Status: Prototype
Web security assessment
FortiScan
A website security scanner for checking sites you own or are authorized to assess.
Henix Cybersecurity
Command-line security tool
FortiScan CLI
FortiScan CLI brings FortiScan's approach to the command line. It is local-first and standalone, enforces authorized scope as an architectural boundary, and never requires the hosted service.
Where it stands
Development
Version 0.1.0. Installation diagnostics and configuration commands work. Scanning, target validation and reporting commands are not implemented yet and say so when run.
- Concept
- Research
- Prototype
- Development(current status)
- Beta
- Production
Verified
What works today
- Installation and configuration diagnostics that make no network requests
- Configuration display showing where each setting came from, with a persisted report directory
- Shell completion scripts
- Address-scope classification library code, the basis for refusing non-public targets
Not available today
Planned
Intended direction. These are not available today.
- Read-only checks against one explicitly authorized target, gated by an explicit authorization step
- Connection-time scope enforcement with no redirect following
- Terminal and versioned JSON reports with local history
Important
- Not released. There is no public download yet.
FortiScan CLI
Questions about FortiScan CLI?
Ask about its status, what it will do, or how to follow its progress.