Identifying the correct entry point for a service named "BeSecure" can be challenging due to several distinct cybersecurity and service-oriented platforms sharing the name. For most enterprise users, "beSECURE" refers to the high-end vulnerability assessment and management tool developed by Beyond Security, which is now a part of Fortra. Because this is a professional-grade security tool, there is no single "universal" login page. Instead, the login portal is typically unique to your organization's specific deployment.

To access your account, you must first determine if you are using the Fortra beSECURE platform, a corporate consulting portal, or a specific mobile application. This guide provides comprehensive instructions on how to navigate the login process for each, with a primary focus on the enterprise vulnerability management system.

Quick Identification: Which BeSecure Are You Using?

Before attempting to enter your credentials, ensure you are at the correct portal. Entering sensitive security credentials into the wrong site poses a significant risk.

  1. beSECURE by Fortra (formerly Beyond Security): This is a network vulnerability scanner. You likely access it via a dedicated IP address (e.g., https://192.168.x.x) or a custom subdomain (e.g., https://yourcompany.besecure.com). It requires organizational credentials provided by your IT department.
  2. BeSecure Group or Consulting Services: These are cybersecurity firms. If you are a client, your login link was likely provided in an onboarding email and leads to a client dashboard for viewing audit reports.
  3. BeSecure Mobile Apps: Used by security guards or facility managers for patrol tracking. This is managed through the iOS App Store or Google Play Store.
  4. Bsafe (Bravura Safe): Often confused with BeSecure, this is a password vault and secrets management tool. Its login involves a Master Password and often a Command Line Interface (CLI) interaction.

Comprehensive Guide to Fortra beSECURE Login

The Fortra beSECURE system is designed for high-security environments, meaning the login process is governed by strict access controls. Whether you are using the cloud-based SaaS version or an on-premises virtual instance, the following procedures apply.

System and Browser Requirements

A successful login experience begins with the right technical environment. Professional security tools often use advanced JavaScript and CSS for real-time dashboard updates, which can break on outdated browsers.

  • Recommended Browsers: Google Chrome is the preferred choice for the most stable experience. Microsoft Edge, Mozilla Firefox, Safari, and Opera are also supported.
  • Unsupported Browsers: Internet Explorer is strictly not supported due to its lack of modern security protocols and rendering capabilities.
  • Network Connectivity: If you are accessing an on-premises Information Server (IS), your machine must have network routing to the server's IP. Ensure that port 443 (HTTPS) is open and not blocked by local firewalls or VPN restrictions.

How to Locate Your Unique Login URL

Unlike public SaaS products like Gmail or Slack, beSECURE is often "invisible" to the public internet for security reasons.

  • For Cloud Users: Check your initial "Welcome to beSECURE" email. It will contain a specific URL formatted for your organization.
  • For On-Premises Users: The login portal is the IP address or hostname assigned to the beSECURE Information Server during installation. If you do not have this, contact your System Administrator.
  • The Welcome Page: Once you reach the correct URL, you should see a "Welcome to beSECURE" screen with fields for Username and Password.

Step-by-Step Login Process

  1. Navigate to the Portal: Enter your organization-specific URL into a supported browser. Ensure the connection is secure (indicated by the padlock icon and https://).
  2. Enter Credentials: Input the username and password provided by your Account Manager or Internal Security Lead.
  3. Two-Factor Authentication (2FA): If your organization has enabled 2FA, you will be prompted to enter a code from your authenticator app or email after the initial password check.
  4. Landing on the Home Page: Upon successful authentication, you are redirected to the Home Page, which displays real-time widgets and vulnerability scan summaries.

Managing the Account Lockout Policy

One of the most common issues users face is being locked out of their accounts. beSECURE implements a "Three Strikes" rule to prevent brute-force attacks.

The 30-Minute Cooldown

If you enter an incorrect password three times, the system will automatically lock your account. By default, this lockout lasts for 30 minutes. During this time, even if you remember the correct password, the system will reject all attempts.

  • Why does this happen? This is a security feature to stop automated scripts from guessing passwords.
  • Can the timer be changed? Yes. Administrators can modify the "Password Failure Lockout Duration" parameter within the Security Profile settings.
  • What if I can't wait? You must contact a user with "Administrative" or "Organization Manager" privileges. They can manually unlock your account or reset your password through the "Managing Accounts" section of the administrative functions.

Troubleshooting Common Login Errors

If you cannot reach the login screen or your credentials are not working, follow these troubleshooting steps derived from common deployment scenarios.

1. "Site Can't Be Reached" or Timeout

This is usually a network-level issue rather than a credential issue.

  • Check VPN: If beSECURE is hosted internally, ensure your VPN is active.
  • IP Whitelisting: Your administrator may have restricted login access to specific IP ranges. If you are working from a new location (e.g., a home office or a different branch), your current IP might not be authorized.
  • Server Status: The Information Server (IS) service might be restarting or undergoing updates.

2. "Invalid Username or Password"

  • Case Sensitivity: Usernames and passwords in beSECURE are case-sensitive. Ensure your Caps Lock is off.
  • Account Deactivation: If a user has not logged in for an extended period, an administrator might have marked the account as "Inactive" to save on license seats or for security hygiene.
  • Password Expiration: Depending on the Security Profile assigned to you, your password may have expired. Look for a "Reset Password" link on the login page, but note that some configurations disable this for higher security.

3. SSL/TLS Certificate Errors

When accessing a new on-premises installation, your browser might warn you that the "Connection is not private."

  • Self-Signed Certificates: During initial setup, beSECURE may use a self-signed certificate. You may need to click "Advanced" and "Proceed to [IP Address]" to reach the login page.
  • Production Environments: In a mature setup, your IT team should have installed a valid CA-signed certificate. If you see a certificate error here, it could indicate a Man-in-the-Middle (MITM) attack or an expired corporate certificate.

Advanced Access: Security Profiles and User Roles

Understanding your role within beSECURE is crucial for knowing what you can see and do once logged in. Access is not "one size fits all."

User Privilege Levels

When you log in, your experience is dictated by the profile assigned to you by the Organization Manager:

  • Organization Manager: Full access to all scans, assets, and user management for a specific organization.
  • Account Manager: Can view results and manage scans but may have limited administrative rights.
  • Contact/User: Often restricted to viewing specific reports or asset groups. If you log in and see no data, it is likely that no "Asset Groups" have been assigned to your profile.

Security Profiles and Session Limits

Administrators can create different Security Profiles to enforce strict login behaviors:

  • Session Timeout: You may be automatically logged out after a period of inactivity (e.g., 15 minutes) to prevent unauthorized access from an unattended terminal.
  • Simultaneous Logins: Some profiles prevent a single username from being logged in from two different IP addresses at the same time.
  • Password Complexity: Profiles define the required length, special characters, and rotation frequency for all user passwords.

How to Log Out Securely

In a high-stakes security environment, simply closing the browser tab is insufficient. Active sessions can sometimes be hijacked if the browser persists the session cookie.

  1. Locate your Username in the top-right corner of the beSECURE interface.
  2. Click the dropdown menu.
  3. Select Logout. This action invalidates the session token on the server side, ensuring that the "Back" button cannot be used to return to your sensitive dashboard.

Login Procedures for Related "BeSecure" Services

If you have realized that you are not looking for the Fortra vulnerability tool, here is how to access other common "BeSecure" platforms.

BeSecure Mobile App (Security & Patrol)

For facility security personnel using the patrol app:

  • Login ID: Usually your corporate email address.
  • Initial Setup: You must be invited by your facility manager. You cannot "Sign Up" independently on the app.
  • Troubleshooting: If the app fails to authenticate, check your GPS and data connection, as these apps often require active location services to log in.

BeSecure Networks (Consulting Client Portal)

Clients of BeSecure-branded consulting firms often receive a "Client Portal" link.

  • Access Method: These portals are typically hosted on the firm’s main website under a "Client Login" button.
  • Data View: Once logged in, you can download PDF versions of your latest penetration testing or compliance audit results.

Bravura Safe (Bsafe) CLI Login

For developers and IT ops using the Bravura Security Fabric:

  • Command: Use bsafe login.
  • Method: You can log in via email and master password (recommended for interactive sessions) or via API Key (bsafe login --apikey) for automated workflows.
  • Unlock Command: Remember that logging in is separate from "unlocking." To decrypt your vault data, you must run bsafe unlock after the login command.

Summary of beSECURE Login Best Practices

To maintain the integrity of your vulnerability management data, adhere to these professional standards:

  • Never Reuse Passwords: Ensure your beSECURE password is unique and not used for your corporate email or other SaaS tools.
  • Use a Password Manager: Given the complexity requirements of security tools, use a manager to store your unique organizational URL and credentials.
  • Verify the URL: Always double-check the domain or IP before entering credentials to protect against internal phishing attempts.
  • Monitor Active Users: If you are an administrator, regularly check the "Managing Active Users" section in the dashboard to identify any unauthorized or stale sessions.

Frequently Asked Questions (FAQ)

What should I do if I forgot my beSECURE login URL?

Contact your company's IT Help Desk or the Security Operations Center (SOC) manager. As the URL is specific to your installation, external support from Fortra may not be able to provide it without verifying your identity and organization.

Why am I getting a "License Expired" message at the login screen?

This happens when the beSECURE license has reached its end date or the maximum number of scanned IPs has been exceeded. An administrator must upload a new license file (provided by Fortra) via the "Managing Licenses" section. In some cases, you may still be able to log in to view old reports, but new scans will be disabled.

Can I log in to beSECURE from my mobile phone?

While you can access the web-based portal via a mobile browser like Chrome on Android or Safari on iOS, the interface is optimized for desktop use. Detailed vulnerability graphs and large asset tables may be difficult to navigate on a small screen.

How do I reset a user's password if I am an admin?

Navigate to Administrative Functions > Managing Accounts. Find the specific user, click the edit icon, and enter a new password. You can also check the box "Force password change on next login" to ensure the user sets their own private credential.

Is there a "Root" login for beSECURE?

On-premises virtual appliances have a console-level login (often via SSH or the VM console) used for initial network configuration. This is separate from the web-based portal login used for security scanning. Console credentials should be guarded with extreme care and limited to system administrators.

What is the difference between "Fixed" and "Real-time" dashboards after login?

When you log in, you may see two tabs on the Home Page. The Real-time tab refreshes every 60 seconds to show live scan progress. The Fixed tab shows a snapshot of the last completed update, which is useful for consistent reporting and analysis during a workday.

Does beSECURE support Single Sign-On (SSO)?

Recent versions of beSECURE support integration with external identity providers. If your organization has configured this, you may see an "SSO Login" button which will redirect you to your company's standard login page (like Okta or Azure AD).

My account is locked, but I am the only administrator. What can I do?

If the only administrative account is locked, you must wait the default 30 minutes for the lockout timer to expire. If you have completely forgotten the password, you may need to access the server console (via SSH or VM management) to perform a manual password reset through the backend command line, or contact Fortra technical support for recovery assistance.

By following these guidelines, you ensure that your access to critical security data remains uninterrupted while maintaining the high-security standards required for modern vulnerability management.