The company and the Mayhem system
Mayhem Security was founded in 2012 by Carnegie Mellon researchers and formerly operated as ForAllSecure. Its October 2024 announcement explicitly changed the corporate name to Mayhem Security. Mayhem is also the name of its security-testing product, so the product and the company are distinguished in historical accounts. [1]
An autonomous-security contribution
Under the ForAllSecure name, its team built the Mayhem cyber-reasoning system that led the 2016 Cyber Grand Challenge final. DARPA’s August 4 announcement called it the presumptive winner before overnight verification. The system’s contribution was automated software analysis and vulnerability handling in the competition’s test environment. [2]
A completed acquisition announcement
Bugcrowd announced that it had acquired Mayhem Security in November 2025. A joint statement from both CEOs describes a completed company acquisition. The public announcement date does not establish a separate legal closing date or disclose the transaction price. [3][4]
Sources
- Introducing Mayhem: ForAllSecure Unveils New Name and Company Focus
ForAllSecure · Oct 1, 2024
- “Mayhem” Declared Preliminary Winner of Historic Cyber Grand Challenge
DARPA · Aug 4, 2016
- Bugcrowd acquires Mayhem Security: Redefining AI-powered security testing
Bugcrowd · Nov 4, 2025
- Bugcrowd Acquires Mayhem Security to Bring Human-Augmented AI Automation to Security Testing
Bugcrowd · Nov 4, 2025