Fortify Software

Home Products Software Security Governance

Reporting and Governance

Fortify 360 allows your organization to centrally manage, track, and report on the process of testing and securing applications. Security managers can track projects over time, identify trends, generate reports for higher level management, and collaborate with developers to fix issues.

Centralized Project Management

With Fortify 360, security auditors can manage multiple audit projects from a single console. They can also set and monitor security policy for all software projects that are subject to audit compliance and automatically generate reports for management, security and development teams. In addition, auditors can mitigate risks associated with outsourced development by applying policy to incoming code.

Trend Analysis

Fortify 360 offers trend analysis, allowing organizations to track the process of securing applications over time.

Comprehensive Reporting Capabilities

Fortify 360 allows your organization to assess and report on the security state of every application as it moves from development, to test, to production and back to development. It consolidates and correlates all data into accurate and precise reports for your management and auditing requirements.

Contact me about products from Fortify Software

Fortify in the news

Contact Fortify Software

"We strongly believe that Fortify's holistic approach to application security - implementing security during all stages of development, rather than after the fact - proactively helps eliminate business risk and truly safeguards our enterprise against today's ever-changing security threats."

Craig Shumard, CISO, CIGNA

"We looked into a number of tools and tested them against our source base. The vast majority of them could not handle the size, scope and nature of our applications. Of all the products we tested, Fortify came closest to our technical requirements."

Oracle

"Fortify is one of the largest SAST vendors, with strong innovation as well as execution capabilities. It has expanded its technologies beyond SAST into a broader spectrum of application security disciplines that supplement its core SAST capabilities."

Gartner MQ

"Auditing at the source code level is the best way to protect applications early in the SDL. Fortify SCA will give us the opportunity to fix vulnerabilities before we push out new versions of our applications. In our view, the alternative is a security breach, and that is simply unacceptable."

Mark Crockett, Vice President of Technology and CTO of Informa Investment Scorecard

Gartner MQ

"We are very pleased with our decision to integrate Fortify products into our source code review and applications security audit processes"

Rick Dakin, QSA and Cofounder of Coalfire