Tool integration

ClusterFuzz Integration Guide

Google's scalable distributed fuzzing infrastructure that powers OSS-Fuzz

Get a Free API Key

Integrate ClusterFuzz with Vulnetix. Deploy ClusterFuzz for internal fuzzing at scale, monitor crash findings via the web UI and API, and export discovered vulnerabilities to Vulnetix.

SaaS platformJSON

Install & scan

$ # Deploy ClusterFuzz on GCP
git clone https://github.com/google/clusterfuzz
cd clusterfuzz
python butler.py create_config
python butler.py deploy
$ # ClusterFuzz REST API (requires API key from ClusterFuzz admin)
CF_URL="https://your-clusterfuzz.appspot.com"
CF_TOKEN="your-access-token"

# List open testcases
curl -s "${CF_URL}/testcases/load"   -H "Authorization: Bearer ${CF_TOKEN}"   | jq '.testcases' > clusterfuzz-crashes.json

vulnetix upload --file clusterfuzz-crashes.json

Centralise ClusterFuzz results in Vulnetix

Upload ClusterFuzz JSON output to the Vulnetix platform to deduplicate findings, prioritise them with EPSS, CISA KEV and Coalition ESS exploit intelligence, and track remediation across every scanner in a single queue.

ClusterFuzz documentation ↗  ·  Source repository ↗

Wire ClusterFuzz into your CI/CD pipeline →