Bright Security launches STAR Fuzzer for agentic harness generation
Original title: Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding
The vendor says a first research run flagged High or Critical issues in 45% of projects tested.
Bright Security launched STAR Fuzzer, a mode of its STAR platform available at brightsec.com/fuzzer. AI selects security-critical functions and writes harnesses, while an evolutionary engine searches for crashes, memory exhaustion and memory-safety bugs without a running application. The company says the first open-source run found High or Critical issues in 45% of projects, and the first month produced ten published findings in eight projects, including the Crystal standard library, htop and RIOT OS.
Unconfirmed: Finding counts and coverage figures are Bright Security's own claims and are not independently verified.
- Confirmed findings include a byte-exact payload that reproduces the crash.
- Named projects include the Crystal standard library, htop and RIOT OS.
- A libxml2 harness reached about 13,600 regions in a 5-million-execution run, the vendor says.
- Vendors
- Bright Security
- Products
- STAR FuzzerBright STAR
From the original article
11 min read at gbhackers.com
San Rafael, United States, October 19th, 2026, CyberNewswire Built on an evolutionary engine first released in 2018, STAR Fuzzer by Bright Security finds crashes, memory exhaustion and memory-safety bugs in security-critical code without a running application. In its first open source research run, it found High or Critical issues in 45% of the projects tested, […]
By CyberNewswire · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.