OSS-Fuzz

Free#2 of 25 in Fuzz Testing Software

OSS-Fuzz: A cloud-based continuous fuzzing service for qualifying open-source projects. Ranked #2 of 25 in Fuzz Testing Software by our editors (9.2/10); pricing: Free plan; best for free continuous fuzzing for open-source projects.

9.2/10Editor score

Visit OSS-Fuzz

OSS-Fuzz9.2 Visit OSS-Fuzz

At a glance

Editor score
9.2 / 10
Pricing
Free plan
Best for
Free continuous fuzzing for open-source projects
Free plan
Yes
Paid from
Free
Input generation methods
mutation
Founded
2016
Facts checked
20 Sep 2026

Where it wins
- Distributed fuzzing with libFuzzer, AFL++, Honggfuzz, and Centipede
- Sanitizer workflows, coverage reports, and fuzzer statistics
- Crash deduplication, reproduction, bug filing, and regression reporting
Where it doesn't
- Limited to qualifying open-source projects
- Requires fuzz targets and build configurations for integration
- Cloud execution may not suit closed-source projects

Our verdict on OSS-Fuzz

OSS-Fuzz is a Google service for qualifying open-source projects that need continuous testing against untrusted user or network inputs and complex input formats. Maintainers integrate fuzz targets and build configurations, after which the service runs distributed fuzzing in the cloud. Its supported languages include C/C++, Rust, Go, Python, Java and other JVM languages, JavaScript, and Lua. The intended audience is established open-source projects with significant users or critical infrastructure impact.

The published capabilities cover the main operational stages of fuzz testing. OSS-Fuzz supports libFuzzer, AFL++, Honggfuzz, and Centipede, along with AddressSanitizer, UndefinedBehaviorSanitizer, and MemorySanitizer workflows. Coverage reports and fuzzer statistics help maintainers review testing activity, while seed corpora and dictionaries support mutation-based input generation. Automatic crash deduplication, crash reproduction, and regression-range reporting organize findings after execution. CIFuzz adds continuous-integration workflows, with integrations for GitHub Actions, Monorail, and Jira.

OSS-Fuzz’s clearest strength is breadth at no charge for eligible open-source projects: distributed execution, multiple fuzzing engines, sanitizer workflows, coverage guidance, crash triage, and CI support are combined in one service. The main boundary is eligibility. Closed-source projects are directed to ClusterFuzz or ClusterFuzzLite, so OSS-Fuzz is not the right fit for private codebases. Teams should choose it when they maintain qualifying open-source software and can provide the required fuzz targets and build configurations; projects outside that scope should consider the alternatives identified by the vendor.

Your product? Our editors can test OSS-Fuzz in depth and publish a review, labelled as paid · from $149/mo →

OSS-Fuzz pricing

Plans Free planFree Free to use — no paid tier required for the core job.

See plans on google.github.io

OSS-Fuzz fact sheet

Free plan	Yes
Paid from	Free
Input generation methods	mutation
Target types	source-code fuzz targets; untrusted user or network inputs; complex input formats
Coverage guidance	Yes
Crash triage	Yes
Execution mode	Cloud
Supported languages	C/C++, Rust, Go, Python, Java/JVM, JavaScript, Lua
CI/CD support	Yes
Deployment	Cloud
Platforms	Web
Support	Docs, Community
Built for	Small business, Mid-market, Enterprise (editorial estimate)
Integrations	3 integrations: GitHub Actions, Monorail, Jira
Pricing	Free plan
Website	google.github.io
Facts checked	20 Sep 2026

OSS-Fuzz integrations

OSS-Fuzz lists 3 integrations on its own site.

GitHub Actions
Monorail
Jira

Alternatives to OSS-Fuzz

See all OSS-Fuzz alternatives →

OSS-Fuzz vs the competition

Compare OSS-Fuzz with any tool side by side →

Used OSS-Fuzz? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used OSS-Fuzz for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used OSS-Fuzz myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

OSS-Fuzz is listed in our Fuzz Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/oss-fuzz/"><img src="https://www.itechguides.com/best/badge/oss-fuzz.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update