs, stdin inputs, Android native libraries, Win32 PE binaries | |
| 11 | Csmith | 5.9 | Free plan | Free | Yes | generation | C programs; C++ programs; compilers | |
| 12 | Jazzer | 5.9 | Free plan | Free | Yes | mutation, generation | JVM applications, Java, Kotlin, Scala, Clojure, JNI/native libraries | |
| 13 | Netzob | 5.9 | Free plan | Free | Yes | mutation, generation | network protocols, structured files, text protocols, delimiter-based protocols, fixed-field protocols, variable-length/TLV protocols, IPC, drivers and devices | |
| 14 | Onyx Launcher | 5.9 | Free plan | Free | Yes | |||
| 15 | OSS-Fuzz | 5.9 | Free plan | Free | Yes | mutation | source-code fuzz targets; untrusted user or network inputs; complex input formats | |
| 16 | Scout Suite | 5.9 | Free plan | Free | Yes | mutation | Network protocols and services including TCP, UDP, SSL, IPP, LPD, BACnet, Modbus, DHCP, TFTP, Telnet CLI, Netconf, COPS, and raw requests | |
| 17 | Fuzzinator | 5.8 | Free plan | Free | generation, mutation | stdin, command-line, files, HTTP/browser | ||
| 18 | Roslynator | 5.8 | Free plan | Free | ||||
| 19 | Schemathesis | 5.8 | Free plan | Free | Yes | |||
| 20 | Wfuzz | 5.8 | Free plan | Free | Yes | generation | HTTP URLs, paths, files, query parameters, POST data, cookies, headers, HTTP verbs, authentication | |
| 21 | FuzzForge | 5.6 | Yes | generation | codebases, binaries, containers, APIs, GraphQL, protocols, firmware, embedded systems | |||
| 22 | Fuzzware | 5.6 | mutation | ARM Cortex-M firmware; Infineon AURIX TriCore firmware; MMIO and interrupt-driven embedded systems | ||||
| 23 | Black Duck Coverity | 5.4 | No | |||||
| 24 | Fortra ZTNA | 5.4 | generation | network protocols, file formats, hardware, DLLs, APIs, binary applications | ||||
| 25 | Honggfuzz | 5.2 | mutation | file inputs, standard input, APIs, binaries, network servers |
Is your platform on this list?
Numbered spots on this list can be sponsored, and a sponsored row is labelled as paid.
More in Developer Tools
All developer tools listsAccessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93Reverse Engineering Tools 73Software Composition Analysis Software 66Artifact repository software 65Browser Automation Tools 63Integrated Development Environments 63Code Playground Software 58Continuous Integration Software 57Container Registries 56