What Bonsai is

Bonsai turns idle computers into a swarm that fuzz-tests open-source software and pays for the bugs it finds. This page is the whole idea in one screen.

The short version

Fuzzing means feeding a program strange, malformed, mutated inputs until it does something it was never meant to do: read out of bounds, use freed memory, overflow a buffer. It is one of the most productive ways we have to find real bugs. Google's OSS-Fuzz has used it to surface more than 13,000 vulnerabilities across roughly a thousand open-source projects.

That kind of fuzzing usually runs on a company's own fleet. Bonsai opens it up. Anyone can lend compute from a browser tab or a desktop client, projects fund campaigns against approved targets, and the whole thing runs as a marketplace on Robinhood Chain. A campaign deposit pays the people whose machines did the work.

What makes it different

The fuzzing is not the novel part. Making distributed fuzzing accessible, visible, contributor-powered, and paid is. You do not need to understand sanitizers or coverage-guided mutation to help. You open the page, your browser joins the swarm, and you watch your contribution grow a living picture of the program being tested.

Who it is for

Contributors lend spare cycles and earn $BONSAI for useful work. Projects buy security campaigns against their own code. Communities pool funds to point the swarm at software they depend on. The three meet in the campaign market, and none of them has to trust the others, because verification sits in the middle.