How FuzzBuzz Is Making Fuzzing More Mainstream

By Dan Anderson ● May 7, 2019


Mountain View, California-based FuzzBuzz is a fuzzing-as-a-service platform company that automates and manages fuzzing at scale. What is fuzzing? It is a type of automated software testing that intelligently generates and performs thousands of tests against your code per second to see if it breaks. Then it uses the feedback and results to generate new cases. By covering as much code as possible, it becomes easier to find bugs and edge cases that developers may have missed.

Recently FuzzBuzz announced it raised $2.7 million in seed funding led by FUEL Capital. Homebrew and Susa Ventures also participated in this round along with angel investors like Docker cofounder Solomon Hykes, Mesosphere cofounder Florian Leibert, and Looker cofounder Ben Porterfield. Fuzzbuzz is going to be using the funds to make some key engineering hires — which will allow the company to continue scaling the platform and iterate on fuzzing algorithms. Plus it will build out support for Java, Ruby, and Javascript fuzzing.

Fuzzbuzz was founded by Sabera Hussain, Andrei Serban, and Everest Munro-Zeisberger last year. Munro-Zeisberger realized the benefits of fuzzing while working on the Google ClusterFuzz team. This team collectively found more than 15,000 bugs in Chrome. And the Fuzzbuzz team immediately recognized the opportunity for bringing fuzzing to smaller companies that do not have the resources for building a robust fuzzing pipeline within the company. Then the team set out to build a platform that allows companies of any size to fuzz without having to bring in a dedicated team of full-time engineers to handle those efforts.

Now anyone can set up a fuzz through Fuzzbuzz in under 20 minutes. It gets hooked directly into GitHub and your CI/CD pipeline. Then it categories and de-duplicates each bug that is found. Once bugs are found, you will be notified through Slack or Jira. And with Fuzzbuzz CLI, developers are able to test and fix the bug locally before pushing the code back up to GitHub.

“We are so excited to be working with Fuzzbuzz,” said FUEL Capital general partner Chris Howard. “While still in its infancy, fuzzing has the potential to massively advance the vulnerability testing of code bases, helping developers scale the process, particularly as they shift toward continuous deployment. We are bullish on Fuzzbuzz because we’ve seen the immense opportunity that exists when technologies that large consumer companies develop in-house to help them scale certain processes are made accessible to smaller companies with limited resources. We’ve seen it firsthand with Cloudera commercializing Hadoop, Pagerduty evolving out of the team that carried old-school pagers to report incidents when they worked at Amazon, and Mesosphere developing Mesos as Twitter and Airbnb were scaling.”

Fuzzbuzz graduated from the most recent Y Combinator class. During Y Combinator’s demo day, Fuzzbuzz started fuzzing code for organizations like Ethereum, Google, and IPFS.

Originally, Fuzzbuzz was founded at the Waterloo-based incubator Velocity. And it raised a $25,000 CAD seed round from Velocity.

Exit mobile version