All About Fortra

In an era where cybersecurity threats are constantly evolving, Fortra stands out for its innovative cybersecurity solutions. With a mission to help organizations enhance their security maturity while alleviating operational burdens, Fortra envisions a stronger, simpler future for cybersecurity—one where organizations can thrive without the weight of worry. The company’s unique approach brings together industry-leading solutions into a best-in-class portfolio, providing a robust line of defense from a single, trusted provider. Join us as we explore how Fortra is redefining the cybersecurity landscape, offering people innovative solutions to tackle today’s cybersecurity challenges. 

The Founding of Fortra: A Journey of Innovation in Cybersecurity

Fortra, an influential player in the cybersecurity landscape, has a rich history that dates back to 1982 when it was founded as Help/38 by visionary entrepreneur Dick Jacobson in Minnesota, United States. The company initially focused on providing IT automation solutions for the IBM System/38, with its first product, Robot/38, paving the way for innovation in IT operations.

As technology evolved, so did the company. In 1988, when IBM transitioned from the System/38 to the AS/400, Help/38 rebranded itself as HelpSystems, reflecting its broader commitment to adapting to the needs of its customers and the market. This adaptability became a hallmark of the organization, underscoring its mission to simplify IT operations while enhancing security—a mission that resonates with its current vision of creating a “stronger, simpler future for cybersecurity”.

HelpSystems made history in 1992 by becoming the first software company in the United States to be certified under the ISO 9001 standard, a testament to its commitment to quality and excellence. Over the following years, the company experienced significant growth and several changes in ownership, acquiring multiple software firms and expanding its product offerings. Key acquisitions included the likes of Safestone, CCSS, and IBM's ShowCase business intelligence products, positioning HelpSystems as a leader in IT management and security.

From 2005 to 2018, HelpSystems was acquired by various private equity firms, including Summit Partners and Audax Group, which further fueled its expansion. This era was marked by the integration of diverse solutions, including real-time monitoring, secure file transfer, and IT service optimization, as well as a continued emphasis on enhancing cybersecurity capabilities.

In 2019, the company took significant strides to strengthen its cybersecurity portfolio by acquiring Core Security and UK-based Clearswift, among others. These acquisitions underscored HelpSystems' dedication to providing comprehensive cybersecurity solutions tailored to meet the complexities of a rapidly evolving digital landscape.

The years leading up to the company's rebranding as Fortra in November 2022 were pivotal. With a series of strategic acquisitions—including those of Titus, Boldon James, and Tripwire—HelpSystems expanded its cybersecurity capabilities significantly. This included advancements in IT security compliance, cloud-based security, and threat detection, positioning the company as a holistic provider of cybersecurity solutions.

The rebranding to Fortra marked not just a name change, but a renewed commitment to its mission of helping organizations increase their security maturity while decreasing operational burdens. The company's leadership recognized that, in an era where cybersecurity threats are becoming increasingly sophisticated, collaboration with customers is vital. Fortra prioritizes listening to organizations' concerns and delivering tailored solutions that put their worries to rest.

Today, Fortra stands as a testament to the power of evolution and adaptation in the face of change. With a focus on people-first support and a best-in-class solution portfolio, the company continues its relentless mission to address the cybersecurity challenges of today and tomorrow. Through its legacy of innovation and collaboration, Fortra is not only transforming the cybersecurity landscape but also leading the charge toward a more secure future for organizations around the globe.

Timeline of Key Events and Milestones

• 1982
  • Founding of Help/38: Dick Jacobson establishes Help/38, focusing on IT automation solutions for the IBM System/38.
  • Launch of Robot/38: The company releases its first product, Robot/38, designed to automate IT processes.
• 1988
  • Rebranding to HelpSystems: As IBM replaces the System/38 with the AS/400, Help/38 rebrands itself as HelpSystems.
• 1992
  • ISO 9001 Certification: HelpSystems becomes the first software company in the U.S. to achieve ISO 9001 certification, highlighting its commitment to quality.
• 2005
  • Acquisition by Summit Partners: HelpSystems is acquired by private equity firm Summit Partners, marking the beginning of significant growth.
• 2007
  • Acquisition by Audax Group: The company is acquired by Audax Group, leading to further expansion through strategic acquisitions.
• 2012
  • Majority Stake Repurchase: Summit Partners repurchases a majority stake in HelpSystems, facilitating more growth and acquisitions.
• 2015
  • Acquisition by H.I.G. Capital: HelpSystems is acquired by H.I.G. Capital, allowing for continued expansion of its product offerings.
• 2015-2018
  • Strategic Acquisitions: The company adds new capabilities by acquiring Tango/04 Computing Group, Linoma Software, and TeamQuest, enhancing its portfolio with real-time monitoring, secure file transfer, and IT service optimization solutions.
• 2018
  • HGGC Investment: Private equity firm HGGC becomes the lead investor, and HelpSystems acquires Midrange Performance Group to expand its service offerings.
• 2019
  • Cybersecurity Expansion: HelpSystems acquires Core Security and UK-based Clearswift, enhancing its cybersecurity capabilities. TA Associates and Charlesbank Capital Partners also invest in the company.
• 2020
  • Further Acquisitions: The company acquires data classification firms Titus and Boldon James, and cloud-based data protection provider Vera. It also releases a report on the impact of COVID-19 on cybersecurity for financial services.
• 2021
  • Major Acquisitions: HelpSystems expands its cybersecurity and data protection services with acquisitions including FileCatalyst, Digital Defense, Beyond Security, Agari, PhishLabs, and Digital Guardian. During this time, Harvest Partners SCF LP acquires partial ownership.
• 2022
  • Expansion of Cybersecurity Portfolio: HelpSystems acquires Tripwire, Alert Logic, Terranova Security, and Outflank, enhancing its capabilities in IT security compliance, cloud security, and advanced threat detection.
  • Rebranding to Fortra: The company officially rebrands as Fortra in November, reflecting its commitment to a simpler, stronger future in cybersecurity.
• 2023
  • Collaboration with Microsoft and Health ISAC: Fortra partners with Microsoft's Digital Crimes Unit and Health Information Sharing and Analysis Center to combat the misuse of cracked copies of Cobalt Strike by cybercriminals, leading to the disruption of malicious infrastructure.
• 2024 and Beyond
  • Operation Morpheus: Fortra collaborates with Europol to dismantle nearly 600 IP addresses associated with criminal activities using Cobalt Strike. 
  • Solution Provider of the Year: Fortra XDR named XDR Solution Provider of the Year at the CyberSecurity Breakthrough Awards. 
  • Commitment to Innovation: Fortra remains dedicated to achieving its vision of a stronger, simpler future for cybersecurity through ongoing innovations and effective solutions. 

Through these milestones, Fortra has continually evolved, expanding its capabilities and influence in the cybersecurity landscape, while remaining committed to its mission of reducing operational burdens for organizations and improving security maturity.

Fortra's Product Suite: A Comprehensive Overview

Fortra's product suite is designed to tackle the complex and evolving challenges of cybersecurity and IT automation, offering organizations the tools necessary to secure their infrastructure while enhancing operational efficiency. The suite encompasses various categories, each addressing specific needs in today’s threat landscape. Here’s a detailed breakdown of key products of Fortra and how they have evolved in line with advancements in network technologies.

1. Threat Detection and Response: Given the rising risk of cyber threats facing today’s organizations, Fortra has developed strong threat detection and response solutions:

• Agari: This product focuses on email security, using AI to protect organizations from phishing attacks and other email threats. Agari helps organizations analyze and respond to email-based threats, significantly enhancing their security posture.
• Alert Logic: Offering managed detection and response (MDR) services, Alert Logic combines threat intelligence with 24/7 monitoring to identify and mitigate threats in real-time.
• PhishLabs: Specializing in threat intelligence and digital risk protection, PhishLabs helps organizations combat phishing and brand impersonation, providing valuable insights to enhance security.
• Cobalt Strike: A powerful tool for penetration testing and threat emulation, Cobalt Strike allows security teams to simulate advanced threats, enabling organizations to strengthen their defenses.
• Digital Defense: This product provides comprehensive vulnerability management and threat assessment services, ensuring organizations can identify and address weaknesses in their systems.
• Beyond Security: This suite of tools focuses on application security, helping organizations identify vulnerabilities within their software before they can be exploited.

2. Data Protection and Compliance: Data protection is a cornerstone of Fortra's offerings, providing essential tools to safeguard sensitive information:

• Clearswift: This solution provides data loss prevention (DLP) capabilities, ensuring sensitive information is protected while allowing for safe data sharing and collaboration.
• Digital Guardian: Focused on data-centric security, this product offers advanced DLP capabilities, enabling organizations to protect sensitive data across various environments.
• Data Classification: This offering helps organizations categorize and manage their data effectively, ensuring compliance with regulations and improving data protection strategies.
• Terranova Security: This platform provides security awareness training to educate employees about best practices in cybersecurity, helping to reduce human error and increase overall security resilience.

3. Automation and IT Management: In line with the increasing complexity of IT environments, Fortra has developed a range of automation tools:

• Automate: This IT automation tool enhances operational efficiency by automating repetitive tasks, allowing IT teams to focus on strategic initiatives.
• JAMS: A workload automation solution that streamlines job scheduling and monitoring, JAMS helps organizations manage complex workflows more effectively.
• Halcyon: A suite of IT management tools that enable organizations to monitor and optimize their IT environments, ensuring operational continuity.
• Intermapper: This network mapping and monitoring tool provides real-time visibility into network performance, helping organizations maintain system reliability.
• FileCatalyst: Designed for fast file transfer, FileCatalyst ensures that large files are transmitted securely and efficiently, enhancing collaboration across teams.
• GoAnywhere: This secure file transfer and data integration solution simplifies the sharing of sensitive information across networks, ensuring compliance and security.
• Globalscape: Providing secure file transfer solutions, Globalscape enhances data security and compliance for organizations that need to share sensitive information.

4. Cybersecurity and Monitoring: Recognizing the need for effective cybersecurity and monitoring solutions to address persistent security threats, Fortra has developed the following e suite of tools:

• Core Security: This suite offers a range of tools for identity and access management, helping organizations control user access and enhance overall security.
• Tripwire: Known for its file integrity monitoring and change detection capabilities, Tripwire helps organizations maintain compliance and detect unauthorized changes.
• Outflank: This tool focuses on threat hunting and intelligence gathering, enabling organizations to proactively identify and mitigate emerging threats.
• Capacity Management: This solution helps organizations monitor and manage resource usage across their IT infrastructure, ensuring optimal performance and preventing bottlenecks.

5. IBM i Solutions: Fortra also caters specifically to the IBM i ecosystem, offering tools that enhance security and productivity:

• Powertech Solutions: A suite of security products for IBM systems that includes antivirus, compliance monitoring, and access management.
• Robot Products: A range of solutions for job scheduling, performance monitoring, and backup management tailored for IBM i systems, ensuring organizations can optimize their operations effectively.

Fortra's product suite has evolved significantly over the years alongside general network technologies. Initially focused on IT automation with products like Robot and Sequel, the company expanded its offerings in response to the rapid rise in cyber threats and the shift towards cloud and remote working environments.

As organizations increasingly adopted cloud technologies and remote operations, Fortra adapted its solutions to meet these needs, such as enhancing data protection in cloud environments and providing robust digital risk management tools. The introduction of AI-driven solutions for threat detection and incident response reflects the growing sophistication of cyber threats.

Moreover, as compliance requirements have intensified, Fortra’s data classification and identity management solutions have evolved to ensure organizations can meet regulatory standards while protecting sensitive information.

By continuously innovating and integrating acquired technologies, Fortra has positioned itself as a comprehensive provider of cybersecurity and automation solutions, ensuring that its product suite meets the current and future needs of organizations navigating the complexities of today's digital landscape.

Fortra's Notable Product: Cobalt Strike

Cobalt Strike is a sophisticated threat emulation tool designed to simulate advanced, stealthy threat actors that have infiltrated an IT environment for an extended period. Launched in 2012 by Raphael Mudge, a recognized thought leader in cybersecurity, Cobalt Strike has become a cornerstone in the arsenal of security professionals. Its primary purpose is to facilitate effective Adversary Simulations and Red Team operations, allowing organizations to assess their defenses against real-world threats.

Key Features:

• Advanced Adversary Simulations: Cobalt Strike employs Beacon, a powerful post-exploitation payload, allowing users to control a target's network stealthily.
• Dynamic Red Team Engagement: The platform supports collaborative Red Team operations through a shared team server, facilitating coordinated attacks.
• Flexible Framework: Users can modify built-in scripts, create their own, and share extensions through the Community Kit.
• Cost-Effective Licensing: New Cobalt Strike licenses start at $3,540 per user for a one-year subscription, making it accessible for various organizations.

What makes Cobalt Strike stand out is its powerful post-exploitation agents and collaborative features. These capabilities enable security teams to challenge Blue Teams effectively, measure incident response, and enhance their security operations.  Cobalt Strike is best suited for security teams and organizations that prioritize proactive security measures and seek to emulate realistic threat scenarios. It is particularly valuable for cybersecurity/consulting firms, large enterprises, and government agencies.  A free trial is available upon request. 

Fortra's Notable Product: GoAnywhere MFT

Fortra's GoAnywhere is a robust managed file transfer (MFT) solution designed to automate and encrypt data exchanges between organizations and their trading partners. By safeguarding sensitive information from vulnerabilities, GoAnywhere enhances the quality of file transfers while reducing associated costs. This platform empowers IT and cybersecurity professionals with peace of mind, knowing that their data is secure both in transit and at rest.  It is ideal for organizations that need to securely share sensitive files internally and externally. 

Key Features:

• File Transfer Management: Users can configure and monitor file transfers from anywhere using a browser-based web client, allowing for flexible management of transfer schedules.
• Security Controls: GoAnywhere offers robust security measures, including user permissions, password policies, folder-level access, and standard encryption protocols to protect critical data.
• Easy Automation: The platform features multistep workflows that are simple to create and integrate, reducing the need for manual scripting and scheduling of file transfers.
• Distributed Workloads: GoAnywhere ensures high availability for mission-critical environments through its load balancer, which distributes connections across network systems.
• Secure File Servers: AS2, FTPS, and SFTP servers facilitate secure connections for clients and trading partners.
• Advanced Reporting: The reporting module generates management reports in PDF format, aiding compliance efforts such as PCI DSS.
• Remote MFT Agents: Lightweight applications automate file transfers and workflows on remote systems and in cloud environments.

Fortra's GoAnywhere stands out as a secure managed file transfers due to its comprehensive features, including a browser-based web client for flexible file transfer management from anywhere, robust security controls that protect critical data through user permissions and encryption. It also includes easy automation with multistep workflows that integrate seamlessly with existing processes, and high availability achieved through load balancing for mission-critical environments. A free trial is available upon signup.

Challenges and How They Were Addressed

Fortra, like many cybersecurity organizations, has faced several challenges throughout its history. These issues primarily revolved around adapting to the rapidly changing technology environment, managing growth during acquisitions, and ensuring compliance with evolving regulatory standards. Here’s a detailed look at some of these challenges and how Fortra overcame them.

Adapting to Rapid Technological Changes: In the early days, originally founded as Help/38 in 1982, Fortra focused on IT automation solutions for specific platforms like the IBM System/38. As technology evolved, particularly with the rise of the AS/400 systems, the company had to pivot its focus. This shift was crucial for survival in a market that was increasingly moving towards broader and more complex IT environments.

Fortra successfully rebranded itself as HelpSystems in 1988 and expanded its product offerings to include solutions for the AS/400. This adaptability laid the groundwork for future innovations. By continually updating its portfolio to incorporate new technologies, such as cloud computing and automation tools, Fortra has remained relevant in a dynamic market.

1. Managing Growth Through Acquisitions: Between 2005 and 2018, Fortra underwent significant growth through multiple acquisitions, which presented its own set of challenges. Integrating various companies and their technologies into a cohesive offering can be complex, often leading to operational inefficiencies and cultural clashes. Fortra adopted a strategic approach to acquisitions, ensuring that each new company brought complementary strengths. For example, the acquisition of Core Security and Clearswift enhanced its cybersecurity capabilities, while companies like Alert Logic and PhishLabs added essential threat detection and response services. By prioritizing cultural alignment and ensuring that each acquisition fits within its broader strategy, Fortra has been able to create a unified product suite that leverages the strengths of its diverse offerings.
2. Meeting Compliance and Regulatory Standards: As cybersecurity regulations became more stringent, Fortra faced the challenge of ensuring that its products and services complied with various standards. This was particularly important in industries like finance and healthcare, where data protection regulations are critical. Fortra focused on developing solutions that not only met but often exceeded regulatory requirements. Its Digital Guardian suite, for instance, was designed with compliance in mind, providing advanced data loss prevention capabilities. By integrating compliance features into its product designs and actively keeping up with regulatory changes, Fortra positioned itself as a trusted partner for organizations facing stringent compliance demands.
3. Staying Ahead of Evolving Cyber Threats: The cybersecurity landscape is constantly evolving, with new threats emerging daily. Fortra recognized the need to stay ahead of these threats to protect its customers effectively. Fortra invested heavily in research and development, continuously enhancing its threat detection capabilities. The integration of AI and machine learning into solutions like Agari and PhishLabs reflects this commitment. Additionally, partnerships with organizations like Microsoft’s Digital Crimes Unit have allowed Fortra to collaborate on initiatives to combat advanced threats, further strengthening its defenses.

Wrap-Up

Fortra has established itself as a pivotal player in the cybersecurity landscape, offering a comprehensive suite of solutions designed to enhance security maturity while reducing operational burdens. With flagship products like GoAnywhere for secure file transfer and Cobalt Strike for advanced adversary simulations, Fortra addresses the evolving challenges organizations face in today’s threat environment. The company’s commitment to innovation, collaboration, and effective threat management reflects its mission to create a stronger and simpler future for cybersecurity. 

By continually adapting to technological advancements and customer needs, Fortra positions itself as a trusted partner for organizations seeking to fortify their security frameworks and safeguard sensitive data. As the cybersecurity landscape continues to evolve, Fortra’s proactive approach and robust product offerings make it well-suited to meet the demands of businesses worldwide.