Side by side
cargo-fuzz vs Fuzzilli
Both stand on fuzz testing software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxMacWindows
cargo-fuzz provides Rust projects with commands for fuzz-target setup, execution, input minimization, and coverage. Check the compiler and platform requirements before using it.
Visit cargo-fuzz Free plan LinuxMacSelf-hosted
Fuzzilli offers a configurable fuzzing setup with multiple target engines and coordination options. Building it requires a compatible instrumented engine and the specified toolchain.
Visit FuzzilliThe facts
| cargo-fuzz | Fuzzilli | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Mac, Windows | Linux, Mac, Self-hosted |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 1 |
| Maker | Not published | Not published |
| Website | github.com | github.com |
| On fuzz testing software | #6 of 26 | #10 of 26 |
cargo-fuzz: what it does well
- Free and open source under MIT and Apache 2.0.
- Commands create projects, targets, and run fuzzing.
- Can minimize failing inputs and input corpora.
- Coverage information is available from version 0.10.0 onward.
- Documentation includes a GitHub Actions workflow.
What to know first
- Requires the nightly Rust compiler.
- Requires a C++ compiler with C++11 support.
- Coverage requires cargo-fuzz version 0.10.0 or newer.
Fuzzilli: what it does well
- Coverage-guided input generation, mutation, and hybrid methods.
- Supports multiple listed JavaScript engine targets.
- Instances can coordinate across machines over TCP.
- Docker and Google Compute Engine tooling is available.
What to know first
- Requires building an instrumented supported JavaScript engine.
- Requires Swift Package Manager to build Fuzzilli.
- Not an officially supported Google product.
Alternatives to cargo-fuzz Alternatives to Fuzzilli The whole list