Ask HN: Would you pay for fuzzing as a service?

3 pointsfuzz_saas3 comments

Fuzzing has discovered security vulnerabilities in a lot of production code, and generates useful test cases for programs - http://lcamtuf.coredump.cx/afl/

It requires a lot of computational power, since it tries random (guided) inputs into the program.

Would you pay for a SaaS product that discovers security vulnerabilities/generates interesting test cases using a fuzzer like AFL?

View on HN

Such a product exists: https://www.tinfoilsecurity.com/ . It's pretty good and we pay $199/month. But they have not been active recently and the company may be dying without enough business to support them.

Yeah, Tinfoil's got a good product. They're definitely still active and I think they're business is doing pretty well.

I tried to create one of these a few months ago https://github.com/frewsxcv/lop.farm

Send me an email if you want to team up on this: coreyf@rwell.org

Reply on news.ycombinator.com