Trust
Security at FortiFind
How FortiFind approaches the security of its products and of this website.
At a glance
Where things stand
- Security certifications
- None
- Third-party audits
- None
- Published advisories
- None
- Released products
- 0
Product security
FortiFind products are designed around a common set of security practices:
- Memory-safe and strongly typed languages where practical, such as Rust and TypeScript.
- Least privilege: tools ask for explicit authorization before acting on a system or network.
- Input validation and bounded resource use at every external boundary.
- Audit logging for actions that matter, and no collection of data a product does not need.
- Automated tests for security-relevant behavior, such as scope enforcement.
These are design commitments. FortiFind does not currently hold security certifications or third-party audits, and no product has yet been released.
This website
- Configured for HTTPS only (HSTS), with a restrictive Content Security Policy and other security headers.
- No analytics, advertising or tracking scripts, and no cookies set by FortiFind.
- The contact form validates input on the server, limits submission rates and keeps no database of messages.
Advisories
FortiFind has not published any security advisories. When it does, they will be listed on this page.