Consider signing up Kea for the free Google OSS-fuzz scanning program
You add your project to the google oss-fuzzing project by submitting a pull request. We did this for BIND. It uses multiple fuzzers, and I think in the case of BIND, we were already running all but one of these in house. They don't publish your bugs right away, but report them to the project privately first, so you can fix them before they are published.