Yes, 3 scans/month via CLI forever. No credit card required.
Do you store my source code?
Never. We only scan running applications via HTTP. Your source code never leaves your infrastructure.
Which compliance frameworks do you cover?
SOC2 Type II, PCI DSS v4.0, ISO 27001:2022, HIPAA, NIST CSF, OWASP Top 10, and OWASP API Security Top 10.
Can I use Fortly for penetration testing?
Yes, Purple Team mode combines automated scanning with AI-guided exploit chains for comprehensive penetration testing. It simulates real attacker behavior to find complex vulnerability chains.
Do you offer on-premise deployment?
Not yet. We're currently cloud-only, but on-premise deployment is on our roadmap. Contact us at sales@fortly-security.com for enterprise needs.