Fuzz Testing Software
Alternatives to Mayhem
Mayhem unifies code, API, and dynamic SBOM security in one dashboard. Its hybrid, network-aware fuzzing works with symbolic execution and triage, generating tests and giving each defect a reproduction and backtrace. It checks APIs for OWASP Top 10 API weaknesses, uses reachability analysis for software components, and provides SARIF reports, notifications, and development-tool integrations. The API free plan allows up to 50 scans per month; paid plans cost $236 a month and include additional scans, enterprise features, and personalized support, with a 30-day trial.
- 01 AFL++
AFL++ suits developers and security practitioners fuzzing source-available or binary-only programs, network services or GUI software.
From €1,666.67/mo Free plan Windows · macOS · Linux · Android8.9 Visit Specs - 02
ClusterFuzz ClusterFuzz suits software teams that need automated fuzzing and crash triage, especially those able to deploy on Google Cloud or run a limited local instance.
Free plan Web · Windows · macOS · Linux8.9 Visit Specs - 03 boofuzz
boofuzz suits developers building Python scripts to fuzz network protocols or other supported communication targets.
Free plan Windows · Linux · API · Self-hosted8.7 Visit Specs - 04 Jazzer
Jazzer suits developers testing JVM applications and related native libraries, particularly those using JUnit and Maven, Gradle, or Bazel.
Free plan Open source Windows · macOS · Linux · API8.6 Visit Specs - 05 cargo-fuzz
Rust developers who want to fuzz-test crates locally or in a GitHub Actions workflow.
Free plan Windows · macOS · Linux8.5 Visit Specs - 06 Fuzzilli
Fuzzilli suits developers and security researchers fuzzing JavaScript engines or other dynamic language interpreters.
Free plan macOS · Linux · Self-hosted8.4 Visit Specs - 07 EvoMaster
It suits teams generating automated API and system tests across web or enterprise applications.
Free plan Windows · macOS · Linux · API8.3 Visit Specs - 08 EvoMaster
EvoMaster suits teams that want to generate API tests for web or enterprise applications, including teams working with REST, GraphQL, or supported RPC APIs.
Free plan Windows · macOS · Linux · API8.2 Visit Specs - 09 Onyx Launcher
It suits Minecraft players on Windows or Linux who want instance management, mod catalog access and built-in diagnostics.
Free plan Windows · Linux7.9 Visit Specs - 10
Black Duck Coverity Coverity suits enterprise development teams that need static source-code analysis across languages and frameworks.
Web · Windows · macOS · Linux7.8 Visit Specs - 11 Csmith
Csmith suits compiler developers and testers who need generated C programs for differential testing or test suites.
Free plan Windows · Linux7.8 Visit Specs - 12 Fuzzinator
Fuzzinator suits developers who want to automate local fuzzing jobs and can configure generators, targets and storage.
Free plan Web · Windows · macOS · Linux7.8 Visit Specs - 13
FuzzForge Web · Self-hosted7.5 Visit Specs - 14 Netzob
Netzob suits security evaluators creating fuzzers for proprietary or undocumented protocols.
Free plan Windows · Linux7.5 Visit Specs - 15 Schemathesis
Schemathesis suits engineers testing OpenAPI or GraphQL APIs, especially those integrating API tests into CI/CD.
Free plan Windows · macOS · Linux · Self-hosted7.5 Visit Specs - 16 Metalware Web · Linux · API · Self-hosted7.4 Visit Specs
- 17 Fuzzware Linux7.3 Visit Specs
- 18
OSS-Fuzz Free plan Web7.3 Visit Specs - 19 Wfuzz Free plan Windows · macOS · Linux · Self-hosted7.3 Visit Specs
- 20 beSTORM Windows · Linux6.2 Visit Specs
- 21 Honggfuzz Windows · macOS · Linux · Android5.9 Visit Specs
- 22 Fuzzowski 5.5 Visit Specs
- 23 RESTler Windows · macOS · Linux5.5 Visit Specs
- 24 syzkaller Windows · macOS · Linux5.4 Visit Specs
- 25 YARP Windows · macOS · Linux5.3 Visit Specs
Choosing instead of Mayhem
Alternatives make sense when you want free, open-source software or a narrower testing focus. Mayhem covers APIs and multiple binary types, but its paid plans and deployment choices may exceed a single project’s needs. Compare target and language support, whether you want hosted security or infrastructure to configure, and how each option handles crashes, regressions, reports, and issue tracking. Platform requirements also matter: a Rust- or JVM-focused tool, an Android accessibility library, or a configurable local framework may fit better than a broad security dashboard.