Best Fuzz Testing Software in 2026
Updated
In short: Accessibility Test Framework for Android is ranked #1 of 27 as of 4 October 2026, ahead of AFL++ and Honggfuzz. The best-ranked option with a free plan is AFL++. The lowest first paid tier on this page is Mayhem at $236/mo.
Fuzz testing software is for exploring software behavior with generated or varied inputs, and the entries can be compared across both testing methods and workflow support. Accessibility Test Framework for Android, AFL++, and Honggfuzz are among the first names in the ranking. Check input generation methods, supported languages, and target types, as well as execution mode, to understand the range of approaches represented. Coverage guidance and crash triage are additional criteria; CI/CD support indicates whether integration is included in the comparison. Free-plan and paid-from details are also listed. The ranking orders the entries, while these criteria help you focus on fit for your testing needs.
27 fuzz testing software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 Accessibility Test Framework for Android Android only RecognisedPhone appDocumentedFree plan 7.8Free Input generation methods: generation, mutationTarget types: operating-system kernels and syscall interfaces: FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, WindowsCoverage guidance: Yes
- 2 AFL++ Android only RecognisedPhone appDocumentedFree plan 7.8€1666.67/mo Input generation methods: mutationTarget types: source-code targets, binary-only targets, file inputs, stdin inputs, Android native libraries, Win32 PE binariesCoverage guidance: Yes
- 3 Honggfuzz Android only RecognisedPhone appDocumentedFree plan 6.9 Input generation methods: mutationTarget types: file inputs, standard input, APIs, binaries, network serversCoverage guidance: Yes
- 4 cargo-fuzz No phone app RecognisedPhone appDocumentedFree plan 6.4Free Input generation methods: mutation, generation, hybridTarget types: raw byte buffers, structured Rust data, libraries, APIs, compiler code, allocator operationsCoverage guidance: Yes
- 5 ClusterFuzz No phone app RecognisedPhone appDocumentedFree plan 6.4Free Input generation methods: mutation, generation, hybridTarget types: binary formats, HTML, JavaScript, browser DOM, native programsCoverage guidance: Yes
- 6 Fuzzilli No phone app RecognisedPhone appDocumentedFree plan 6.4Free Input generation methods: mutation, generation, hybridTarget types: JavaScript programs and JavaScript engines/interpretersCoverage guidance: Yes
- 7 Jazzer No phone app RecognisedPhone appDocumentedFree plan 6.3Free Input generation methods: mutation, generationTarget types: JVM applications, Java, Kotlin, Scala, Clojure, JNI/native librariesCoverage guidance: Yes
- 8 Mayhem No phone app RecognisedPhone appDocumentedFree plan 6.3$236/mo Input generation methods: hybridTarget types: Linux binaries; Windows PE binaries; TCP/UDP applications; REST APIs; gRPC APIs; containers; automotive vECUsCoverage guidance: Yes
- 9 OSS-Fuzz No phone app RecognisedPhone appDocumentedFree plan 6.3Free Input generation methods: mutationTarget types: source-code fuzz targets; untrusted user or network inputs; complex input formatsCoverage guidance: Yes
- 10 Roslynator No phone app RecognisedPhone appDocumentedFree plan 6.2Free
- 11 Schemathesis No phone app RecognisedPhone appDocumentedFree plan 6.2Free
- 12 Black Duck Coverity No phone app RecognisedPhone appDocumentedFree plan 5.6
- 13 boofuzz No phone app RecognisedPhone appDocumentedFree plan 5.6 Input generation methods: hybridTarget types: network protocols, serial, Ethernet/IP, UDP broadcast, TCP, UDP, SSL, raw sockets
- 14 FuzzForge No phone app RecognisedPhone appDocumentedFree plan 5.4 Input generation methods: generationTarget types: codebases, binaries, containers, APIs, GraphQL, protocols, firmware, embedded systems
- 15 Onyx Launcher No phone app RecognisedPhone appDocumentedFree plan 5.4
- 16 Csmith No phone app RecognisedPhone appDocumentedFree plan 5.3 Input generation methods: generationTarget types: C programs; C++ programs; compilers
- 17 Fortra ZTNA No phone app RecognisedPhone appDocumentedFree plan 5.3 Input generation methods: generationTarget types: network protocols, file formats, hardware, DLLs, APIs, binary applications
- 18 Fuzzware No phone app RecognisedPhone appDocumentedFree plan 5.3 Input generation methods: mutationTarget types: ARM Cortex-M firmware; Infineon AURIX TriCore firmware; MMIO and interrupt-driven embedded systemsCoverage guidance: Yes
- 19 Metalware No phone app RecognisedPhone appDocumentedFree plan 5.3 Input generation methods: generation and mutation, with symbolic input generationTarget types: ELF and raw .bin firmware; ARM Cortex-M, embedded peripherals, DMA, RTOS, and bare metal targetsCoverage guidance: Yes
- 20 Netzob No phone app RecognisedPhone appDocumentedFree plan 5.3 Input generation methods: mutation, generationTarget types: network protocols, structured files, text protocols, delimiter-based protocols, fixed-field protocols, variable-length/TLV protocols, IPC, drivers and devices
- 21 Scout Suite No phone app RecognisedPhone appDocumentedFree plan 5.3 Input generation methods: mutationTarget types: Network protocols and services including TCP, UDP, SSL, IPP, LPD, BACnet, Modbus, DHCP, TFTP, Telnet CLI, Netconf, COPS, and raw requests
- 22 syzkaller No phone app RecognisedPhone appDocumentedFree plan 5.3 Input generation methods: generation, mutationTarget types: operating-system kernels and syscall interfaces: FreeBSD, Fuchsia, gVisor, Linux, NetBSD, OpenBSD, WindowsCoverage guidance: Yes
- 23 Wfuzz No phone app RecognisedPhone appDocumentedFree plan 5.3 Input generation methods: generationTarget types: HTTP URLs, paths, files, query parameters, POST data, cookies, headers, HTTP verbs, authentication
- 24 Fuzzinator No phone app RecognisedPhone appDocumentedFree plan 5.2 Input generation methods: generation, mutationTarget types: stdin, command-line, files, HTTP/browser
- 25 EvoMaster No phone app RecognisedPhone appDocumentedFree plan 5.1
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which fuzz testing software is ranked first on Samsung Mobile US Press?
Accessibility Test Framework for Android is ranked #1 of 27 with a score of 7.8. AFL++ is second and Honggfuzz third.
How many of these have a free plan?
10 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Mayhem has the lowest first paid tier we found: $236/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.