At Fortify, we believe great code is secure code and helping customers achieve it runs through everything we do. Fortify continues to cover the most critical use cases common to today's software landscape. From DevSecOps, Cloud Transformation, and Securing the Software Supply Chain, Fortify is the only AppSec solution recognized as a market leader by Gartner, Forrester, IDC and G2.

This week, we are excited to announce the general availability of our Fortify 23.1.0 release! With enhanced offerings to increase speed, accuracy, scalability, and ease of use, this marks another important chapter in Fortify’s elevation of code security. This release contains updates to Fortify Static Code Analyzer, Fortify WebInspect, Fortify Software Security Center, and Fortify Software Composition Analysis.

Some of the highlights of this release include:

• .NET 7 and .NET 7 on Linux - along with continued expansion of other languages and framework support.

• Scan Policies - Identify the most serious vulnerabilities at the most appropriate times with three policies to choose from: classic, security and devops.

• Priority Override - We now give customers the ability to modify the Fortify issue severity for more flexibility and customization.

• Report Enhancements - Implementation of high-demand report enhancements for better application security risk assessment.

• ScanCentral SAST Improvements - We have added numerous improvements for usability and functionality to ScanCentral SAST.

• Automated 2FA with Authenticator Apps - Have the ability to continue to scan, even in 2FA environments with WebInspect.

• Client-Side Software Composition Analysis - CVEs of client-side libraries, health data of open source projects and exportable CycloneDX SBOM are now available
• and so much more!

To see the complete list of new functions and features, visit our What's New in Fortify Software 23.1.0 documentation.