OpenText Fortify
Enterprise SAST and DAST suite with Fortify on Demand managed testing service.
What Is OpenText Fortify?
Fortify, now under OpenText after the Micro Focus acquisition, offers static code analysis across a broad set of languages, dynamic analysis, software composition analysis, and the Fortify on Demand managed service. Analysis supports customer-specific security rules, and Audit Workbench supports manual triage.
Use Cases
Regulated enterprises with on-premises SAST requirements and large legacy code estates.
Strengths and Limitations
Strengths
- +Coverage of 44+ languages and 350+ frameworks, per OpenText.
- +On-premises deployment supported end to end.
- +Audit Workbench for auditing and triaging analysis results.
Limitations
- -No published pricing; purchases go through OpenText sales.
Defensive Use
Deep static analysis for compliance-driven SDLCs with on-premises requirements.
OpenText Fortify Alternatives
| Tool | License | Platforms | Pricing |
|---|---|---|---|
| Checkmarx One Cloud-native application security platform unifying SAST, SCA, API security, and container scanning. | Proprietary | Web | Commercial |
| SonarQube Multi-language static analysis and code quality platform with open-source Community Build and commercial Server and Cloud editions. | LGPL-3.0-or-later (source); Sonar Source-Available License v1.0 (bundled analyzers) | Linux, macOS, Windows | Free / Commercial |
| Veracode Application risk platform with source and binary SAST, DAST, SCA, and penetration testing as a service. | Proprietary | Web | Commercial |
Frequently Asked Questions
What is OpenText Fortify?→
Fortify, now under OpenText after the Micro Focus acquisition, offers static code analysis across a broad set of languages, dynamic analysis, software composition analysis, and the Fortify on Demand managed service. Analysis supports customer-specific security rules, and Audit Workbench supports manual triage.
What is OpenText Fortify used for?→
Regulated enterprises with on-premises SAST requirements and large legacy code estates.
What are the strengths of OpenText Fortify?→
- +Coverage of 44+ languages and 350+ frameworks, per OpenText.
- +On-premises deployment supported end to end.
- +Audit Workbench for auditing and triaging analysis results.
What are the limitations of OpenText Fortify?→
- +No published pricing; purchases go through OpenText sales.
How is OpenText Fortify used defensively?→
Deep static analysis for compliance-driven SDLCs with on-premises requirements.