Fuzzing

Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines

Google Project Zero's Samuel Groß compares Fuzzilli, a generative JavaScript engine fuzzer, with BigSleep, an LLM-based bug-finding agent, on V8: over six months BigSleep found 45 vulnerabilities to Fuzzilli's 37 with about 25% overlap (around 60% in dedicated experiments), so the two remain complementary and vendors should run both fuzzing and agentic analysis.

Research · Security · AI · Fuzzing