Status: Development
Command-line security tool
FortiScan CLI
A local-first, non-destructive security auditing tool for the terminal.
Henix Cybersecurity
Henix Cybersecurity
Security tools
Henix Cybersecurity's tools for authorized, defensive security work. None has been released yet; each is shown with its current status.
- tools in the portfolio
- 5
- with working code (prototype or development)
- 3
Its own home
Henix Cybersecurity now has its own site: HCF, Henix Cybersecurity FortiFind.
Tools, advisories, research, services and the Academy are moving to hcf.fortifind.org.
Portfolio
Every Henix tool, by maturity
- Status: Prototype
Web security assessment
FortiScan
A website security scanner for checking sites you own or are authorized to assess.
Henix Cybersecurity
- Status: Prototype
Mobile security
Mobile Security Scanner
A prototype phone security and diagnostics app.
Henix Cybersecurity
- Status: Research
Endpoint defense
DEF
Defensive Endpoint Firewall Monitor: visibility into host firewall activity.
Henix Cybersecurity
- Status: Concept
Web application security
FCLxZ
A modular web application security assessment tool.
Henix Cybersecurity
Responsible use
Three rules that come with every tool
Assessing systems without authorization may be illegal where you live. The safeguards each tool implements are listed on the Henix Cybersecurity page.
- 01
Only with permission
Use security tools only on systems you own or have explicit, documented permission to assess.
- 02
Observe, don't attack
Henix tools are designed for read-only, bounded checks. They are not built to exploit, crawl or brute-force.
- 03
Results are not guarantees
Automated checks cannot prove that a system is secure. A clean result means only that nothing was observed.