{"id":3807,"date":"2014-10-14T06:40:17","date_gmt":"2014-10-13T22:40:17","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3807"},"modified":"2014-10-14T06:40:26","modified_gmt":"2014-10-13T22:40:26","slug":"threadfix-vulnerability-aggregation-management-system","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2014\/10\/threadfix-vulnerability-aggregation-management-system\/","title":{"rendered":"ThreadFix &#8211; Vulnerability Aggregation &#038; Management System"},"content":{"rendered":"<p>ThreadFix is a software vulnerability aggregation and management system that reduces the time it takes to fix software vulnerabilities. ThreadFix imports the results from dynamic, static and manual testing to provide a centralized view of software security defects across development teams and applications. The system allows companies to correlate testing results and streamline software remediation efforts by simplifying feeds to software issue trackers. By auto generating application firewall rules, this tool allows organizations to continue remediation work uninterrupted. ThreadFix empowers managers with vulnerability trending reports that show progress over time, giving them justification for their efforts.<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"https:\/\/farm4.staticflickr.com\/3936\/14909973583_1ce7994a24.jpg\" alt=\"ThreadFix - Vulnerability Aggregation &#038; Management System\" \/><\/p>\n<p>ThreadFix also allows users to input the results of manual penetration testing, code review and threat modeling to provide a comprehensive view of software security for an organization. Once a unified list of security vulnerabilities has been created, ThreadFix allows application security managers to further prioritize discovered vulnerabilities via a centralized dashboard. The platform allows companies to correlate testing results and streamline software remediation efforts by simplifying feeds to software issue trackers. As the development team resolves defects, status updates are synchronized within ThreadFix, enabling the security team to schedule follow-up testing to confirm that security holes have indeed been closed. <\/p>\n<p><strong>Features<\/strong><\/p>\n<ul>\n<li><strong>Consolidated View of Application Test Results<\/strong> &#8211; Consolidate and de-duplicate imported results from open source, commercial dynamic and static scanning tools, as well as the results of manual testing and threat modeling to get a complete view of the state of your applications.<\/li>\n<li><strong>Reports<\/strong> &#8211; Get the latest security status of your applications while providing an eagle\u2019s-eye view of your organization\u2019s progress over time to pinpoint any process problems.<\/li>\n<li><strong>Defect Tracker Integration<\/strong> &#8211; Help security professionals translate application vulnerabilities into software defects and push tasks to developers in the tools and systems they are already using.<\/li>\n<li><strong>Virtual Patching<\/strong> &#8211; Create virtual Web Application Firewall (WAF) rules to help block malicious traffic while vulnerabilities are being resolved. While your organization takes on remediation of your applications, virtual patching helps guard against common vulnerabilities such as Cross-Site Scripting (XSS) and SQL Injections.<\/li>\n<li><strong>Compatible with Open Source and Commercial Products<\/strong> &#8211; ThreadFix is compatible with a number of commercial and freely available dynamic and static scanning technologies, SaaS testing platforms, IDS\/IPS and WAFs and defect trackers.<\/li>\n<\/ul>\n<p>You can download Threadfix 2.1RC1 here:<\/p>\n<p><a href=\"https:\/\/github.com\/denimgroup\/threadfix\/archive\/2.1RC1-tag.zip\">2.1RC1-tag.zip<\/a><\/p>\n<p>Or read more <a href=\"http:\/\/www.threadfix.org\/product-tour\/\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>ThreadFix is a software vulnerability aggregation and management system that reduces the time it takes to fix software vulnerabilities. ThreadFix imports the results from dynamic, static and manual testing to provide a centralized view of software security defects across development teams and applications. The system allows companies to correlate testing results and streamline software remediation [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"ThreadFix is a software vulnerability aggregation and management system that reduces the time it takes to fix software vulnerabilities.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[12,11],"tags":[2609,4197],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3807"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=3807"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3807\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=3807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=3807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=3807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}