Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Black Duck CodeSight by Black Duck View product | OpenText Fortify Static Code Analyzer by OpenText View product |
|---|---|---|
| Overview | ||
| What it is | Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors. | What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals. |
| Product type | IDE Security Analysis Plugin | Static Application Security Testing (SAST) Engine |
| Best for | Cross-industry, Software, Technology, Software Engineering, IT Development | Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High Tech |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | SaaSCloudOn-Premise |
| Deployment details | Local IDE / Developer workstation; IDE desktop extension / developer plugin | On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaS |
| Data residency | Local developer workstation | Customer-hosted code sovereignty; Cloud SaaS options |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Visual StudioVS CodeIntelliJ IDEAEclipse | Source Code RepositoriesBuild ServersDeveloper IDEs |
| Compliance | OWASPCWESANS Top 25 | PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25NISTDISA STIG |
| Integrations & coverage | ||
| Integrations | Visual StudioVS CodeIntelliJ IDEAEclipseCoveritySCA | Visual StudioVS CodeIntelliJ IDEAJenkinsGitHub ActionsGitLab CI |
| Industries | Cross-industrySoftwareTechnologySoftware EngineeringIT Development | Software DevelopmentBankingHealthcareGovernmentAerospaceFinancial Services+2 more |
| Regions | Global | Global enterprise deployments |
| Vendor | ||
| Company | Black Duck | OpenText |
| Headquarters | Burlington, Massachusetts, USA | Waterloo, Ontario, Canada |
| Company size | 1,001-5,000 | 20,000+ |
| Founded | 2001 | 1991 |
Overview
What it is
Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.OpenText Fortify Static Code Analyzer
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.Product type
Black Duck CodeSight
IDE Security Analysis PluginOpenText Fortify Static Code Analyzer
Static Application Security Testing (SAST) EngineBest for
Black Duck CodeSight
Cross-industry, Software, Technology, Software Engineering, IT DevelopmentOpenText Fortify Static Code Analyzer
Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High TechPricing
Pricing model
Black Duck CodeSight
Contact VendorOpenText Fortify Static Code Analyzer
Contact VendorFree trial
Black Duck CodeSight
Free trial: yesOpenText Fortify Static Code Analyzer
Free trial: yesDeployment
Deployment options
Black Duck CodeSight
OpenText Fortify Static Code Analyzer
Deployment details
Black Duck CodeSight
Local IDE / Developer workstation; IDE desktop extension / developer pluginOpenText Fortify Static Code Analyzer
On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaSData residency
Black Duck CodeSight
Local developer workstationOpenText Fortify Static Code Analyzer
Customer-hosted code sovereignty; Cloud SaaS optionsKey features
What it offers
Black Duck CodeSight
- Real-time IDE code analysis
- Open-source dependency scanning
- Secret detection
- Instant remediation tips
- Real-time in-editor security scanning
- Early vulnerability remediation
OpenText Fortify Static Code Analyzer
- Static Application Security Testing (SAST)
- 30+ programming languages supported
- Dataflow analysis
- Real-time IDE plugins
- CI/CD build integration
- ML triage
- Shift-left code scanning
- Automated CI/CD security gating
Platform & access
API access
Black Duck CodeSight
API access: yesOpenText Fortify Static Code Analyzer
API access: yesSingle sign-on (SSO)
Black Duck CodeSight
SSO: yesOpenText Fortify Static Code Analyzer
SSO: yesRole-based access (RBAC)
Black Duck CodeSight
RBAC: yesOpenText Fortify Static Code Analyzer
RBAC: yesMulti-tenant
Black Duck CodeSight
Multi-tenant: noOpenText Fortify Static Code Analyzer
Multi-tenant: yesMobile app
Black Duck CodeSight
Mobile app: noOpenText Fortify Static Code Analyzer
Mobile app: noSupported platforms
Black Duck CodeSight
OpenText Fortify Static Code Analyzer
Compliance
Black Duck CodeSight
OpenText Fortify Static Code Analyzer
Integrations & coverage
Integrations
Black Duck CodeSight
OpenText Fortify Static Code Analyzer
Industries
Black Duck CodeSight
OpenText Fortify Static Code Analyzer
Regions
Black Duck CodeSight
OpenText Fortify Static Code Analyzer
Vendor
Company
Black Duck CodeSight
Black DuckOpenText Fortify Static Code Analyzer
OpenTextHeadquarters
Black Duck CodeSight
Burlington, Massachusetts, USAOpenText Fortify Static Code Analyzer
Waterloo, Ontario, CanadaCompany size
Black Duck CodeSight
1,001-5,000OpenText Fortify Static Code Analyzer
20,000+Founded
Black Duck CodeSight
2001OpenText Fortify Static Code Analyzer
1991