Atheris
Metrics as of , from the GitHub or GitLab API of each repository. Refreshed monthly.
What Atheris is
Atheris is a coverage-guided fuzzing engine for Python code and for native CPython extensions. It is built on libFuzzer. The README lists support for Linux and Mac OS X with Python 3.11 through 3.14. A fuzz target is a Python function that receives input bytes, registered through Setup() and started with Fuzz(). Atheris reports a failure when the code under test raises an uncaught exception. Coverage comes from bytecode instrumentation of imported libraries, single functions, or all loaded functions. Native code fuzzing can pair with Address Sanitizer or Undefined Behavior Sanitizer. Structure-aware fuzzing with protocol buffers works through libprotobuf-mutator bindings. OSS-Fuzz supports Atheris targets.
Written from the project's README, read .
- Category
- Security testing
- License
- Apache-2.0
- Language
- Python
- Changelog
- Releases on GitHub
Repository metrics
Status
slowLast commit 91 to 365 days before the fetch date.Computed from the last commit date and the archive flag on the fetch date. See the status rules.
Alternatives
Listed security testing tools, same primary language first, then by GitHub stars. Each line gives one fact from the tool's documentation where it differs from Atheris's, with its source.
sqlmap: Scan targets: Web application parameters: GET, POST, cookie, User-Agent and Referer values. source: Docs: Features
garak: Scan targets: LLMs and dialog systems reached through generators. source: README
Bandit: Scan targets: Python code, for common security issues. source: README
OWASP Nettacker: Scan targets: IPv4 addresses, IP ranges, CIDR blocks, domain names and HTTP/HTTPS URLs. source: README
RESTler: Scan targets: Cloud services through their REST APIs. source: README
Trivy: Scan targets: Container images, filesystems, remote Git repositories, virtual machine images, Kubernetes. source: README
Nuclei: Scan targets: Target URLs and hosts, from a single target or a list file. source: README
Gitleaks: Scan targets: Secrets such as passwords, API keys and tokens in git repositories, files and stdin. source: README
How to install
pip3 install atherisQuestions
Is Atheris open source?
Yes. Atheris is released under Apache-2.0, an OSI-approved license, as reported by the GitHub API on 2026-09-22.
Is Atheris maintained?
On 2026-09-22, the last commit to the default branch was on 2026-06-17, so the listed status is slow. Rule: Last commit 91 to 365 days before the fetch date.
How many GitHub stars does Atheris have?
1,678 stars on 2026-09-22, from the GitHub API. The number is refreshed at each monthly update.
What language is Atheris written in?
The repository's primary language, as reported by the GitHub API, is Python.
How do I install Atheris?
The README gives this command: pip3 install atheris
Sources
- GitHub REST API: repository, read
- GitHub REST API: commits, read
- GitHub REST API: tags, read
- GitHub REST API: contributors, read
- README, read