Description

ThreadFix is a vulnerability management platform designed for security and development teams. It enables users to consolidate, de-duplicate and merge imported results from commercial and open-source dynamic (DAST) and static (SAST) tools, track the results of manual testing and threat modeling, generate a list of hidden URL paths, injection points and parameters with the applications source code, review and access results from recently uploaded scans, prioritize application risk decisions based on data and transition application vulnerabilities, as well as analyze planned security processes for vulnerability remediation. Features include DevSecOps integration, mean-time to fix (MTTF) optimization, WebInspect support, recommendation management, risk mitigation capability, behaviour analysis, regulatory compliance optimization, and OWASP ZAP integration.