OneFuzz

OneFuzz
Other names	Project OneFuzz
Developer	Microsoft
Release	September 18, 2020 (2020-09-18)
Final release	8.9.0 / October 9, 2023 (2023-10-09)
Written in	Rust, Python
Operating system	Windows, Linux
Platform	Cross-platform
Type	Fuzzer
License	MIT License
Website	www.microsoft.com/en-us/research/project/project-onefuzz/
Repository	github.com/microsoft/onefuzz

OneFuzz is a cross-platform free and open source fuzz testing framework by Microsoft.¹ The software enables continuous developer-driven fuzz testing to identify weaknesses in computer software prior to release.²

OneFuzz is a self-hosted fuzzing-as-a-service platform that automates the detection of software bugs that could be security issues.¹ It supports Windows and Linux.²

Notable features include composable fuzzing workflows, built-in ensemble fuzzing, programmatic triage and result de-duplication, crash reporting notification callbacks, and on-demand live-debugging of found crashes.³² The command-line interface client is written in Python 3, and targets Python 3.7 and up.⁴

Microsoft uses the OneFuzz testing framework to probe Edge, Windows and other products at the company.¹ It replaced the previous Microsoft Security Risk Detection software testing mechanism.²

The source code was released on September 18, 2020.¹ It is licensed under MIT License and hosted on GitHub.⁵

On August 31, 2023, it was announced that development would be coming to an end. On November 1, 2023, the GitHub project was archived.⁵