OSS-Fuzz vs EvoMaster

OSS-Fuzz9.2Visit EEvoMaster8.5Visit

Higher score OSS-Fuzz #2 in Fuzz Testing Software 9.2/10 Free plan Free plan✓ 3 of 3 features Visit OSS-Fuzz

vs

E EvoMaster #5 in Fuzz Testing Software 8.5/10 Free plan Free plan✓ 0 of 3 features Visit EvoMaster

• OSS-Fuzz fits best

  Free continuous fuzzing for open-source projects

• EvoMaster fits best

  API teams testing REST, GraphQL, and RPC

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature	OSS-Fuzz 9.2/10 Visit ↗	EEvoMaster 8.5/10 Visit ↗
At a glance
Editor score	9.2	8.5
Ranking	#2 in Fuzz Testing Software	#5 in Fuzz Testing Software
Best for	Free continuous fuzzing for open-source projects	API teams testing REST, GraphQL, and RPC
Pricing model	Free	Free
Starting price	Free plan	Free plan
Free plan	✓	✓
Free trial	—	—
Deployment	Cloud	Self-hosted, Desktop
Platforms	Web	Windows, macOS, Linux
Support	Docs, Community	Community, Docs
Integrations	3 integrations	2 integrations
Built for	Small business, Mid-market, Enterprise	Small business, Mid-market, Enterprise
Features OSS-Fuzz 3/3 · EvoMaster 0/3
Coverage guidance	✓ (best)	Not checked yet
Crash triage	✓ (best)	Not checked yet
CI/CD support	✓ (best)	Not checked yet
Specs
Input generation methods	mutation	Not checked yet
Target types	source-code fuzz targets; untrusted user or network inputs; complex input formats	Not checked yet
Execution mode	Cloud	Not checked yet
Supported languages	C/C++, Rust, Go, Python, Java/JVM, JavaScript, Lua	Not checked yet
Our review
Pros	Distributed fuzzing with libFuzzer, AFL++, Honggfuzz, and Centipede Sanitizer workflows, coverage reports, and fuzzer statistics Crash deduplication, reproduction, bug filing, and regression reporting	Supports REST, GraphQL, gRPC, and Thrift API testing Generates tests in Python, JavaScript, Java, and Kotlin Combines authentication, database data generation, and reporting
Cons	Limited to qualifying open-source projects Requires fuzz targets and build configurations for integration Cloud execution may not suit closed-source projects	White-box testing is focused on JVM applications Database generation centers on four supported database systems Continuous integration integration is provided through GitHub Actions
Our verdict	OSS-Fuzz is a Google service for qualifying open-source projects that need continuous testing against untrusted user or network inputs and complex input formats. Maintainers integrate fuzz targets and build configurations, after which the… Read the review →	EvoMaster is an open-source tool for automatically generating system-level tests and fuzzing web and enterprise applications. It is aimed at API teams working with REST, GraphQL, and RPC interfaces, including gRPC and Thrift. Its black-box… Read the review →

Strengths and trade-offs

• OSS-Fuzz — where it wins

  • Distributed fuzzing with libFuzzer, AFL++, Honggfuzz, and Centipede
  • Sanitizer workflows, coverage reports, and fuzzer statistics
  • Crash deduplication, reproduction, bug filing, and regression reporting

  Where it doesn't

  • Limited to qualifying open-source projects
  • Requires fuzz targets and build configurations for integration
  • Cloud execution may not suit closed-source projects

• EvoMaster — where it wins

  • Supports REST, GraphQL, gRPC, and Thrift API testing
  • Generates tests in Python, JavaScript, Java, and Kotlin
  • Combines authentication, database data generation, and reporting

  Where it doesn't

  • White-box testing is focused on JVM applications
  • Database generation centers on four supported database systems
  • Continuous integration integration is provided through GitHub Actions

• OSS-Fuzz9.2/10 · Free plan

  A cloud-based continuous fuzzing service for qualifying open-source projects.

  Visit OSS-FuzzFull verdict →
• EEvoMaster8.5/10 · Free plan

  A broad, free API testing tool for teams covering REST, GraphQL, and RPC.

  Visit EvoMasterFull verdict →