Tumult

Spec sheet

Purpose

Tumult is a Rust-native chaos engineering platform for defining, running, and analyzing experiments that test how systems behave under failure conditions.Read 8 Oct 2026 · tumult.rs

Platforms

The site lists prebuilt binaries for macOS and Linux, and documents native Windows fault support through the tumult-windows plugin.Read 8 Oct 2026 · tumult.rs

Deployment

Tumult is distributed as a static binary and as prebuilt Docker images on GHCR; the site says the binary needs no Python or runtime dependencies.Read 8 Oct 2026 · tumult.rs

Security

The production deployment guide says HTTP exposure beyond loopback requires authentication and documents TLS configuration for the analytics daemon's HTTP and gRPC listeners.Read 8 Oct 2026 · tumult.rs

License

Tumult is open source under the Apache-2.0 license.Read 8 Oct 2026 · tumult.rs

Agent integration

The MCP server exposes 40 tools over stdio or Streamable HTTP for compatible agents to discover plugins, run experiments, query analytics, and recommend tests.Read 8 Oct 2026 · tumult.rs

Analytics

The daemon ingests OpenTelemetry traces, metrics, and logs into an embedded DuckDB store called Kronika, which supports SQL queries and Parquet export.Read 8 Oct 2026 · tumult.rs

Approval controls

Runs use risk tiers T0–T3, with gated approvals that can require a quorum, expire by TTL, and pin the experiment content hash.Read 8 Oct 2026 · tumult.rs

Approvals and audit

Runs use risk tiers T0–T3, with gated approvals supporting quorum, time-to-live limits, content-hash pinning, and separation of duties; actions enter a hash-chained audit trail.Read 8 Oct 2026 · tumult.rs

Audit and stop controls

Tumult provides a two-step emergency stop, a stop-all kill switch, and a hash-chained audit trail.Read 8 Oct 2026 · tumult.rs

Compliance reporting

Tumult maps experiments to DORA, NIS2, PCI-DSS 4.0, ISO 22301, ISO 27001, SOC 2, and Basel III; its R2 evidence pack is available for DORA, NIS2, ISO 27001, and SOC 2, while the other listed frameworks are mapping-only.Read 8 Oct 2026 · tumult.rs

Emergency stops

Tumult provides a two-step emergency stop and a stop-all kill switch to halt runs.Read 8 Oct 2026 · tumult.rs

Experiment authoring

Experiments can be created in the web UI or written in TOON and run from the CLI.Read 8 Oct 2026 · tumult.rs

Fault actions

The homepage describes 16 plugins and 91 chaos actions across databases, Kafka, containers, Kubernetes, SSH, and CPU, memory, and I/O stress.Read 8 Oct 2026 · tumult.rs

Fault injection

The site lists 16 plugins and 91 chaos actions covering technologies including Kubernetes, Docker, PostgreSQL, MySQL, Redis, Kafka, SSH, and CPU, memory, and I/O stress.Read 8 Oct 2026 · tumult.rs

Install options

The homepage provides a shell installer and a Docker image, and describes Tumult as a static binary with no runtime dependencies.Read 8 Oct 2026 · tumult.rs

License and pricing

The site describes Tumult as open source under the Apache-2.0 license; the opened maker pages did not state a price or trial offer.Read 8 Oct 2026 · tumult.rs

MCP integration

Tumult provides 40 Model Context Protocol tools over stdio or Streamable HTTP for compatible agents to discover plugins, run experiments, query analytics, and make recommendations.Read 8 Oct 2026 · tumult.rs

Observability integrations

Tumult exports telemetry over OTLP; its guide describes routing through an OpenTelemetry Collector to backends including Jaeger, Prometheus, Loki, SigNoz, and Datadog.Read 8 Oct 2026 · tumult.rs

Plugin security boundary

The security assessment says script plugins execute shell scripts and that Tumult trusts plugin script content, so a malicious registered plugin can execute arbitrary commands.Read 8 Oct 2026 · tumult.rs

Security assessment

Tumult's security assessment dated 2026-06-08 reports zero known HIGH or CRITICAL vulnerabilities and five transitive dependency advisories, all rated Low or Medium.Read 8 Oct 2026 · tumult.rs

Supported binary platforms

The homepage lists prebuilt binaries for macOS x86_64 and aarch64, and Linux x86_64 gnu/musl and aarch64 musl.Read 8 Oct 2026 · tumult.rs

Where Specifiction places it

• Chaos Engineering Platforms#20 of 257.1