Research
Studying how systems fail
HCF researches how systems fail so that their owners can fix them. Research comes before products: ideas are investigated before tools are built.
Scope
Research areas, and the tools they feed
- 01Web application and API securityFortiScanFCLxZ
- 02Network exposure and authorized discoveryResearch only
- 03Endpoint and firewall visibilityDEF
- 04Mobile security and privacyMobile Security Scanner
- 05Secure tool design: scope enforcement and audit trailsFortiScan CLI
- 06Security-oriented programming languagesResearch only
Responsible research
How HCF does research
- 01
Authorized only
Research is carried out on systems HCF owns or is explicitly permitted to examine.
- 02
Fix before publish
Vendors get reasonable time to fix an issue before details are made public.
- 03
Reproducible
Published findings explain the method well enough to be checked, without handing out attack tooling.
Output
Publications
Nothing published yet
HCF has not published research papers or write-ups. When it does, they will be listed here with dates. None will be presented before it exists.