AFL might be security-oriented, but I think it should be part of the testing strategy for any software that reads input. Right now at work I'm modifying an old

AFL might be security-oriented, but I think it should be part of the testing strategy for any software that reads input. Right now at work I'm modifying an old C++ codebase, and knowing that AFL can't crash it is just one of the main things letting me sleep at night. (When I first set it up, it almost immediately found two minor bugs that were obvious in retrospect).