FuzzForge vs Mayhem
FuzzForge
fuzzforge.aiMayhem
mayhem.securitySide by side
| Figure | FuzzForge | Mayhem |
|---|---|---|
| Price from | — | $236/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 0 | 2 |
| Spec score · Fuzz Testing Software | 7.5 (#14) | 8.4 (#7) |
| Deployment | Deployment options include hosted SaaS, a dedicated instance in the customer’s cloud tenancy, Kubernetes on-premise, and air-gapped deployment. | Mayhem's feature list describes managed SaaS, private-cloud installation, and closed-network installation. |
| Founded | 2021 | 2012 |
| Headquarters | Near Paris | Pittsburgh, Pennsylvania, United States |
| Integrations | FuzzingLabs describes workflows that combine tools such as Semgrep, CodeQL, AFL, LibFuzzer, Ghidra, angr and QEMU. | The homepage lists integrations for GitHub, Jenkins, GitLab, Jira, Slack, CircleCI, Azure DevOps, Google Chat, and Travis CI. |
| Support | The product page offers a demo request and describes campaign findings as work engineers can pick up and verify. | The feature list includes enterprise support, and the API plan announcement cites personalized support among paid-plan offerings. |
Plans
In their own words
Mayhem
Mayhem is a security platform for testing code and APIs and assessing software components in a dashboard. Its fuzzing combines AI-powered, network-aware methods with symbolic execution and triage. For code, it generates tests autonomously to find vulnerabilities and supplies a reproduction and backtrace for each defect. Mayhem for API tests for OWASP Top 10 API weaknesses and supports stateful, agentless testing. Dynamic SBOM reachability analysis helps identify which software components are on the attack surface. The platform produces vendor-neutral SARIF reports and real-time notifications, and lists integrations with tools including GitHub, Jenkins, GitLab, Jira, Slack, CircleCI, Azure DevOps, Google Chat and Travis CI. Deployment options include managed SaaS, private cloud and closed-network installation; command-line tools run on macOS, Linux and Windows. The Mayhem for API free plan allows up to 50 scans per month. Paid API plans cost $236 a month, with additional scans, enterprise features and personalized support; a 30-day trial is listed for paid plans.