CheckOps home

Tools directory

H

CheckOps

honggfuzz

honggfuzz is Google's Apache-2.0 security-oriented fuzzer with evolutionary, feedback-driven fuzzing based on software and hardware code coverage.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

honggfuzz is a security-oriented software fuzzer. It supports evolutionary, feedback-driven fuzzing based on code coverage, using both software instrumentation and hardware-based feedback, and is multi-process and multi-threaded.

The source code is at google/honggfuzz on GitHub under the Apache-2.0 licence, with about 3,400 stars; the most recent commit was on 25 September 2026.

Features

  1. Coverage feedback: Software and hardware based.
  2. Persistent mode: Fast in-process fuzzing.
  3. Multi-threaded: Uses all cores.
  4. Sanitizer support: Works with ASan and others.
  5. Crash analysis: Detailed crash reports.

Pros

  1. Free to use: Open source under Apache-2.0.
  2. Maintained: Commits as recent as 25 September 2026.
  3. Community: About 3,400 GitHub stars.

Cons

  1. Native focus: Best for C/C++.
  2. Harness work: Targets need fuzz harnesses.
honggfuzz -i input_corpus -- ./target ___FILE___

Resources:

Pricing

honggfuzz is free and open source under the Apache-2.0 licence.

  1. C/C++ developers fuzzing parsers.
  2. Security researchers.
  3. Not a fit for teams without harnesses.

Conclusion

honggfuzz is a fast, mature coverage-guided fuzzer.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with honggfuzz side by side.