Blog Archives
Commerically Reasonable Cyber Security in 169 Questions - By Tom Brennan Mature organizations want to manage to "best practice" so that...
I recently did a
interview on the
Reimagining Cyber Podcast about advancements in the software security industry. I then took some time to think about the Fortify product that I have worked with for so many years. The pro and the con, what are your thoughts?
OpenText - Fortify
Pros of using source code tools like Fortify for software code quality:
- Identifying security vulnerabilities: Fortify helps identify security vulnerabilities in source code, such as buffer overflows, cross-site scripting (XSS), and SQL injection. This can help prevent attacks and protect sensitive data.
- Improving code quality: Fortify provides in-depth analysis of source code, helping developers improve the quality and maintainability of the code. This can lead to faster development and reduced time spent fixing bugs.
- Automation: Fortify automates many code quality checks, reducing the time and effort required to manually review code. This can help developers focus on more important tasks and reduce the risk of human error.
- Integration with development tools: Fortify can integrate with development tools such as integrated development environments (IDEs) and continuous integration (CI) pipelines, making it easier to use and incorporate into the development process.
- False positives: Fortify may produce false positives, indicating security vulnerabilities that don't actually exist. This can lead to wasted time and resources fixing non-existent issues.
- False negatives: Fortify may miss real security vulnerabilities, as it can only identify vulnerabilities it has been programmed to find.
- Resource requirements: Fortify can be resource-intensive and slow down the development process, especially on large codebases.
- Cost: Fortify can be expensive, making it a challenge for smaller organizations or projects with limited budgets.
One Hundred sixty nine questions about your security program - By Tom brennan
Tom Brennan : Nov 3, 2025 12:44:01 PM
Commerically Reasonable Cyber Security in 169 Questions - By Tom Brennan Mature organizations want to manage to "best practice" so that...
2 min read
ProactiveRISK and The Retired Investigators Guild: A Partnership for Enhanced Security and Expertise
Tom Brennan : Nov 3, 2025 12:43:59 PM
Welcome to our latest blog post! Today, we're thrilled to share exciting news about a significant partnership that has been formed between...