State machine inference, aka active automata learning, is effectively a form of fuzzing for stateful systems. This talk will give an overview of using this technique to test the security of a variety of systems. We will also discuss the relation with LangSec (language-theoretic security) and ongoing work in combining fuzzing and state machine learning.