We find bugs in your software’s software.

The world's software depends on open-source.

We found bugs in it using formal methods.

Click a card in the background to explore.

bugs found
352
public bug reports
212
bugs fixed
139
projects
111

Projects

  • Linux kernel (WireGuard): 4 found, 4 reported, 2 fixed, 0 not yet reported
  • Playwright: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • curl: 12 found, 2 reported, 2 fixed, 10 not yet reported
  • Redis: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • F Prime: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • Selenium: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • nginx: 6 found, 2 reported, 0 fixed, 4 not yet reported
  • Scala 3: 8 found, 8 reported, 6 fixed, 0 not yet reported
  • zlib: 6 found, 5 reported, 3 fixed, 1 not yet reported
  • Pillow: 5 found, 1 reported, 0 fixed, 4 not yet reported
  • OpenSSL: 3 found, 3 reported, 1 fixed, 0 not yet reported
  • 7-Zip: 3 found, 0 reported, 0 fixed, 3 not yet reported
  • Cypress: 3 found, 3 reported, 0 fixed, 0 not yet reported
  • zstd: 9 found, 5 reported, 0 fixed, 4 not yet reported
  • liblzma (xz): 2 found, 2 reported, 0 fixed, 0 not yet reported
  • BoringSSL: 3 found, 0 reported, 0 fixed, 3 not yet reported
  • LZ4: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • Appium: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • stb_image: 10 found, 0 reported, 0 fixed, 10 not yet reported
  • k6: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • libuv: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • Robot Framework: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • WireMock: 2 found, 2 reported, 1 fixed, 0 not yet reported
  • Gatling: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • Locust: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • Ajv: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • REST Assured: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • Karate: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • FLAC: 11 found, 0 reported, 0 fixed, 11 not yet reported
  • musl libc: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • libjpeg-turbo: 3 found, 0 reported, 0 fixed, 3 not yet reported
  • libavif: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • dnsmasq: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • Mbed TLS: 1 found, 0 reported, 0 fixed, 1 not yet reported
  • nghttp2: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • Verilator: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • Icarus Verilog: 4 found, 4 reported, 3 fixed, 0 not yet reported
  • protobuf-c: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • Nanopb: 7 found, 7 reported, 1 fixed, 0 not yet reported
  • c-ares: 5 found, 0 reported, 0 fixed, 5 not yet reported
  • Narya: 9 found, 9 reported, 8 fixed, 0 not yet reported
  • sttp: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • Circe: 3 found, 3 reported, 0 fixed, 0 not yet reported
  • fs2: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • Tapir: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • Monocle: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • Caliban: 11 found, 11 reported, 11 fixed, 0 not yet reported
  • uPickle: 2 found, 2 reported, 0 fixed, 0 not yet reported
  • MUnit: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • Aero: 2 found, 2 reported, 0 fixed, 0 not yet reported
  • Airframe: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • borer: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • Bruno: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • CMP: 3 found, 0 reported, 0 fixed, 3 not yet reported
  • coturn: 3 found, 3 reported, 0 fixed, 0 not yet reported
  • CUPS: 1 found, 0 reported, 0 fixed, 1 not yet reported
  • CWPack: 3 found, 0 reported, 0 fixed, 3 not yet reported
  • decisions4s: 3 found, 3 reported, 1 fixed, 0 not yet reported
  • DeepGEMM-Ascend: 2 found, 2 reported, 0 fixed, 0 not yet reported
  • dotty-cps-async: 7 found, 7 reported, 7 fixed, 0 not yet reported
  • DRAT-trim: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • etl4s: 2 found, 2 reported, 0 fixed, 0 not yet reported
  • fansi: 2 found, 2 reported, 0 fixed, 0 not yet reported
  • flink-scala-api: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • Gearbox: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • Gears: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • geny: 2 found, 2 reported, 0 fixed, 0 not yet reported
  • gguf-tools: 3 found, 2 reported, 0 fixed, 1 not yet reported
  • goja: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • Hearth: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • Hedgehog: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • Heimdall v2: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • humanize: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • Idris 2: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • Iron: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • Kyo: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • Laminar: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • ldbc: 13 found, 13 reported, 13 fixed, 0 not yet reported
  • lean-eval-leaderboard: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • leptonica: 8 found, 8 reported, 6 fixed, 0 not yet reported
  • libfdt: 9 found, 0 reported, 0 fixed, 9 not yet reported
  • libfixmath: 8 found, 0 reported, 0 fixed, 8 not yet reported
  • libpcap: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • libsrtp: 1 found, 0 reported, 0 fixed, 1 not yet reported
  • linux (lib/lz4): 1 found, 0 reported, 0 fixed, 1 not yet reported
  • Linux kernel: 7 found, 1 reported, 0 fixed, 6 not yet reported
  • LoRaMac-node: 1 found, 0 reported, 0 fixed, 1 not yet reported
  • Magnolia: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • onnx-scala: 2 found, 2 reported, 0 fixed, 0 not yet reported
  • Ox: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • picohttpparser: 1 found, 0 reported, 0 fixed, 1 not yet reported
  • Pillars: 6 found, 6 reported, 0 fixed, 0 not yet reported
  • PPrint: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • quicklens: 1 found, 1 reported, 1 fixed, 0 not yet reported
  • quote4: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • record4s: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • ScalaSQL: 7 found, 7 reported, 0 fixed, 0 not yet reported
  • Scalus: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • snapshot4s: 1 found, 1 reported, 0 fixed, 0 not yet reported
  • Soundness: 16 found, 16 reported, 16 fixed, 0 not yet reported
  • strymonas: 2 found, 2 reported, 0 fixed, 0 not yet reported
  • tiny-regex-c: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • TinyCBOR: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • tinycrypt: 1 found, 0 reported, 0 fixed, 1 not yet reported
  • umm_malloc: 1 found, 0 reported, 0 fixed, 1 not yet reported
  • Unwrapped: 2 found, 2 reported, 0 fixed, 0 not yet reported
  • uzlib: 2 found, 0 reported, 0 fixed, 2 not yet reported
  • workflows4s: 2 found, 2 reported, 2 fixed, 0 not yet reported
  • wvlet: 3 found, 3 reported, 3 fixed, 0 not yet reported
  • x-algorithm: 4 found, 4 reported, 0 fixed, 0 not yet reported
  • yaes: 1 found, 1 reported, 1 fixed, 0 not yet reported

About

Our clients’ software depends on open source. Strong guarantees for their code require strong guarantees about its dependencies.

Software breaks in unexpected ways. This causes costly failures and is often exploited by attackers wielding advanced AI tools. Formal methods offer a powerful defense: we can mathematically guarantee the absence of entire classes of bugs.

We find subtle failures in mature, widely used, complex codebases. These projects have gone through years of testing and real-world use, and still bugs persist. Each verified library helps us verify the software built on top of it.

We respect maintainers’ time. Each bug report we send gets reviewed by a member of our team. Maintainers accept >93% of our bug reports.

All projects

111 projects. Select a square to view its bug report or project summary.

SeverityCriticalHighMediumLowInfoNot rated

Latest feed unavailable or not fully assessed; showing the last reviewed public snapshot (2026-11-05).

ProjectStatsBugs found
VPN networking in Linux 254,426 stars
Browser testing and automation 472M / mo99,334 stars
Data transfer tool 43,392 stars96k / moHomebrew
In-memory database and cache 77,194 stars27k / moHomebrew
NASA’s flight software framework 11,856 stars44 / moPyPI
Browser automation framework 35M / mo34,578 stars
Web server and proxy 32,053 stars9.2k / moHomebrew
The Scala language 6,332 stars766 / moHomebrew
Data compression library 7,187 stars10.0k / moHomebrew
Image processing for Python 436M / mo13,970 stars
TLS and cryptography library 235k / mo31,192 stars
File compression and extraction 24k / mo4,398 stars
Browser testing framework 24M / mo51,021 stars
Data compression library 197k / mo28,167 stars
Data compression library 358k / mo1,709 stars
Google’s TLS and cryptography library —
Data compression library 179k / mo12,209 stars
Mobile app testing framework 4.7M / mo22,183 stars
Image loading library 34,940 stars
Load testing tool 32,144 stars4.4k / moHomebrew
Asynchronous I/O library 27,308 stars88k / moHomebrew
Test automation framework 3.9M / mo11,981 stars
Simulated APIs for testing 7,418 stars
Load testing framework 6,958 stars
Load testing with Python 9.4M / mo28,262 stars
JSON schema validator 1.6B / mo14,871 stars
API testing for Java 7,147 stars
API testing framework 9,005 stars
Lossless audio compression 15k / mo2,469 stars
The C standard library —
JPEG image processing 113k / mo4,459 stars
AVIF image processing 22k / mo2,219 stars
DNS and DHCP server 2.0k / mo
TLS for embedded devices 7,051 stars3.4k / moHomebrew
HTTP/2 networking library 5,075 stars2.7k / moHomebrew
Digital circuit simulation 4,059 stars1.3k / moHomebrew
Digital circuit simulation 3,718 stars688 / moHomebrew
Protocol Buffers for C 3,006 stars2.9k / moHomebrew
Protocol Buffers for embedded devices 420k / mo5,602 stars
Asynchronous DNS lookups 107k / mo2,207 stars
A proof assistant 315 stars
HTTP client for Scala 1,506 stars
JSON processing for Scala 2,543 stars
Data streaming for Scala 2,456 stars
API definitions for Scala 1,476 stars
Tools for updating nested data 1,701 stars
GraphQL APIs for Scala 993 stars
JSON and binary encoding 768 stars
Unit testing for Scala 472 stars
A decentralized token exchange —
Application libraries for Scala 666 stars
JSON and CBOR encoding 242 stars
API testing tool 1.1M / mo48,177 stars
MessagePack data encoding 370 stars
14,538 stars325 / moHomebrew
18k / mo1,792 stars
MessagePack data encoding 154 stars
Business rules for Scala 85 stars
Matrix multiplication for Ascend chips 630 stars
Async/await for Scala 194 stars
A SAT proof checker 73 stars
Data pipelines for Scala 81 stars
Colored terminal text 237 stars
Apache Flink for Scala 113 stars
—
Async programming for Scala 306 stars
Data iteration for Scala 98 stars
Tools for AI model files 373 stars
JavaScript engine for Go 7,187 stars
Tools for writing Scala macros 166 stars
Property testing for Scala 268 stars
42 stars
381 stars
3,105 stars89 / moHomebrew
Type constraints for Scala 562 stars
An effect system for Scala 822 stars
Web interfaces in Scala 839 stars
Database access for Scala 110 stars
29 stars
15k / mo2,099 stars
Device tree manipulation 5.2k / mo332 stars
Fixed-point arithmetic library 889 stars
3,185 stars3.0k / moHomebrew
Secure media transport 1,403 stars2.8k / moHomebrew
254,426 stars
254,426 stars
LoRaWAN device networking 2,002 stars
Automatic Scala typeclass derivation 800 stars
Machine learning for Scala 151 stars
Concurrency and streaming for Scala 529 stars
HTTP request parsing 2,113 stars
Backend framework for Scala 33 stars
Readable Scala value formatting 248 stars
Tools for updating nested data 852 stars
Code generation for Lean 111 stars
Extensible records for Scala 68 stars
SQL queries from Scala 259 stars
Cardano smart contracts in Scala 57k / mo106 stars
Snapshot testing for Scala 69 stars
General-purpose Scala libraries 114 stars
Data streaming for Scala 56 stars
Regular expression matching 1,510 stars
CBOR data encoding 642 stars32 / moHomebrew
Cryptography for embedded devices 522 stars
Memory allocation for microcontrollers 492 stars
Structured concurrency for Scala 40 stars
Compression for embedded devices 353 stars
Business workflows for Scala 131 stars
A database query language 158 stars26 / moPyPI
34,085 stars
An effect system for Scala 140 stars

For AI agents: llms.txt · llms-full.txt · data.json