OpenText Fortify
Enterprise SAST and DAST suite with Fortify on Demand managed testing service.
Technical Architecture & Overview
Fortify, now under OpenText after the Micro Focus acquisition, offers static code analysis across a broad set of languages, dynamic analysis, software composition analysis, and the Fortify on Demand managed service. Analysis supports customer-specific security rules, and Audit Workbench supports manual triage.
Targeted Technical Use Cases
Regulated enterprises with on-premises SAST requirements and large legacy code estates.
Evaluation & Trade-offs
Core Strengths
- +Coverage of 44+ languages and 350+ frameworks, per OpenText.
- +On-premises deployment supported end to end.
- +Audit Workbench for auditing and triaging analysis results.
Trade-Offs & Limitations
- -No published pricing; purchases go through OpenText sales.
Defensive Security Application
Deep static analysis for compliance-driven SDLCs with on-premises requirements.
Frequently Asked Questions
What is OpenText Fortify?→
Fortify, now under OpenText after the Micro Focus acquisition, offers static code analysis across a broad set of languages, dynamic analysis, software composition analysis, and the Fortify on Demand managed service. Analysis supports customer-specific security rules, and Audit Workbench supports manual triage.
What is OpenText Fortify used for?→
Regulated enterprises with on-premises SAST requirements and large legacy code estates.
What are the strengths of OpenText Fortify?→
- +Coverage of 44+ languages and 350+ frameworks, per OpenText.
- +On-premises deployment supported end to end.
- +Audit Workbench for auditing and triaging analysis results.
What are the limitations of OpenText Fortify?→
- +No published pricing; purchases go through OpenText sales.
How is OpenText Fortify used defensively?→
Deep static analysis for compliance-driven SDLCs with on-premises requirements.