Bug testing for risk generation