Ross ROSS = Recommend OSS · open-source software intelligence for agents

google/oss-fuzz

OSS-Fuzz - continuous fuzzing for open source software. observed · 2026-08-28

github.com/google/oss-fuzz · homepage · Shell · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

77/100

  • Activity 99
  • Release rhythm 35
  • Longevity 100

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 3696
  • days_rel: n/a
  • days_push: 7
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

12594 stars · 2875 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

OSS-Fuzz is Google's free continuous fuzzing service for open source software, combining fuzzing engines like libFuzzer, AFL++, and Honggfuzz with sanitizers and distributed execution via ClusterFuzz. It has helped find over 13,000 vulnerabilities and 50,000 bugs across 1,000+ projects since 2016.

Use cases

  • find security vulnerabilities in my open source c/c++ library
  • continuous fuzz testing for a rust or go project
  • detect buffer overflows and memory bugs automatically
  • set up fuzzing in ci for an open source project
  • fuzz a java or python codebase for crashes
  • run a self-hosted fuzzing service for closed source code

When to choose

  • your open source project is written in C/C++, Rust, Go, Python, Java, JavaScript, or Lua and handles untrusted input
  • you want free, scalable, continuously running fuzzing with bug reporting
  • you want to catch memory-safety and stability bugs before attackers do

When to avoid

  • your project is closed source and you don't want to self-host ClusterFuzz or ClusterFuzzLite
  • your code has no meaningful input parsing surface for fuzzers to exercise
  • you need quick one-off fuzzing without build integration effort

Facets

service · maturity active

fuzzing testing security vulnerability-scanning ci-cd security developer-tools testing cloud cli fuzz-testing libfuzzer afl sanitizers clusterfuzz continuous-fuzzing oss-security open-source linux docker

2 sources

Member repositories

RepositoryRoleHealth v2
google/oss-fuzzmain77

For agents

markdown · JSON · MCP: product_card(name="google/oss-fuzz")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem