Side by side
EvoMaster vs Mayhem
Both stand on fuzz testing software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APILinuxMac+2
EvoMaster offers free automated test generation across several API types, with both black-box and JVM-focused white-box modes. Its schema and driver requirements matter when deciding whether it fits a project.
Visit EvoMaster
Free plan APILinuxMac+3
Mayhem combines code testing, API testing and dynamic SBOM analysis, with a free API tier and a stated 30-day trial for paid plans. Check scan limits and deployment or authentication requirements against your team’s needs.
Visit MayhemThe facts
| EvoMaster | Mayhem | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | API, Linux, Mac, Self-hosted, Windows | API, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Free or on request | Mayhem for API paid plans: $236 a month |
| Plans published | 1 | 2 |
| Maker | Not published | Not published |
| Website | evomaster.org | mayhem.security |
| On fuzz testing software | #7 of 26 | #11 of 26 |
EvoMaster: what it does well
- Supports REST, GraphQL, and RPC APIs.
- Black-box testing works across implementation languages.
- Provides more than 30 fault-detection oracles.
- Generates tests in Java, Kotlin, Python, or JavaScript.
- No telemetry, according to the project.
What to know first
- White-box testing requires a user-written driver.
- RPC schema definitions are not directly supported.
- External-service support remains in progress.
- REST APIs need OpenAPI 2.0, 3.0, or 3.1 schemas.
Mayhem: what it does well
- Provides a reproduction and backtrace for code defects.
- API testing checks for OWASP Top 10 API weaknesses.
- Offers managed SaaS, private-cloud and closed-network deployment.
- Integrates with CI and issue-tracking tools.
- Free API plan allows 50 scans monthly.
What to know first
- Free API plan is capped at 50 scans per month.
- Paid API plans cost $236 a month.
- Enterprise SSO and LDAP or Active Directory integration are enterprise options.
Alternatives to EvoMaster Alternatives to Mayhem The whole list