A public page you link from your own website, showing your security and compliance posture — certifications, security practices, and how to report a vulnerability. Built from what's already in your Fortify portal.
Security Overview
Security goals and governance, secure development approach, vulnerability management, incident response capabilities, and data protection principles — in plain English.
Compliance & Certifications
ISO 27001, Cyber Essentials Plus, GDPR, CRA readiness, and more — your own status wording per framework, with an optional certificate upload.
Vulnerability Disclosure
A dedicated contact, your responsible disclosure process, a safe harbour statement, response SLAs, and an optional /.well-known/security.txt reference.
Product Security
Per product: deployment model, supported versions, update policy, lifecycle dates, and how customers are notified of vulnerabilities.
Privacy & Data Protection
Your privacy notice, DPA availability, subprocessor list, international transfer approach, and data retention overview.
Security Contact Details
A reporting mailbox, support portal, and general compliance contact — so the right question reaches the right inbox.
Plus any number of your own custom sections. Every section is off by default — nothing appears until you turn it on.
Ask AI Guidance to draft it
It reads your published policies, active certifications, incident playbooks, and vendors, and drafts every section — grounded in what's real, never invented.
Review and edit
Nothing is saved or published automatically. Edit any section, attach a certificate if you have one, or leave something off entirely.
Publish and share the link
Turn on the sections you want live, then link your Trust Center from your website footer, sales deck, or procurement responses.
Every plan
The full public page, all six sections, custom sections, and AI Guidance.
Strategic
Everything above, plus your own logo and accent colour instead of Fortify's default styling.
Advanced
Everything above, plus your own domain — e.g. trust.yourcompany.com — with automatic SSL.
What is a Trust Center, and why would I need one?
It's a public page — usually linked from your website's footer — that answers the security and compliance questions a customer or prospect would otherwise email you about, or send as a lengthy security questionnaire during procurement. Having the answers ready and public shortens sales cycles and builds confidence before anyone has to ask.
Is it available on every plan?
Yes. The Trust Center page itself, all six sections, and AI Guidance are included on every Fortify plan, including the free Foundation tier. Custom branding (your own logo and colours) is included on Strategic and Advanced; a fully custom domain — e.g. trust.yourcompany.com — is included on Advanced.
Does it expose anything from inside my portal automatically?
No. Every section is off by default, and nothing is derived from your live audit scores or findings — you choose exactly what to show and write your own status wording (e.g. "Certified" or "In progress"). AI Guidance can draft a first version grounded in your actual published policies and certifications, but it never publishes anything automatically — you review, edit, and enable each section yourself.
How does AI Guidance work?
It looks at what's actually in your portal — published policies, active audit frameworks, configured incident playbooks, and vendors — and drafts content for each section based on that real data, rather than generic boilerplate. Where something isn't covered by your portal data, it leaves an honest placeholder for you to fill in, instead of inventing a fact.
Can I add my own sections?
Yes — beyond the six built-in sections, you can add any number of custom sections with your own title and content.
Start a free assessment — your Trust Center is ready to configure in the portal from day one.