Home

Welcome to the ThreadFix wiki!

Please use the below links to find out more information about ThreadFix, get step-by-step setup instructions for various features, find out if your organization uses one (or more) of the 20+ supported tools, test drive our latest beta features, file a bug or feature requests, and view the organizations that have become project contributors. We welcome all input and feedback.

I'm here because I want to...

• Learn about ThreadFix
• Try ThreadFix Out
• Develop for ThreadFix
• Figure out how ThreadFix's bread and butter works
• Learn which tools and scanners ThreadFix supports
• Get Involved
• Get up-to-date with the latest on ThreadFix
  • Press & News
  • Blog Posts
  • Sign up for the Newsletter

Running ThreadFix

• Getting Started
• Configuring Permissions
• Automation
• Importing Excel/CSV Data to ThreadFix
• ThreadFix 2.1 Official Release Notes
• Server Installation Guides
• Ubuntu 12.04 Installation Guide
• Windows R2 Installation Guide
• ThreadFix Community Plugins
  • Scanner Plugins
    • OWASP ZAP Plugin
    • Portswigger BurpSuite Plugin
  • IDE Plugins
    • Eclipse IDE Plugin
    • IntelliJ IDEA Plugin
  • Sonar Plugin

Developing for ThreadFix

• Setup
  • Development Environment Setup
  • Using MySQL
• Development
  • Branching
  • Debugging
  • Interfacing
    • ThreadFix REST Interface
    • Command Line Interface
  • Migrating From HSQL to MySQL
  • Customize
    • ThreadFix Event Model
    • Build a Custom Report
    • Modifying ThreadFix Scanner Support
    • Creating Custom Scanner Integrations
    • Custom Defect Tracker Guide

Supported Tools

• Remote Providers
• WAF Types
  • Setup & Rule Generation for Imperva Secure Sphere
• Dynamic Scanners
• Static Scanners
• Software Defect Trackers
  • Defect Tracker Guide
  • Microsoft Team Foundation Server
  • Importing Self Signed Certificates

Vulnerability Management

• Vulnerability Merging
• Vulnerability Format
• CWE Mapping
• Hybrid Analysis Mapping (HAM)
  • Hybrid Analysis Mapping (HAM) Configuration
  • HAM Merging Process Explained
  • Writing HAM Integrations

ThreadFix Enterprise Plugins

• Scan Agent

Getting Involved

• Development Community
• Report Bugs & Feedback