OSS-Fuzz

Plans and prices

Every plan, in full

On the record

Access requirement

Project contacts need a Google account for full access to ClusterFuzz, including crash reports and fuzzer statistics.google.github.io · read 30 Sep 2026

Alternative deployment

Projects that do not qualify for OSS-Fuzz, including closed-source projects, can run their own ClusterFuzz or ClusterFuzzLite instances.google.github.io · read 30 Sep 2026

Architectures

OSS-Fuzz supports fuzzing x86_64 and i386 builds, with i386 not enabled by default.google.github.io · read 30 Sep 2026

Build limit

The setup guide says OSS-Fuzz allows up to four builds per day and builds once per day by default.google.github.io · read 30 Sep 2026

Build setup

Projects provide a Dockerfile and build.sh script to define the build environment and produce fuzz targets.google.github.io · read 30 Sep 2026

Eligibility

A project seeking acceptance must be open source and have a significant user base and/or be critical to global IT infrastructure.google.github.io · read 30 Sep 2026

Fuzzing engines

The documentation lists libFuzzer, AFL++, Honggfuzz and Centipede, with Centipede identified as experimental in the FAQ.google.github.io · read 30 Sep 2026

Issue reporting

By default, issues are filed in the OSS-Fuzz tracker; projects can opt to mirror them on GitHub.google.github.io · read 30 Sep 2026

Languages

The site lists C/C++, Rust, Go, Python, Java/JVM, JavaScript and Lua as supported languages.google.github.io · read 30 Sep 2026

Maker history and location

Google says it was officially born in August 1998 and that its current headquarters, the Googleplex, is in Mountain View, California.about.google · read 30 Sep 2026

Purpose

OSS-Fuzz runs fuzzers for open-source projects and privately alerts developers to bugs it detects.google.github.io · read 30 Sep 2026

Resource limit

The guide states that builders have 250 GB of disk space, including the operating system, and builds must stay below that peak usage.google.github.io · read 30 Sep 2026

Sanitizers

OSS-Fuzz runs fuzzing engines in combination with sanitizers; AddressSanitizer and UndefinedBehaviorSanitizer are the default supported sanitizers described in the setup guide.google.github.io · read 30 Sep 2026

Testing approach

It combines modern fuzzing techniques with scalable, distributed execution to improve open-source software security and stability.google.github.io · read 30 Sep 2026

Alternatives to OSS-Fuzz

M MayhemWebWindows+4 A AFL++AndroidWindows+3 J JazzerWindowsMac+3 C ClusterFuzzWebWindows+3 CF cargo-fuzzWindowsMac+1 E EvoMasterWindowsMac+3 E EvoMasterWindowsMac+3 F FuzzinatorWebWindows+2

Every alternative, ranked