Threat Intelligence

Fortify Software is at the forefront in developing threat intelligence to stay ahead of ever-changing security threats to your software. Fortify's Security Research Group, an internal team of security experts, is dedicated to tracking the latest hacking trends and vulnerability issues. These researchers combine deep software expertise with decades of collective security experience and form the frontline of security at Fortify

Security Research Group

The Security Research Group is an internal team of security experts dedicated to identifying new vulnerabilities and ensuring Fortify 360 stays ahead of the hacking community. To read more about the Security Research Group, click here.

Rulepack Subscription

The Security Research Group releases critical updates on a quarterly basis to Fortify customers. To read more about the Rulepack Subscription, click here.

Technical Advisory Board

Fortify's Technical Advisory Board consists of group of world-renowned industry and academic experts that provide guidance and feedback on a regular basis. To read more about the Technical Advisory Board, click here

Security Vulnerabilities

The Fortify Security Research Group has document the largest set of application security vulnerabilities. For a full listing, with descriptions, click here.

Open Source Security

The Fortify Security Research Group produces cutting edge research on new and relevant topics. The open source initiative, called Fortify Java Open Review identifies and reports bugs and security vulnerabilities in widely used Java open source software. To read more about Java Open Review, click here

Fortify Thought Leadership

In June 2007, the Manager of Fortify's Security Research Group, Jacob West, along with Fortify's Chief Scientist, Brian Chess, published a book entitled Secure Programming with Static Analysis. As the first of its kind, it serves as a complete guide to static analysis: how it works, how to integrate it into the software development processes and how to make the most of it during security code review. Incorporating real-world security examples, the book shows how coding errors are exploited, how they could have been prevented and how static analysis can rapidly uncover similar mistakes.