STAMP (Security Testing Arsenal for Mobile Platforms) is an automated software pipeline to discover unknown zero-day vulnerabilities in mobile platforms. Using STAMP, we have uncovered several zero-day vulnerabilities in iOS, Android and Symbian platforms. We will discuss about our system architecture, results, experience and best practices of running a large-scale vulnerability discovery system.