FuzzForge

Spec sheet

What it does

FuzzForge runs fuzzing, emulation and reverse engineering campaigns for embedded and connected products.Read 5 Oct 2026 · fuzzinglabs.com

Purpose

FuzzForge runs fuzzing, emulation and reverse engineering campaigns for embedded and connected product security testing.Read 7 Oct 2026 · fuzzinglabs.com

Audience

The page identifies product security teams and PSIRTs as its audience, including embedded product vendors, OEMs, government and defense teams, and security service firms.Read 7 Oct 2026 · fuzzinglabs.com

Deployment

Deployment options include hosted SaaS, a dedicated instance in the customer’s cloud tenancy, Kubernetes on-premise, and air-gapped deployment.Read 7 Oct 2026 · fuzzinglabs.com

Integrations

FuzzingLabs describes workflows that combine tools such as Semgrep, CodeQL, AFL, LibFuzzer, Ghidra, angr and QEMU.Read 7 Oct 2026 · fuzzinglabs.com

Support

The product page offers a demo request and describes campaign findings as work engineers can pick up and verify.Read 7 Oct 2026 · fuzzinglabs.com

Headquarters

Near ParisRead 28 Sep 2026 · fuzzforge.ai

Founded

2021Read 28 Sep 2026 · fuzzforge.ai

Maker

FuzzingLabs describes FuzzForge as its flagship AI agent orchestration platform for continuous offensive validation on firmware, binaries and embedded systems.Read 7 Oct 2026 · fuzzinglabs.com

Air-gapped limit

Air-gapped deployment uses local open-weight models only, has no router or network egress, and is priced above the standard on-premise licence.Read 7 Oct 2026 · fuzzinglabs.com

Air-gapped limits

Air-gapped deployment uses local open-weight models, has no network egress, and is priced above the standard on-premise licence.Read 5 Oct 2026 · fuzzinglabs.com

Audit logs

The platform logs every model request and reasoning chain for auditing.Read 7 Oct 2026 · fuzzinglabs.com

Automation

Specialized agents drive campaigns, while engineers can take over using industry tools they already know.Read 5 Oct 2026 · fuzzinglabs.com

Campaign results

Campaigns produce triaged crashes with replayable test cases and validated findings; the platform can also build an SBOM from a binary.Read 7 Oct 2026 · fuzzinglabs.com

Data ownership

Customers keep campaign test cases, reports, configurations and their knowledge graph; FuzzingLabs keeps the platform itself.Read 7 Oct 2026 · fuzzinglabs.com

Human oversight

Agents drive campaigns, while engineers can take over using industry tools they already know.Read 7 Oct 2026 · fuzzinglabs.com

Input targets

It accepts binaries, full firmware images or source code and can map targets and build an SBOM.Read 7 Oct 2026 · fuzzinglabs.com

Licensing unit

For public sector procurement, the maker describes an annual licence per instance, with tiers based on target count and no per-seat or per-test billing.Read 5 Oct 2026 · fuzzinglabs.com

No source required

FuzzForge works on binaries and firmware images without source code and writes the fuzzing harness itself.Read 7 Oct 2026 · fuzzinglabs.com

Not a source-code scanner

The maker says FuzzForge does not replace researchers and is not a source-code scanner.Read 5 Oct 2026 · fuzzinglabs.com

Operations

The execution layer schedules campaigns on available compute, and campaigns can run overnight or for days.Read 7 Oct 2026 · fuzzinglabs.com

Scope limit

FuzzForge does not replace security researchers and is not a source-code scanner.Read 7 Oct 2026 · fuzzinglabs.com

Targets

It can test binaries, firmware images and source code, including third-party components supplied without source code.Read 5 Oct 2026 · fuzzinglabs.com

Who it is for

The maker lists embedded product vendors, OEMs, government and defense, MSSPs, integrators, consulting and audit firms, and certification bodies as intended users.Read 5 Oct 2026 · fuzzinglabs.com

Where Specifiction places it

• Fuzz Testing Software#14 of 267.5