ossfuzz

Free distributed continuous fuzzing infrastructure for open-source projects with integrated coverage and bug tracking. OSS-Fuzz is an open-source project developed by Google that provides free distributed infrastructure for continuous fuzz testing. It streamlines the fuzzing process and facilitates simpler modifications. While only select projects are accepted into OSS-Fuzz, the project's core is open-source, allowing anyone to host their own instance for private projects. OSS-Fuzz provides a simple CLI framework for building and starting harnesses or calculating their coverage. Additionally, OSS-Fuzz can be used as a service that hosts static web pages generated from fuzzing outputs such as coverage information. Apply this technique when: Skip this technique when: OSS-Fuzz provides several publicly available tools and web interfaces: The bug tracker allows you to: The build status system helps track: Fuzz Introspector displays: Read this case study for examples and explanations. You don't need to host the whole OSS-Fuzz platform to use it.