Fortify Static Code Analyzer

What Fortify Static Code Analyzer is

Fortify Static Code Analyzer is a paid static application security testing product from OpenText. It examines application source code, bytecode, or binaries to identify security vulnerabilities during development. Fortify SAST describes coverage across 44+ languages, 350+ frameworks, and more than one million APIs, and assesses 1,524+ vulnerability categories. It supports web, mobile, desktop, and cloud-native applications, along with infrastructure-as-code, containers, and APIs. Developers can use AI-driven insights to prioritize and resolve vulnerabilities, as well as automated code fix suggestions through Fortify Remediation Aviator. Listed integrations include GitHub, GitLab, Jenkins, Azure DevOps, VS Code, Eclipse, Visual Studio, IntelliJ, Maven, Gradle, and Jira. Deployment options are SaaS, private-hosted, and off-cloud. The product supports compliance frameworks including OWASP Top 10, NIST, PCI-DSS, and ISO 27001. SAST primarily analyzes proprietary code; OpenText SCA tools identify risks in open-source libraries. Listed platforms are Linux, self-hosted, and Windows. Pricing is on request.

Who it suits

Fortify Static Code Analyzer suits development teams seeking to find vulnerabilities in application code during development. It is relevant to teams working across the listed application types and languages, and that want AI-driven insights, code fix suggestions, integrations, and compliance support.

Getting started

1. Visit the OpenText Fortify Static Code Analyzer website.
2. Request pricing from OpenText.
3. Choose among SaaS, private-hosted, or off-cloud deployment options.
4. Review the listed integrations for your development and issue-tracking tools.

Verdict

Choose Fortify Static Code Analyzer if your team needs static vulnerability analysis across the listed languages, application types, and vulnerability categories, with AI insights and automated fix suggestions. Buyers focused on open-source library risks should also consider OpenText SCA tools, which identify those risks.