The request names Go and asks for a fuzz testing tool. Trail of Bits offers Go-relevant fuzzing guidance and tools, while AFL++ is a general coverage-guided fuzzing framework; the Go source pages shown here (Staticcheck, revive, git-codereview) are linters or workflow tools that do not themselves fuzz, so they are omitted.
- 1
Trail of Bits fuzzing tools (libFuzzer, LibAFL, Ruzzy)trailofbits.comverified and signed
Trail of Bits publishes coverage-guided fuzzing tools and guidance, including libFuzzer harness setup 12; Go fuzzing is not shown explicitly on its page, so the libFuzzer action is the closest indexed fuzzing record.
for agents: libafl · ruzzy · libfuzzer
- 2
Sources
- 2Trail of Bits: Security Research, Audits, and Toolstrailofbits.com · read 2026-10-29
- 3The AFL++ fuzzing framework | AFLplusplusaflplus.plus · read 2026-10-29
- 12libafl: declares "libafl" (the record we read and signed)unfragile.ai · read 2026-10-24
For agents: the 10 actions behind this answer
· golang.org/x/review/git-codereview Godoc website read, tools not yet checked
· golang.org/x/review/git-codereview website read, tools not yet checked
libafl · libafl verified and signed
Builds custom fuzzers with LibAFL, the modular Rust fuzzing library. Covers composing observers, feedbacks, mutators, schedulers, and executors into a fuzzer for targets the standard tools do not fit. Use when writing a bespoke fuzzer or mutator, fuzzing a non-standard target or architecture, implem
· AFLplusplus website read, tools not yet checked
The AFLplusplus website
· Playwright website read, tools not yet checked
Web automation and testing for apps, scripts, and AI agents
· Staticcheck website read, tools not yet checked
Staticcheck is a state of the art linter for the Go programming language. Using static analysis, it finds bugs and performance …
· ghz website read, tools not yet checked
gRPC benchmarking and load testing tool
· Secure Go website read, tools not yet checked
A project devoted to secure programming in the Go language
testing · Testcontainers verified and signed
· GoReplay website read, tools not yet checked
Open-source tool to capture live HTTP on a server and replay it against staging for shadow tests, load tests, and debugging. Use a suitable capture point and an isolated replay target.
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.