Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Black Duck SAST by Black Duck View product | OpenText Fortify Static Code Analyzer by OpenText View product |
|---|---|---|
| Overview | ||
| What it is | Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools. | What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals. |
| Product type | Static Application Security Testing | Static Application Security Testing (SAST) Engine |
| Best for | Cross-industry, Technology, FinTech, Software | Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High Tech |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | SaaSCloudOn-Premise |
| Deployment details | Cloud; On-premises; Cloud SaaS; On-premises enterprise server | On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaS |
| Data residency | Global; US; EU; APAC | Customer-hosted code sovereignty; Cloud SaaS options |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Source Code RepositoriesCI/CD Build Systems | Source Code RepositoriesBuild ServersDeveloper IDEs |
| Compliance | OWASP Top 10CWEPCI DSSISO 27001 | PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25NISTDISA STIG |
| Integrations & coverage | ||
| Integrations | GitHubGitLabJenkinsAzure DevOpsJiraPolaris | Visual StudioVS CodeIntelliJ IDEAJenkinsGitHub ActionsGitLab CI |
| Industries | Cross-industryTechnologyFinTechSoftware | Software DevelopmentBankingHealthcareGovernmentAerospaceFinancial Services+2 more |
| Regions | Global | Global enterprise deployments |
| Vendor | ||
| Company | Black Duck | OpenText |
| Headquarters | Burlington, Massachusetts, USA | Waterloo, Ontario, Canada |
| Company size | 1,001-5,000 | 20,000+ |
| Founded | 2001 | 1991 |
Overview
What it is
Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.OpenText Fortify Static Code Analyzer
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.Product type
Black Duck SAST
Static Application Security TestingOpenText Fortify Static Code Analyzer
Static Application Security Testing (SAST) EngineBest for
Black Duck SAST
Cross-industry, Technology, FinTech, SoftwareOpenText Fortify Static Code Analyzer
Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High TechPricing
Pricing model
Black Duck SAST
Contact VendorOpenText Fortify Static Code Analyzer
Contact VendorFree trial
Black Duck SAST
Free trial: yesOpenText Fortify Static Code Analyzer
Free trial: yesDeployment
Deployment options
Black Duck SAST
OpenText Fortify Static Code Analyzer
Deployment details
Black Duck SAST
Cloud; On-premises; Cloud SaaS; On-premises enterprise serverOpenText Fortify Static Code Analyzer
On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaSData residency
Black Duck SAST
Global; US; EU; APACOpenText Fortify Static Code Analyzer
Customer-hosted code sovereignty; Cloud SaaS optionsKey features
What it offers
Black Duck SAST
- Static application security testing
- Proprietary code scanning
- OWASP Top 10 analysis
- Deep dataflow tracing
- Code auditing
- AppSec compliance
OpenText Fortify Static Code Analyzer
- Static Application Security Testing (SAST)
- 30+ programming languages supported
- Dataflow analysis
- Real-time IDE plugins
- CI/CD build integration
- ML triage
- Shift-left code scanning
- Automated CI/CD security gating
Platform & access
API access
Black Duck SAST
API access: yesOpenText Fortify Static Code Analyzer
API access: yesSingle sign-on (SSO)
Black Duck SAST
SSO: yesOpenText Fortify Static Code Analyzer
SSO: yesRole-based access (RBAC)
Black Duck SAST
RBAC: yesOpenText Fortify Static Code Analyzer
RBAC: yesMulti-tenant
Black Duck SAST
Multi-tenant: yesOpenText Fortify Static Code Analyzer
Multi-tenant: yesMobile app
Black Duck SAST
Mobile app: noOpenText Fortify Static Code Analyzer
Mobile app: noSupported platforms
Black Duck SAST
OpenText Fortify Static Code Analyzer
Compliance
Black Duck SAST
OpenText Fortify Static Code Analyzer
Integrations & coverage
Integrations
Black Duck SAST
OpenText Fortify Static Code Analyzer
Industries
Black Duck SAST
OpenText Fortify Static Code Analyzer
Regions
Black Duck SAST
OpenText Fortify Static Code Analyzer
Vendor
Company
Black Duck SAST
Black DuckOpenText Fortify Static Code Analyzer
OpenTextHeadquarters
Black Duck SAST
Burlington, Massachusetts, USAOpenText Fortify Static Code Analyzer
Waterloo, Ontario, CanadaCompany size
Black Duck SAST
1,001-5,000OpenText Fortify Static Code Analyzer
20,000+Founded
Black Duck SAST
2001OpenText Fortify Static Code Analyzer
1991