ThreadFix 2.4 Community Edition?

[Andreas Falk]

Is development of the community edition of threadfix discontinued?

I cannot find an download page for this edition any more and corresponding github repository seems not to be updated with new versions any more (latest is 2.3 RC?)

[barb...@gmail.com]

On Saturday, July 9, 2016 at 5:11:53 PM UTC+2, Andreas Falk wrote:
> Is development of the community edition of threadfix discontinued?
> I cannot find an download page for this edition any more and corresponding github repository seems not to be updated with new versions any more (latest is 2.3 RC?)

Same question.
Cant find any community version of threadfix.

[Dan Cornell]

Sorry for the delayed response - I've been on the road this week.

The vast majority of development on ThreadFix going forward is going to be on the Enterprise Edition. That helps make sure we can maintain the team, which has grown quite a bit. We're trying to do what we can to support folks running the existing Community Edition - the 2.2.x series will be available for packaged download and 2.3 is be available to be built from source. We're looking at back-porting bug fixes to the 2.3.x branch, but we're in a bit of a git mess right now trying to make it easy to push that stuff back out to GitHub so it isn't an engineering nightmare. Hopefully that will get sorted out soon. The 2.4 branch is currently Enterprise-only and that's where new features and the majority of the support resources are focused. So - the Community Edition is still available, but the new stuff will be Enterprise-only.

 

That said, we have a couple of opportunities we are trying to run down that will let us push out some additional capabilities to the Community Edition. We’ll be posting about that if/when we are able to get those deals closed.

Thanks,

Dan

[scri...@gmail.com]

Hi,

Where can I download the community edition?
Download links say http://www.threadfix.org/download/ but that is no longer hosting the community edition...

[Daniel Maldonado]

A ThreadFix team member should be reaching out to you with that information shortly.

Daniel M

[robin....@gmail.com]

Is there going to be an easy Install Package of the community edition available? I can only find the trial-Version on threadfix.it

Robin H

[sve...@gmail.com]

Was there any update on this ? There seems to be no mirror with community edition right now - just the trial.

[ThreadFix]

No new developments regarding Community or Open Source ThreadFix as of now.  As Dan indicated above, all development costs have been focused on making the Enterprise version of our product as full featured and robust as possible. 

Please be sure you're signed up to our newsletter and you will be made aware of all future developments regarding both the Community and Enterprise versions of ThreadFix.  You can sign up for email updates at the bottom of our website, www.threadfix.it

Thank you,

Kyle Pippin

[nhde...@gmail.com]

Hi,

Is the download available yet? Else the Getting started page here is very confusing - https://github.com/denimgroup/threadfix/wiki/Getting-Started

It indicates:

After downloading the zip file, getting ThreadFix running is easy.

Windows

Simply unpack it and then click on the threadfix.bat icon.

But the trial version has no such file - thus if this is no longer true then lets update the language on the page.

Thanks

On Saturday, July 9, 2016 at 10:11:53 AM UTC-5, Andreas Falk wrote:

[brin...@gmail.com]

I have the same issue, could you please send me the link to download the last available community version also?
Thanks.

[myrealni...@gmail.com]

Dan, any hope to get download link to packaged Community Edition as asked multiple times by other folks?

[Dan Cornell]

Sorry about the delay. There is a packaged download of ThreadFix Community 2.3 here:

https://c8c74af045ac467efda1-a3bc3263c21b6ad6db6861002c3d99c8.ssl.cf1.rackcdn.com/ThreadFix_2.3.0-Community%20Zip.zip

And the source for 2.3 is available on GitHub here:

https://github.com/denimgroup/threadfix

Thanks,

Dan

[Dawid Bałut]

Thank you Dan :)

Cheers,

Dawid Bałut

Founder of InfoSec Remedy

Blogger at dawidbalut.blogspot.com

[Rafael B. Brinhosa]

Hello Dan,

Would be possible to make it available again? I would like to present the tool during a training session but I wasn't able to download.

Thanks,

Rafael

--
You received this message because you are subscribed to a topic in the Google Groups "ThreadFix" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/threadfix/bn2nnoWYhlg/unsubscribe.
To unsubscribe from this group and all its topics, send an email to threadfix+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Dan Cornell]

Ah sorry I think they archived a bunch of stuff – let me see if I can run that down.

 

Thanks,

 

Dan

To unsubscribe from this group and all its topics, send an email to threadfix+...@googlegroups.com.

[Infern0_]

Hey Dan, any luck? :)

[myrealni...@gmail.com]

bump

[Dan Cornell]

Sorry for the delays on this. We’ve been talking about this internally, and the Community Edition is pretty well behind the current state of the Enterprise Edition so we aren’t really comfortable distributing packaged builds for such an old version. For those that are comfortable compiling their own build, the source code for the Community Edition is available on GitHub (https://github.com/denimgroup/threadfix) but for folks who want a pre-packaged build we recommend the free downloadable trial available at https://www.threadfix.it/download/trial/ That should provide for a five-application environment for 30+ days. If this doesn’t meet your needs for whatever reason (need more applications, desire for a longer trial) get in touch and we will see what we can pull together https://www.threadfix.it/contact/

Thanks,

Dan

[climba...@gmail.com]

Thanks for passing that information on Dan.
Will the community edition continue & have pull requests accepted?

[Dan Cornell]

Unfortunately I don't have a great answer at the current time.

We originally thought that we had funding lined up that was going to provide for some support and maintenance of the Community Edition, but that has not panned out. We do have a couple of pending pull requests we would love to incorporate, but right now the team is heads-down working on the Enterprise roadmap without a lot of relief in sight. I would love to accept the pull requests, but we just don't have the support resources to evaluate them and provide the QA required to feel comfortable with new builds and we don't want to just accept pull requests without testing the resulting builds.

So this is an issue we are working on, but we aren't at a point where we have a solution just yet.

Thanks,

Dan