{
  "slug": "oss-crs",
  "name": "OSS-CRS and other AIxCC finalists",
  "tagline": "OpenSSF's integrated distribution of ARTIPHISHELL, BugBuster, Lacrosse and others",
  "maintainer": "OpenSSF and the AIxCC finalist teams",
  "url": "https://arxiv.org/abs/2602.07666",
  "category": "aixcc",
  "targets": [
    "C",
    "Java",
    "OSS-Fuzz projects"
  ],
  "approach": "Packaging of finalist components (Shellphish ARTIPHISHELL, 42-b3yond-6ug BugBuster, all-you-need-is-a-fuzzing-brain, Lacrosse) for open-source maintainers",
  "license": "Open source",
  "status": "Active",
  "summary": "OSS-CRS is OpenSSF's effort to integrate the open-sourced AIxCC finalist systems, including Shellphish's ARTIPHISHELL, BugBuster, all-you-need-is-a-fuzzing-brain and Lacrosse, so open-source maintainers can run them against OSS-Fuzz projects.",
  "details": [
    "For cryptographic libraries already in OSS-Fuzz, this is the lowest-friction route to AIxCC-class scanning."
  ],
  "strengths": [
    "Maintainer-oriented packaging.",
    "Multiple systems in one."
  ],
  "limits": [
    "Early integration.",
    "Requires OSS-Fuzz style harnesses."
  ],
  "fit": [
    "Use if your library is in OSS-Fuzz."
  ],
  "references": [
    [
      "AIxCC systems SoK (arXiv 2602.07666)",
      "https://arxiv.org/abs/2602.07666"
    ]
  ],
  "category_name": "Cyber reasoning systems (DARPA AIxCC)",
  "page": "https://agentsast.com/tools/oss-crs/",
  "updated": "2026-09-13"
}