Status: Development
Command-line security auditing
FortiScan CLI
A local-first, non-destructive security auditing tool for the terminal.
Website security assessment
FortiScan
FortiScan runs passive, non-destructive checks against a single website and explains the results in plain language. HCF is rebuilding it here so that it shares the CLI's scope rules.
Status: PrototypeAsk about FortiScan
Where it stands
Prototype
An early prototype exists. HCF's own version is being rebuilt and is not available yet.
- STATUS
- PROTOTYPE
- WORKING
- 0
- PLANNED
- 3
- AVAILABLE
- NO
- Concept
- Research
- Prototype(current status)
- Development
- Beta
- Production
Verified
What works today
Nothing is listed as working yet. This will change once it has been built and checked.
Not available today
Planned
- Transport and certificate checks
- Security header and cookie checks
- Plain-language reports for technical and non-technical readers
- Intended for
- Website owners, Developers, IT and security teams
- Availability
- Not publicly available yet
Important
- Automated checks cannot prove that a website is secure.
Keep exploring
Other HCF tools
- Status: Prototype
Mobile security
Mobile Security Scanner
A prototype app that shows a phone's security and privacy posture in plain terms.
- Status: Research
Endpoint defense
DEF
Defensive Endpoint Firewall Monitor: visibility into what a device's firewall is doing.