Status: Development
Command-line security tool
FortiScan CLI
A local-first, non-destructive security auditing tool for the terminal.
Henix Cybersecurity
Division
Henix Cybersecurity
Henix Cybersecurity is FortiFind's cybersecurity division. It builds defensive security tools, studies how systems fail, and documents how to assess them responsibly and only with authorization.
Division stage: Active engineering
- Public projects
- 5
- Prototype or in development
- 3
- Focus areas
- 10
Its own home
Henix Cybersecurity now has its own site: HCF, Henix Cybersecurity FortiFind.
Tools, advisories, research, services and the Academy are moving to hcf.fortifind.org.
Scope
Focus areas
The areas this division intends to cover. Scope is not the same as delivered capability: see each project's status.
- Application and API security
- Network security
- Endpoint protection
- Defensive security monitoring
- Vulnerability assessment
- Digital forensics and incident response
- Cloud security
- Security automation
- Authorized security testing
- Security research, documentation and advisories
How Henix tools are built
Authorized, bounded, accountable
Every Henix and FortiFind network tool is designed around the same six safeguards. The table shows, honestly, which ones each tool implements today.
- 01AuthorizeNothing touches a system until the operator records that they are allowed to assess it.
- 02Check scopeTargets outside the authorized scope, or non-public addresses, are refused before any connection.
- 03PreviewA dry run shows exactly what will happen before anything is sent.
- 04Bounded checkChecks are read-only, limited in reach and cancellable. No exploitation, crawling or brute force.
- 05EvidenceEvery result says what was and was not observed, and exports can be verified.
- 06Audit trailActions are logged so that an assessment can be reviewed afterwards.
| Tool | Authorize | Check scope | Preview | Bounded check | Evidence | Audit trail |
|---|---|---|---|---|---|---|
| FortiFind CMap | Working | Working | Working | Working | Working | Working |
| FortiScan CLI | Planned | Partial | Not applicable | Planned | Planned | Planned |
Portfolio
Products and projects
- Status: Prototype
Web security assessment
FortiScan
A website security scanner for checking sites you own or are authorized to assess.
Henix Cybersecurity
- Status: Prototype
Mobile security
Mobile Security Scanner
A prototype phone security and diagnostics app.
Henix Cybersecurity
- Status: Research
Endpoint defense
DEF
Defensive Endpoint Firewall Monitor: visibility into host firewall activity.
Henix Cybersecurity
- Status: Concept
Web application security
FCLxZ
A modular web application security assessment tool.
Henix Cybersecurity
Henix Cybersecurity
Talk to us about cybersecurity
Questions, partnerships or engineering interest: tell us what you are working on.