A testing process that supplies structured but invalid input to software application programming interfaces (APIs) and network interfaces to maximize the likelihood of detecting errors that might lead to software vulnerabilities.