Competition shows it is possible to discover and patch vulnerabilities in open-source programs without human aid.