Sample Python script for automating WebInspect scans and pushing results to SSC
-
Updated
May 12, 2022 - Python
Sample Python script for automating WebInspect scans and pushing results to SSC
With an aim to make Fortify reports more readable for customers
A Parser to convert Fortify .XML report to Excel format with multi-tab option for extensive records.
Non-intrusive web application vulnerability scanner built in Python — crawls a target, runs 5 passive security checks (headers, cookies, XSS patterns, SQLi indicators, tech fingerprinting), and generates severity-scored Markdown/PDF reports via CLI or a Flask web GUI. Built for authorized lab targets (OWASP Juice Shop, DVWA).
Fortify API is a Python RESTFul API client module for Fortify's Software Security Center
These scripts are tools designed to work with `Fortify XML` rules, allowing you to perform `<xml to csv>` transformations after performing a `<bin to xml>` conversion.
The Fortify API client makes requests to a Software Security Center (SSC) API of Fortify to perform different tasks like approval of FPRs or creation of projects. Generally used from a CI/CD pipeline.
AppSecOne aggregates Fortify SSC vulnerability data, evaluates release readiness through deterministic security policies, and delivers real-time portfolio visibility with waivers, trends, and auditability.
To associate your repository with the fortify topic, visit your repo's landing page and select "manage topics."