OSS-Fuzz

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

OSS-Fuzz is ranked #7 of 27 in fuzz testing software on Inferse. It runs on Web. There is a free plan.

Compared on fuzz testing software

Free plan: Yesgoogle.github.io
Input generation methods: mutationgoogle.github.io
Target types: source-code fuzz targets; untrusted user or network inputs; complex input formatsgoogle.github.io
Coverage guidance: Yesgoogle.github.io
Crash triage: Yesgoogle.github.io
Execution mode: cloudgoogle.github.io
Supported languages: C/C++, Rust, Go, Python, Java/JVM, JavaScript, Luagoogle.github.io
CI/CD support: Yesgoogle.github.io

Facts

Purpose: OSS-Fuzz runs fuzzers for open-source projects and privately alerts developers to bugs it detects.google.github.io · 30 Sept 2026
Testing approach: It combines modern fuzzing techniques with scalable, distributed execution to improve open-source software security and stability.google.github.io · 30 Sept 2026
Fuzzing engines: The documentation lists libFuzzer, AFL++, Honggfuzz and Centipede, with Centipede identified as experimental in the FAQ.google.github.io · 30 Sept 2026
Sanitizers: OSS-Fuzz runs fuzzing engines in combination with sanitizers; AddressSanitizer and UndefinedBehaviorSanitizer are the default supported sanitizers described in the setup guide.google.github.io · 30 Sept 2026
Languages: The site lists C/C++, Rust, Go, Python, Java/JVM, JavaScript and Lua as supported languages.google.github.io · 30 Sept 2026
Architectures: OSS-Fuzz supports fuzzing x86_64 and i386 builds, with i386 not enabled by default.google.github.io · 30 Sept 2026
Build setup: Projects provide a Dockerfile and build.sh script to define the build environment and produce fuzz targets.google.github.io · 30 Sept 2026
Issue reporting: By default, issues are filed in the OSS-Fuzz tracker; projects can opt to mirror them on GitHub.google.github.io · 30 Sept 2026
Access requirement: Project contacts need a Google account for full access to ClusterFuzz, including crash reports and fuzzer statistics.google.github.io · 30 Sept 2026
Eligibility: A project seeking acceptance must be open source and have a significant user base and/or be critical to global IT infrastructure.google.github.io · 30 Sept 2026
Build limit: The setup guide says OSS-Fuzz allows up to four builds per day and builds once per day by default.google.github.io · 30 Sept 2026
Resource limit: The guide states that builders have 250 GB of disk space, including the operating system, and builds must stay below that peak usage.google.github.io · 30 Sept 2026
Alternative deployment: Projects that do not qualify for OSS-Fuzz, including closed-source projects, can run their own ClusterFuzz or ClusterFuzzLite instances.google.github.io · 30 Sept 2026
Maker history and location: Google says it was officially born in August 1998 and that its current headquarters, the Googleplex, is in Mountain View, California.about.google · 30 Sept 2026