Zsolt Imre — Fuzz testing is easy

Fuzz testing can sound specialized and difficult, but Zsolt Imre argues that teams can start small and learn quickly. He joins Chris and Robert to explain what fuzzers do, which defects they are good at finding, and how his path from offensive security to defensive engineering shaped GUARDARA. The conversation covers target selection, root-cause analysis, programming languages, protocol complexity, and why no single fuzzer fits every system. Zsolt offers a practical adoption path: choose a meaningful target, integrate feedback into development, and iterate. The result is an accessible guide for AppSec teams that want to add fuzzing without turning it into a research project.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Security Journey provides application security education for developers and everyone in the software development lifecycle.
→ Learn more about Security Journey

Connect with Zsolt Imre:
→ GUARDARA

Mentioned in this episode:
→ GUARDARA

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Why fuzz testing is easier than it looks
02:00 Zsolt Imre’s path into security
04:00 Moving from offensive to defensive work
07:00 What fuzz testing actually does
09:00 Who benefits from fuzzing
13:00 Finding and understanding root causes
18:00 Choosing targets and programming languages
23:00 Complexity, protocols, and coverage
26:00 Why there is no one-size-fits-all fuzzer
29:00 A practical way to get started
34:00 Integrating fuzzing and iterating
36:00 Final takeaways