Home

Welcome to the ThreadFix wiki!

Please use the below links to find out more information about ThreadFix, get step-by-step setup instructions for various features, find out if your organization uses one (or more) of the 20+ supported tools, test drive our latest beta features, file a bug or feature requests, and view the organizations that have become project contributors. We welcome all input and feedback.

I'm here because I want to...

• Learn about ThreadFix
• Try ThreadFix Out
• Develop for ThreadFix
• Figure out how ThreadFix's bread and butter works
• Learn which tools and scanners ThreadFix supports
• Get Involved
• Get up-to-date with the latest on ThreadFix
  • Press & News
  • Blog Posts
  • Sign up for the Newsletter

Running ThreadFix

• Getting Started
• Using MySQL
• Configuring Permissions
• Automation
• ThreadFix REST Interface
• Importing Excel/CSV Data to ThreadFix
• Server Installation Guides
• Ubuntu and Debian Installation Guide
• Windows 2012 R2 Installation Guide
• CentOS/RHEL 6.x Installation Guide Contributed by Matt Tesauro
• ThreadFix Community Plugins
  • Scanner Plugins
    • OWASP ZAP Plugin
    • Portswigger BurpSuite Plugin
  • IDE Plugins
    • Eclipse IDE Plugin
    • IntelliJ IDEA Plugin
  • Sonar Plugin

Developing for ThreadFix

• Setup
  • Development Environment Setup
  • Using MySQL
• Development
  • Branching
  • Debugging
  • Migrating From HSQL to MySQL
  • Interfacing
    • ThreadFix REST Interface
    • Command Line Interface
  • Plugin Development
    • ThreadFix Event Model
    • Report Plugin Developemt
    • Scanner Plugin Development
    • Remote Provider Plugin Development
    • Defect Tracker Plugin Development
    • WAF Plugin Development

Supported Tools

• Remote Providers
• WAF Types
• Dynamic Scanners
• Static Scanners
• Component Lifecycle Management Tools
• Software Defect Trackers
  • Defect Tracker Guide
  • Importing Self Signed Certificates

Vulnerability Management

• Vulnerability Merging
• Manually Mapping Vulnerabilities
• Hybrid Analysis Mapping (HAM)
  • Hybrid Analysis Mapping (HAM) Configuration
  • HAM Merging Process Explained
  • Writing HAM Integrations
• Analytics & Reports
• Web Application Firewall (WAF)

Getting Involved

• Development Community
• Report Bugs & Feedback