OSS-Fuzz

OSS-Fuzz is a free continuous fuzzing service for open source software, run by Google in cooperation with the OpenSSF. It aims to make common open source software more secure and stable by combining modern fuzzing techniques with scalable, distributed execution.

Project maintainers add build scripts and fuzz targets to the OSS-Fuzz repository. The service then builds the project in Docker, runs the libFuzzer, AFL++ and Honggfuzz engines with sanitizers on ClusterFuzz, reports crashes privately to the maintainers, verifies fixes and publishes coverage reports. C/C++, Rust, Go, Python, Java/JVM, JavaScript and Lua code are supported, on x86_64 and i386 architectures.

OSS-Fuzz is open source under the Apache 2.0 licence and free for accepted open source projects. Projects that do not qualify can run their own ClusterFuzz or ClusterFuzzLite instance.