Fuzz testing supplies software with malformed or unexpected inputs to expose failures and vulnerabilities. It is especially useful as a security check for AI-generated code, alongside careful human review. section 11.9.1
Use fuzz testing when reviewing code that:
- Handles authentication, data access, or user input, where unexpected inputs can create security problems. section 11.9.1
- Was generated or modified by an AI assistant and therefore requires the same security standards and review process as human-written code. section 11.9.1
Practical review
After an AI assistant produces code for a login or data-access component, run security scanners and fuzz testing before treating the implementation as ready. Use the results to guide human review rather than assuming generated code is safe. section 11.9.1






