Status: Development
Command-line security auditing
FortiScan CLI
A local-first, non-destructive security auditing tool for the terminal.
HCF · a FortiFind company
Authorized. Bounded. Accountable.
HCF is FortiFind's cybersecurity division. It builds defensive security tools, publishes research and advisories, and is preparing authorized assessments and training.
- tools in the portfolio
- 5
- with working code
- 3
- released
- 0
- advisories published
- 0
What HCF does
One security division, four practices
Security tools
Defensive tools for websites, endpoints and phones.
5 tools · 0 released
Advisories
Security advisories for FortiFind and HCF products.
None published yet
Services
Authorized assessments, training and incident response.
4 planned · not yet offered
Academy
Hands-on cybersecurity learning for people and teams.
In preparation
The portfolio
Tools, with their real status
No HCF tool has been released yet. Each one is shown with how far it has actually progressed.
- Status: Prototype
Website security assessment
FortiScan
A website security scanner for sites you own or are authorized to assess.
- Status: Prototype
Mobile security
Mobile Security Scanner
A prototype app that shows a phone's security and privacy posture in plain terms.
How HCF tools are built
Three rules every tool is designed around
- 01AuthorizedNothing is assessed without recorded permission from someone entitled to give it.
- 02BoundedChecks are read-only and limited in reach. HCF tools are not built to exploit or attack.
- 03AccountableEvery result says what was and was not observed, and actions can be reviewed afterwards.
Henix Cybersecurity FortiFind. The cybersecurity division of FortiFind.
Responsible disclosure
Found a vulnerability in a FortiFind or HCF product?
Tell us. Every report is read, and good-faith research that follows the guidelines is welcome.