- Home
- Fuzz Testing Software
- Mayhem
Mayhem
Pittsburgh, Pennsylvania, United States
What it is
Mayhem is a security platform that brings code, API, and dynamic software bill of materials (SBOM) security into one dashboard. Its fuzz testing combines AI-powered, network-aware fuzzing with symbolic execution and triage. For code, it generates tests autonomously to find vulnerabilities and provides a reproduction and backtrace for each defect. Mayhem for API tests for OWASP Top 10 API weaknesses and supports stateful, agentless testing. Dynamic SBOM reachability analysis helps identify which software components are on the attack surface. The platform provides vendor-neutral SARIF reports, real-time notifications, and integrations including GitHub, Jenkins, GitLab, Jira, Slack, CircleCI, Azure DevOps, Google Chat, and Travis CI. Deployment options include managed SaaS, private cloud, and closed-network installation; its CLI runs on macOS, Linux, and Windows. The API free plan allows up to 50 scans per month. Paid API plans are $236 a month and include additional scans, enterprise features, and personalized support; those plans have a 30-day trial.
For and against
For
- Combines code, API, and dynamic SBOM security
- Provides defect reproductions and backtraces
- API testing supports stateful, agentless checks
- Offers managed SaaS, private-cloud, and closed-network deployment
- Includes integrations and real-time notifications
Against
- Free API plan allows up to 50 scans per month
- Paid API plans cost $236 a month
- 30-day trial is for paid plans
The verdict
Mayhem combines multiple security-testing areas with reporting, integrations, and several deployment choices. Its free API scan allowance and paid-plan cost are key details for teams evaluating the service.
Who it suits
Mayhem suits teams seeking code, API, and dynamic SBOM security testing in one platform. The free API plan may fit limited scanning needs, while teams needing more scans can consider the paid plan and its trial.
Plans and prices
Mayhem for API Free Plan
Up to 50 scans per month
Read 2 Oct 2026 · mayhem.security
Mayhem for API paid plans
Additional scans · Enterprise features · Personalized support
Read 2 Oct 2026 · mayhem.security
On the record
- API free plan limit
- The Mayhem for API free plan allows up to 50 scans each month.mayhem.security · read 2 Oct 2026
- API security
- Mayhem for API tests APIs for OWASP Top 10 API weaknesses and supports stateful, agentless testing.mayhem.security · read 2 Oct 2026
- Authentication
- The feature list says enterprise SSO can use SAML, OpenID, or OAuth, and enterprise customers can integrate LDAP and Active Directory.mayhem.security · read 2 Oct 2026
- Code security
- Mayhem runs autonomously generated tests to find vulnerabilities and provides a reproduction and backtrace for each defect.mayhem.security · read 2 Oct 2026
- Company
- The company says ForAllSecure was founded with the mission to automatically test and protect the world's software.mayhem.security · read 2 Oct 2026
- Deployment
- Mayhem's feature list describes managed SaaS, private-cloud installation, and closed-network installation.mayhem.security · read 2 Oct 2026
- Dynamic SBOM
- Mayhem says reachability analysis helps identify which software components are on the attack surface and which are not.mayhem.security · read 2 Oct 2026
- Fuzz testing
- Mayhem combines AI-powered, network-aware fuzzing with integrated symbolic execution and intelligent triage.mayhem.security · read 2 Oct 2026
- Integrations
- The homepage lists integrations for GitHub, Jenkins, GitLab, Jira, Slack, CircleCI, Azure DevOps, Google Chat, and Travis CI.mayhem.security · read 2 Oct 2026
- Platform
- Mayhem provides code, API, and dynamic SBOM security in one dashboard.mayhem.security · read 2 Oct 2026
- Reporting
- Mayhem provides vendor-neutral SARIF reports and real-time notifications.mayhem.security · read 2 Oct 2026
- Support
- The feature list includes enterprise support, and the API plan announcement cites personalized support among paid-plan offerings.mayhem.security · read 2 Oct 2026
- Supported CLI platforms
- Mayhem's feature list says its CLIs run on macOS, Linux, and Windows.mayhem.security · read 2 Oct 2026
- Trial
- The Mayhem for API announcement says paid plans have a free 30-day trial with limits removed.mayhem.security · read 2 Oct 2026