Purify v1.2 releases: All-in-one tool for managing vulnerability reports
The goal of Purify to be an easy-in-use and efficient tool to simplify a workflow of managing vulnerabilities delivered from various (even custom) tools.
Purify is aiming to be a tool-agnostic application. Tool independence makes it possible to analyze results/findings/reports of any toolset. Technically, the report you want to upload should be one of the following:
- JSON file
- XML file
- JSON object (most webhooks dispatch events as separate JSON objects)
This means you don’t need any special plug-ins to parse incoming reports. For this Purify introduces the concept of templates. Templates are code-free and user-friendly structures that parse reports the way you tell them.
Purify is able to remove duplicate results among various vulnerability scanners or tools. In addition, it can combine several results of the same tool based on selected fields and it is fully configurable. Purify does all this work to reduce the headache of the analyst.
Collect all your findings in one place, review/validate/track them, collaborate with your teammates, receive notifications via Slack, create Jira tickets, and many more.
The hierarchy of Purify is simple:
Project – the root component, can be a dedicated software project or a roaster of team projects
Unit – the direct child of a project, may represent releases, sub-projects, or any other type of separation that makes sense to you
Report – belong to a unit
Template – attached to a report and used to parse issues
Issue – extracted from a report and formatted based on a template
- Minor bug fixes
- Minor UI updates
Copyright (c) 2020 faloker