Getting the most out of the Fortify Portal

The ? icon next to headings

Every section heading in the portal has a small grey circle with a ? in it. Click it — or hover over it — to see a plain-language explanation of what that section or metric measures, why it matters, and what to do about it.

Useful when you're in a section you haven't used before, or when you want to understand a specific number on the Compliance Health dashboard.

The violet button in the bottom-right corner

The violet circle (always visible in the bottom-right of every portal page) opens Scout — an AI that knows your specific assessment results and can answer questions about your security position in plain language.

• → “What does this finding mean for my business?”
• → “Which open findings should I fix first?”
• → “How do I explain our security score to a customer?”

There's also a full Ask Alex page in the sidebar for longer conversations.

Blue banners at the top of each section

The first time you visit any section, a blue banner appears at the top explaining what the section is for, who should use it, and why it matters. Once you dismiss it, it won't appear again.

If you want to re-read a banner, clear your browser's localStorage for the Fortify domain — the banners will reappear.

Attaching files or links to findings

On the Roadmap and Findings pages, you can attach evidence to each item to prove a control is in place. Open any item and use the Evidence panel to upload a file or paste a URL.

• → Screenshots showing a setting is enabled
• → Policy documents or configuration files
• → URLs linking to external records or tools

Use “Export evidence pack” on the Roadmap to download everything as a ZIP for auditors.

Setting and tracking measurable targets

Security Goals (under the ISO 27001 section in the sidebar) are measurable targets that show auditors your programme is actively improving — not just stable.

Set a goal like “reduce open critical findings to zero by Q3” or “achieve 80% policy coverage by year end”. Update the current value monthly. Goals that slip to “at risk” surface on the Compliance Health dashboard.

ISO 27001 requires measurable information security objectives with tracked progress — Security Goals is where you build that record.