Skip to content
Close
SEARCH
Book a demo
Book a demo
Our Products
CI FuzzFinds the hidden bugs in software
CI SparkAutomates code test generation
Product Demo
Our Solutions
Application securityMaximum code coverage
Testing efficiencySecure software with less effort
Vulnerability detectionFix vulnerabilities in your software
Security & ComplianceCheckbox vs. Checklist
ISO 21434 Comply with testing requirements
By Industry
AutomotiveSoftware testing without hardware dependencies
Medical DevicesFuzz testing for medical device security
Using Code Intelligence
Documentation
CI Fuzz
CI Spark
Learn & Connect
Blog
Webinars
White papers & Checklists
About Code Intelligence
Newsroom
Contact Us

CI Fuzz. Efficient dynamic testing.

CI Fuzz ensures robust and secure code with test coverage up to 100%. Use CI Fuzz from command line or in the IDE of choice to generate thousands of test cases automatically.

BOOK A DEMO
I got a question
Container
TRUSTED BY
google-2015-3Deutsche_Telekom_2022 1-3bosch-logo-simple 1-2Secunet_Security_Networks_Logo-2Continental_AG_logo 1-2Cariad_Logo-2ETAS-Logo-2

Writing code with no bugs?

Watch a short video of how CLI-integrated fuzz testing can be used to uncover bugs
and vulnerabilities in Java and JavaScript/Typescript.

From 0 to 80 in 2 seconds. Code Coverage with CI Fuzz.

CI Fuzz analyzes code as it runs. Just like a unit test, but with AI support to efficiently cover all paths through the code.
Bug Find truly relevant and hidden issues and dig deeper every minute

Resolve issues seamlessly with instant access to a full stack trace at your fingertips.

Find truly relevant issues
Uncover real bugs in real time and say goodbye to theoretical issues and false positives. Find real issues with all the information needed to quickly reproduce and fix them.
Watchly Boost efficiency and reduce the number of tests needed

Let CI Fuzz automatically search for issues in the code and dig deeper every minute.

Boost efficiency
Conduct real-time code analysis with CI Fuzz. Take unit tests to the next level. It employs AI for comprehensive code path coverage and automatic generation of thousands of test cases.
Monitor Fix business critical bugs early in the development process

Maximize pipeline performance that doesn't compromise software integrity.

Fix business critical bugs
Test your code with maximum code coverage and automatically detect typical security relevant bugs like injections and remote code executions automatically in one go. Get fully covered to deliver highest quality software.

What is Fuzz Testing?

Are you looking to learn more about fuzzing? Our extensive article describes the fuzzing benefits, industries that use fuzzing, best practices and how to get started. 
block-code

Build better software in compliance with industry standards.

Logos

 

Languages, OS Support and Integration

Trust in our high end C/C++ support. For memory safe languages, we specialize in Java, and JavaScript/TypeScript.

CI Fuzz seamlessly operates on your workstation or laptop, supporting Linux, Mac, and Windows.

Experience the best IDE integration, mimicking JUnit (Java) or Jest (JavaScript/TypeScript) tests, fully compatible with your preferred IDE.

➜ Elevate your coding experience with ci fuzz, book a free demo!

Logos blue - mobile

Languages, OS Support and Integration

  1. We specialize in Java, and JavaScript/TypeScript.
  2. CI Fuzz seamlessly operates on your workstation or laptop, supporting Linux, Mac, and Windows.
  3. Experience the best IDE integration, mimicking JUnit (Java) or Jest (JavaScript/TypeScript) tests, fully compatible with your preferred IDE.

➜ Elevate your coding experience with ci fuzz

Security and Compliance

While walking through the code, CI Fuzz does numerous security checks to ensure protection against OWASP security issues like injections and remote code executions. No additional work or tools are required.

Regression testing built in. All found issues will always be regression tested first.

security and compliance
security and compliance

Security and Compliance

  1. While walking through the code, CI Fuzz does numerous security checks to ensure protection against OWASP security issues like injections and remote code executions. No additional work or tools are required.
  2. Regression testing built in. All found issues will always be regression tested first.
data_privacy

Data Privacy

CI Sense executes on a local machine, runs on your virtual private cloud or other infrastructure and requires no internet connection.

➜ BOOK A DEMO

Workflow and Process Integration

Provides all detailed insights to view and optimize the code coverage of your tests.

Reports real issues only. Assessment is on you. You decide if and when to fix an issue. Without hassle and with automatic issue deduplication built in.

Provides functionality to collaborate and exchange issues in your organization.

workflows
workflows

Workflow and Process Integration

  1. Provides all detailed insights to view and optimize the code coverage of your tests.
  2. Reports real issues only. Assessment is on you. You decide if and when to fix an issue. Without hassle and with automatic issue deduplication built in.
  3. Provides functionality to collaborate and exchange issues in your organization.

“The developer firewall” in a real empowered shift left scenario.

CI Fuzz supports developers when writing code and locally executing AI tests just from the IDE exactly like for Unit Tests.
The developer firewall

Full transparency and control of what is tested and all flexibility to optimize tests based on needs. No black box voodoo with no control.

Results are put out on a local machine while writing code. For regression testing and for the AI powered issue discovery mode.

No new tooling, no new processes. Just like every Unit Test.

Covers negative testing for hidden issues and edge cases. Find more time to focus on the business logic.

Protects any refactoring and ensures behavior does not change.

Full support for Unit, API and other Integration tests.

Frequently asked question CI Fuzz

Does CI Fuzz find all bugs in software?

No other testing method can generate most relevant test cases faster. While executing we find most issues like exception’s error responses or security vulnerabilities. Testing the business logic for the expected results will still be done with a few standard tests.

CI Fuzz does find all the unexpected behavior for edge case input. Does it find all security issues?

We focus on OWASP Top 10 issues and protect against injections of various types, remote code execution and many more. For system and infrastructure security (server versions, web server configuration, fire walls) use methods like pen testing.

Can CI Fuzz help with functional testing as well?

Wherever you can ensure some code to be functional by e.g. processing an input and in another call undoing this with the output, CI Fuzz can safely test this is the case for all potential input. When you need to ensure a new code segment produces the same results as old code did, CI Fuzz is your tool. CI Fuzz will not be able to check your business logic: Certain input needs to result in certain output. For this you will use your standard tests.

What in a nutshell makes CI Fuzz so special?

It is the different approach. Typical tests check one input and ensure specific output. May it be the expected business processing. May it be input considered to be invalid and handled properly. CI Fuzz automatically finds input that causes different code to be executed. CI Fuzz hooks in all calls and evaluation of conditions like if-then-else and finds ways to trigger different results. And on top and while doing this, all code is security checked.

Can CI Fuzz reach 100% code coverage?

Yes, absolutely. For some code additional input from the person knowing the code might be needed to get the last mile from 80 to 100. CI Sense allows to analyze and easily add required information.

Is there an easy rule of thumb when exactly CI Fuzz replaces a lot of tests and allows to focus on business logic?

In all situations where you can envision a test "Under no circumstances X must ever happen", CI Fuzz is your help to fully cover. You just add a few standard tests to ensure business logic. Security is tested on the fly. All done.

“One of the biggest advantages of instrumented fuzz testing is that you can execute your code in a Software-in-the-Loop simulator. My favourite part of instrumented fuzzing is that finding the root cause is so easy, and for a manager, it means I can save budget.”
Michael von Wenckstern 2024
Michael Von WencksternProduct Cybersecurity Governance, Risk and Compliance Specialist, Continental AG
"Thanks to Code Intelligence fuzzing approaches, our security testing became significantly more effective. All our developers are now able to fix business critical bugs early in the development process, without false-positives."

 

Andreas Weichslgartner
Andreas WeichslgartnerSenior Technical Security Engineer, CARIAD
”Thanks to Code Intelligence we were able to remediate deeply hidden issues, allowing us to ensure our vehicular software’s optimal functionality and safety. Coming up with the right unit tests for these cases would have been super difficult. With Code Intelligence’s AI-powered tests, we had the first finding within hours!”
saleh-heydari
Saleh HeydariVP of Software Engineering, XOS Trucks
”Code Intelligence helps developers ship secure software by providing the necessary integrations to test their code at each pull request, without ever having to leave their favorite environment. It's like having an automated security expert always by your side.”
thomas-dohmke
Thomas DohmkeCEO, GitHub

Ready to start your security journey?

Book a demo to find out how Code Intelligence can help you uncover edge-case bugs and vulnerabilities with every code change. We will walk you through the product and answer your questions.

Discover how automated bug and vulnerability detection pre-pen testing, will speed up software development while assuring stable and secure software.

Autogenerate test cases that can identify bugs and vulnerabilities beyond the reach of traditional testing tools.

Join industry leaders like CARIAD, Bosch and Continental and become compliant with ISO 21434 and many other industry norms.

Security resources

Vector

CI Fuzz |
The Code Intelligence Docs

CI Fuzz is command line tool for creating fuzz tests. CI Fuzz is tightly integrated with various build systems, enabling developers to create fuzz tests as easily as unit tests. Please visit the Download Portal.
Vector

CI and Google Secure Open-Source JavaScript Landscape

Collaboration will allow open-source developers to continuously test their JavaScript components for bugs and vulnerabilities, and assist them in writing more secure and reliable code.
Vector

Download the Code Intelligence Fuzzing Fact Sheet

The fact sheet contains a brief summary, how fuzzing enables developers to ship secure software fast. It comes with recommendations, that help you to evaluate if this technology is relevant for your team.