Hi HN, I'm Stephan.
I'm an ex-CTO and many companies I look in today, want to get AI coded apps into production, but engineering code reviews are the new bottleneck - and engineers don't even love to do them.
No more code reviews. Fuzz instead.
appfuzz works with WASM and runs the .wasm thousands of times against a simulated backend and reports problems: crashes, n+1 queries, XSS, SQL injection, leaked secrets, blown IO/CPU/instruction budgets.
Try it of your own - you don't need an app for the demo:
Why: agents write code faster than anyone can review it, and in many companies people outside engineering (marketing, sales, support) want to ship apps too - pressure from the CEO is high.
But then engineers get the pager alerts.
One way to make them safer is to treat them like iPhone/iOS apps: sandbox, permissions, app review (what appfuzz does).
It works with Wasm components in any language, Spin, wasmCloud, Fastly Compute, and Shopify Functions.
MIT. Very early state.
Which platform should I add, and what should it look for?
Comments URL: https://news.ycombinator.com/item?id=50412646
Points: 4
# Comments: 0
