
(TODO write out:)

This document describes our security analysis of the (?) CMS according to the OWASP ASVS (v3.0.1), as well as an analysis of Fortify's results compared to our findings \& the OWASP ASVS categories.

Outline: first our analysis, then a summary of Fortify's analysis and how it compares to ours etc., then some reflection.
