title: How does Fortify software work?
body: <p><a href="http://en.wikipedia.org/wiki/Fortify_Software">Fortify</a> is a SCA used to find the security vulnerabilities in software code. I was just curious about how this software works internally. I know that you need to configure a set of rules against which the code will be run. But how exactly it is able to find the vulnerabilities in code.  </p>
  
  <p>Does anyone have any thoughts about this?  </p>
  
  <p>Thanks in advance.</p>