ClusterFuzz

ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses it to fuzz its products, and it is the fuzzing backend of OSS-Fuzz.

It can run on clusters of any size and supports several coverage-guided fuzzing engines, libFuzzer, AFL, AFL++ and Honggfuzz, with ensemble fuzzing strategies, as well as blackbox fuzzing. Crashes are deduplicated accurately, test cases are minimised, regressions are found by bisection, and bugs are filed, triaged and closed automatically in issue trackers such as Jira. Statistics help analyse fuzzer performance and crash rates, and a web interface manages fuzzing jobs.

ClusterFuzz is free and open source under the Apache 2.0 licence. It runs on Google Cloud, with parts that can be run locally.