FuzzForge

Free plan Self-hostedWeb

What FuzzForge is

FuzzForge is FuzzingLabs’ platform for fuzzing, emulation, and reverse-engineering campaigns on embedded and connected products. It accepts binaries, complete firmware images, and source code, including third-party components supplied without source. The platform maps targets, writes fuzzing harnesses when needed, builds an SBOM from binaries, and produces triaged crashes with replayable test cases. Specialized agents run campaigns while engineers can take over with familiar industry tools. Campaigns are scheduled on available compute and may run overnight or for days. Deployment choices include a hosted instance, a dedicated instance in the customer’s cloud tenancy, Kubernetes on-premise, and an air-gapped deployment. Air-gapped installations use local open-weight models, have no network egress, and cost more than the standard on-premise licence. FuzzForge logs model requests and reasoning chains. Customers retain test cases, reports, configurations, and their knowledge graph. A free plan is listed, with web and self-hosted platforms.

Who it suits

It is intended for product security teams and PSIRTs, including embedded vendors, OEMs, government and defense teams, MSSPs, integrators, consultants, auditors, and certification bodies.

What it does well

Tests binaries, firmware, and source code
Triaged crashes with replayable cases
SBOM generation from binaries
Hosted, cloud, on-premise, and air-gapped options
Free plan listed

What to know first

Does not replace security researchers
Not a source-code scanner
Air-gapped deployment costs more
Air-gapped mode uses local open-weight models

Limits

The free plan is available. The air-gapped deployment uses local open-weight models, has no network egress and is priced above the standard on-premise licence.

Getting started

Visit https://fuzzforge.ai/.
Choose the free plan or discuss a licence for deployment.
Select a hosted, dedicated customer-cloud, Kubernetes on-premise or air-gapped deployment.
Provide binaries, firmware images or source code as campaign targets.
Let agents run campaigns, with engineers able to take over using industry tools.

Verdict

FuzzForge combines automated campaign execution with engineer takeover and several deployment models. Its stated scope centers on embedded product security rather than replacing researchers or source-code scanning.

Questions

Is FuzzForge free?

A free plan is available.

Which platforms does FuzzForge support?

It supports web and self-hosted use.

Can FuzzForge work without source code?

Yes. It accepts binaries and firmware images without source code and writes the fuzzing harness.

Who makes FuzzForge?

FuzzingLabs describes FuzzForge as its flagship product.

What deployment options are available?

Options include a hosted instance, a dedicated instance in the customer’s cloud tenancy, Kubernetes on-premise and an air-gapped deployment.

What does the air-gapped deployment involve?

It uses local open-weight models and has no network egress. It is priced above the standard on-premise licence.

Facts from FuzzForge's own pages

Air-gapped limit: Air-gapped deployment uses local open-weight models only, has no router or network egress, and is priced above the standard on-premise licence. · fuzzinglabs.com, 7 Oct 2026
Air-gapped limits: Air-gapped deployment uses local open-weight models, has no network egress, and is priced above the standard on-premise licence. · fuzzinglabs.com, 5 Oct 2026
Audience: The page identifies product security teams and PSIRTs as its audience, including embedded product vendors, OEMs, government and defense teams, and security service firms. · fuzzinglabs.com, 7 Oct 2026
Audit logs: The platform logs every model request and reasoning chain for auditing. · fuzzinglabs.com, 7 Oct 2026
Automation: Specialized agents drive campaigns, while engineers can take over using industry tools they already know. · fuzzinglabs.com, 5 Oct 2026
Campaign results: Campaigns produce triaged crashes with replayable test cases and validated findings; the platform can also build an SBOM from a binary. · fuzzinglabs.com, 7 Oct 2026
Data ownership: Customers keep campaign test cases, reports, configurations and their knowledge graph; FuzzingLabs keeps the platform itself. · fuzzinglabs.com, 7 Oct 2026
Deployment: Deployment options include hosted SaaS, a dedicated instance in the customer’s cloud tenancy, Kubernetes on-premise, and air-gapped deployment. · fuzzinglabs.com, 7 Oct 2026
Founded: 2021 · fuzzforge.ai, 28 Sept 2026
Headquarters: Near Paris · fuzzforge.ai, 28 Sept 2026
Human oversight: Agents drive campaigns, while engineers can take over using industry tools they already know. · fuzzinglabs.com, 7 Oct 2026
Input targets: It accepts binaries, full firmware images or source code and can map targets and build an SBOM. · fuzzinglabs.com, 7 Oct 2026
Integrations: FuzzingLabs describes workflows that combine tools such as Semgrep, CodeQL, AFL, LibFuzzer, Ghidra, angr and QEMU. · fuzzinglabs.com, 7 Oct 2026
Licensing unit: For public sector procurement, the maker describes an annual licence per instance, with tiers based on target count and no per-seat or per-test billing. · fuzzinglabs.com, 5 Oct 2026
Maker: FuzzingLabs describes FuzzForge as its flagship AI agent orchestration platform for continuous offensive validation on firmware, binaries and embedded systems. · fuzzinglabs.com, 7 Oct 2026
No source required: FuzzForge works on binaries and firmware images without source code and writes the fuzzing harness itself. · fuzzinglabs.com, 7 Oct 2026
Not a source-code scanner: The maker says FuzzForge does not replace researchers and is not a source-code scanner. · fuzzinglabs.com, 5 Oct 2026
Operations: The execution layer schedules campaigns on available compute, and campaigns can run overnight or for days. · fuzzinglabs.com, 7 Oct 2026
Purpose: FuzzForge runs fuzzing, emulation and reverse engineering campaigns for embedded and connected product security testing. · fuzzinglabs.com, 7 Oct 2026
Scope limit: FuzzForge does not replace security researchers and is not a source-code scanner. · fuzzinglabs.com, 7 Oct 2026
Support: The product page offers a demo request and describes campaign findings as work engineers can pick up and verify. · fuzzinglabs.com, 7 Oct 2026
Targets: It can test binaries, firmware images and source code, including third-party components supplied without source code. · fuzzinglabs.com, 5 Oct 2026
What it does: FuzzForge runs fuzzing, emulation and reverse engineering campaigns for embedded and connected products. · fuzzinglabs.com, 5 Oct 2026
Who it is for: The maker lists embedded product vendors, OEMs, government and defense, MSSPs, integrators, consulting and audit firms, and certification bodies as intended users. · fuzzinglabs.com, 5 Oct 2026

Where FuzzForge stands on Freedom251

Fuzz Testing Software#14 of 26