Freedom251 › Static Analysis Tools
OpenText Fortify SAST

What OpenText Fortify SAST is
OpenText Fortify SAST is a static application security testing product for analyzing source code, bytecode, and binaries. It supports scans in pull requests and IDEs, and can be integrated into CI/CD workflows. Teams can create custom security rules to match their security requirements, and the product includes automated fixes. It is available on Linux, macOS, Windows, and the web, giving teams several listed platform options for using the product. Fortify SAST is a paid product, with pricing available on request. OpenText, its maker, was founded in 1991 and is headquartered in Waterloo, Ontario, Canada. The listed capabilities cover analysis targets, development workflow support, rule customization, and automated remediation. This makes the product relevant to teams that want static analysis across multiple code representations and want security checks connected to pull requests, IDEs, or CI/CD pipelines. The facts describe these capabilities but do not specify scan volumes, supported programming languages, or what automated fixes cover.
Who it suits
Fortify SAST suits software teams that need static security analysis for source code, bytecode, or binaries. It may also fit teams that want scans in pull requests, IDEs, or CI/CD workflows and need custom security rules or automated fixes.
What it does well
- Analyzes source code, bytecode, and binaries.
- Supports pull request scans.
- Offers IDE and CI/CD integration.
- Allows custom security rules.
- Includes automated fixes.
- Available on Linux, macOS, web, and Windows.
What to know first
- It is a paid product.
- Pricing is available on request.
Getting started
- Visit the OpenText Fortify SAST website.
- Contact OpenText for pricing and product access.
- Use the product on Linux, macOS, Windows, or the web.
- Connect it to pull requests, IDEs, or CI/CD workflows as needed.
Verdict
Choose OpenText Fortify SAST if your team needs static analysis across source code, bytecode, or binaries, with development workflow support and custom rules. Look elsewhere if you need published pricing or a free option.
Questions
What does OpenText Fortify SAST analyze?
It analyzes source code, bytecode, and binaries.
Can Fortify SAST scan pull requests?
Yes. Pull request scans are supported.
Does it integrate with IDEs and CI/CD?
Yes. IDE support and CI/CD integration are listed.
Can teams add custom security rules?
Yes. Custom security rules are supported.
Does Fortify SAST include automated fixes?
Yes. Automated fixes are listed.
How is it priced?
It is paid, with pricing on request.
Facts from OpenText Fortify SAST's own pages
- Founded
- 1991 · opentext.com, 23 Sept 2026
- Headquarters
- Waterloo, Ontario, Canada · opentext.com, 23 Sept 2026
Where OpenText Fortify SAST stands on Freedom251
- Static Analysis Tools#32 of 38
- Static Application Security Testing Sast#22 of 24
- SAST Tools#24 of 26
- Ruby Static Analysis Tools#21 of 21