OpenText Fortify

A comprehensive application security testing suite offering static, dynamic, mobile, and composition analysis across deployment models.

Paid

Web

Own OpenText Fortify?Claim this listing

#Code Security

Overview

OpenText Fortify provides broad-spectrum application security testing—including static (SAST), dynamic (DAST), mobile (MAST), and software composition analysis (SCA)—with flexible deployment options such as SaaS, hosted, and on‑premises.

Key Features

Multi‑modality AppSec Testing

Supports SAST, DAST, MAST and SCA for comprehensive coverage across static, dynamic, mobile, and open‑source components.

Extensive Language & Framework Support

Covers 44+ programming languages, 350+ frameworks, and over 1,500 vulnerability categories with broad API analysis.

Flexible Deployment Models

Available as SaaS (Fortify on Demand), private‑hosted, or on‑premises providing deployment flexibility.

CI/CD and IDE Integration

Integrates into IDEs (Visual Studio, IntelliJ, Eclipse) and CI/CD pipelines (Jenkins, Azure DevOps, GitHub Actions, etc.).

AI‑Assisted Auditing & Remediation

Includes machine‑learning based audit assistant and Remediation Aviator that prioritize findings and suggest fixes.

API & IaC Scanning

Scans modern infrastructures including containers, APIs (REST, GraphQL, Swagger), IaC configurations, serverless.

Centralized Governance & Reporting

Provides dashboards, customizable reports, policy‑based enforcement, compliance mapping (OWASP, PCI‑DSS, NIST, ISO 27001).

Who It's For

How to Use

Select deployment model

Choose SaaS, hosted, or on‑premises based on infrastructure and compliance needs.

Integrate with development tools

Install scan agents or plugins in IDEs and configure CI/CD pipelines for automated scans.

Configure security policies

Define policies and compliance rule‑sets (e.g., OWASP, NIST) for consistent enforcement.

Run initial scans

Execute SAST, DAST, MAST, and SCA scans across target applications to discover vulnerabilities.

Review findings & remediation advice

Use AI‑assisted audit and Remediation Aviator to prioritize and guide fixes.

Monitor and report

Use dashboards and reports to track remediation progress and compliance posture over time.

Pricing

Pricing details are gathered from the official OpenText Fortify website and are provided for reference only. Always confirm the latest information directly with the vendor.

Plan	Price	Highlights
Contact Sales	Contact sales	Access to full Fortify suite with flexible deployment Includes SAST, DAST, MAST, SCA testing modalities Support, dashboards, AI‑assisted remediation tools

Found a change in pricing? We welcome corrections. Reach out so we can keep this listing accurate.

Pros & Cons

Pros

Comprehensive coverage across testing types and languages
Flexible deployments accommodate varied security postures
Strong integrations enable seamless DevSecOps workflows
AI‑powered auditing reduces false positives and speeds remediation
Governance features support compliance and reporting needs

Cons

No publicly listed pricing—requires contacting sales
Potential complexity in deployment and management
May require licensing for assessment units (AUs) and subscriptions
Advanced capabilities may incur high cost for smaller teams
Learning curve for full feature utilization

Use Cases

Explore tools grouped by use case so you can keep researching without losing momentum.

Frequently Asked Questions

Alternatives

Compare other vetted products our editors see buyers evaluate alongside OpenText Fortify.

Ratings & reviews

Is OpenText Fortify your tool?

Claim this listing to keep it up to date, respond to reviews, and promote it.

Claim this listing

Key Features

Multi‑modality AppSec Testing

Supports SAST, DAST, MAST and SCA for comprehensive coverage across static, dynamic, mobile, and open‑source components.

Extensive Language & Framework Support

Covers 44+ programming languages, 350+ frameworks, and over 1,500 vulnerability categories with broad API analysis.

Flexible Deployment Models

Available as SaaS (Fortify on Demand), private‑hosted, or on‑premises providing deployment flexibility.

CI/CD and IDE Integration

Integrates into IDEs (Visual Studio, IntelliJ, Eclipse) and CI/CD pipelines (Jenkins, Azure DevOps, GitHub Actions, etc.).

AI‑Assisted Auditing & Remediation

Includes machine‑learning based audit assistant and Remediation Aviator that prioritize findings and suggest fixes.

API & IaC Scanning

Scans modern infrastructures including containers, APIs (REST, GraphQL, Swagger), IaC configurations, serverless.

Centralized Governance & Reporting

Provides dashboards, customizable reports, policy‑based enforcement, compliance mapping (OWASP, PCI‑DSS, NIST, ISO 27001).

Who It's For

How to Use

Select deployment model

Choose SaaS, hosted, or on‑premises based on infrastructure and compliance needs.

Integrate with development tools

Install scan agents or plugins in IDEs and configure CI/CD pipelines for automated scans.

Configure security policies

Define policies and compliance rule‑sets (e.g., OWASP, NIST) for consistent enforcement.

Run initial scans

Execute SAST, DAST, MAST, and SCA scans across target applications to discover vulnerabilities.

Review findings & remediation advice

Use AI‑assisted audit and Remediation Aviator to prioritize and guide fixes.

Monitor and report

Use dashboards and reports to track remediation progress and compliance posture over time.

Pricing

Pricing details are gathered from the official OpenText Fortify website and are provided for reference only. Always confirm the latest information directly with the vendor.

Plan	Price	Highlights
Contact Sales	Contact sales	Access to full Fortify suite with flexible deployment Includes SAST, DAST, MAST, SCA testing modalities Support, dashboards, AI‑assisted remediation tools

Found a change in pricing? We welcome corrections. Reach out so we can keep this listing accurate.

Pros & Cons

Pros

Comprehensive coverage across testing types and languages
Flexible deployments accommodate varied security postures
Strong integrations enable seamless DevSecOps workflows
AI‑powered auditing reduces false positives and speeds remediation
Governance features support compliance and reporting needs

Cons

No publicly listed pricing—requires contacting sales
Potential complexity in deployment and management
May require licensing for assessment units (AUs) and subscriptions
Advanced capabilities may incur high cost for smaller teams
Learning curve for full feature utilization

Use Cases

Explore tools grouped by use case so you can keep researching without losing momentum.

Frequently Asked Questions

Alternatives

Compare other vetted products our editors see buyers evaluate alongside OpenText Fortify.

OpenText Fortify

Overview

Featured Video

Key Features

Multi‑modality AppSec Testing

Extensive Language & Framework Support

Flexible Deployment Models

CI/CD and IDE Integration

AI‑Assisted Auditing & Remediation

API & IaC Scanning

Centralized Governance & Reporting

Who It's For

How to Use

Select deployment model

Integrate with development tools

Configure security policies

Run initial scans

Review findings & remediation advice

Monitor and report

Pricing

Pros & Cons

Pros

Cons

Use Cases

Frequently Asked Questions

Alternatives

Ratings & reviews

Featured Video

Key Features

Multi‑modality AppSec Testing

Extensive Language & Framework Support

Flexible Deployment Models

CI/CD and IDE Integration

AI‑Assisted Auditing & Remediation

API & IaC Scanning

Centralized Governance & Reporting

Who It's For

How to Use

Select deployment model

Integrate with development tools

Configure security policies

Run initial scans

Review findings & remediation advice

Monitor and report

Pricing

Pros & Cons

Pros

Cons

Use Cases

Frequently Asked Questions

Alternatives

Ratings & reviews