Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | OpenText Fortify Static Code Analyzer by OpenText View product | Black Duck CodeSight by Black Duck View product |
|---|---|---|
| Overview | ||
| What it is | What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals. | Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors. |
| Product type | Static Application Security Testing (SAST) Engine | IDE Security Analysis Plugin |
| Best for | Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High Tech | Cross-industry, Software, Technology, Software Engineering, IT Development |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | Cloud |
| Deployment details | On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaS | Local IDE / Developer workstation; IDE desktop extension / developer plugin |
| Data residency | Customer-hosted code sovereignty; Cloud SaaS options | Local developer workstation |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Source Code RepositoriesBuild ServersDeveloper IDEs | Visual StudioVS CodeIntelliJ IDEAEclipse |
| Compliance | PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25NISTDISA STIG | OWASPCWESANS Top 25 |
| Integrations & coverage | ||
| Integrations | Visual StudioVS CodeIntelliJ IDEAJenkinsGitHub ActionsGitLab CI | Visual StudioVS CodeIntelliJ IDEAEclipseCoveritySCA |
| Industries | Software DevelopmentBankingHealthcareGovernmentAerospaceFinancial Services+2 more | Cross-industrySoftwareTechnologySoftware EngineeringIT Development |
| Regions | Global enterprise deployments | Global |
| Vendor | ||
| Company | OpenText | Black Duck |
| Headquarters | Waterloo, Ontario, Canada | Burlington, Massachusetts, USA |
| Company size | 20,000+ | 1,001-5,000 |
| Founded | 1991 | 2001 |
Overview
What it is
OpenText Fortify Static Code Analyzer
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.Product type
OpenText Fortify Static Code Analyzer
Static Application Security Testing (SAST) EngineBlack Duck CodeSight
IDE Security Analysis PluginBest for
OpenText Fortify Static Code Analyzer
Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High TechBlack Duck CodeSight
Cross-industry, Software, Technology, Software Engineering, IT DevelopmentPricing
Pricing model
OpenText Fortify Static Code Analyzer
Contact VendorBlack Duck CodeSight
Contact VendorFree trial
OpenText Fortify Static Code Analyzer
Free trial: yesBlack Duck CodeSight
Free trial: yesDeployment
Deployment options
OpenText Fortify Static Code Analyzer
Black Duck CodeSight
Deployment details
OpenText Fortify Static Code Analyzer
On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaSBlack Duck CodeSight
Local IDE / Developer workstation; IDE desktop extension / developer pluginData residency
OpenText Fortify Static Code Analyzer
Customer-hosted code sovereignty; Cloud SaaS optionsBlack Duck CodeSight
Local developer workstationKey features
What it offers
OpenText Fortify Static Code Analyzer
- Static Application Security Testing (SAST)
- 30+ programming languages supported
- Dataflow analysis
- Real-time IDE plugins
- CI/CD build integration
- ML triage
- Shift-left code scanning
- Automated CI/CD security gating
Black Duck CodeSight
- Real-time IDE code analysis
- Open-source dependency scanning
- Secret detection
- Instant remediation tips
- Real-time in-editor security scanning
- Early vulnerability remediation
Platform & access
API access
OpenText Fortify Static Code Analyzer
API access: yesBlack Duck CodeSight
API access: yesSingle sign-on (SSO)
OpenText Fortify Static Code Analyzer
SSO: yesBlack Duck CodeSight
SSO: yesRole-based access (RBAC)
OpenText Fortify Static Code Analyzer
RBAC: yesBlack Duck CodeSight
RBAC: yesMulti-tenant
OpenText Fortify Static Code Analyzer
Multi-tenant: yesBlack Duck CodeSight
Multi-tenant: noMobile app
OpenText Fortify Static Code Analyzer
Mobile app: noBlack Duck CodeSight
Mobile app: noSupported platforms
OpenText Fortify Static Code Analyzer
Black Duck CodeSight
Compliance
OpenText Fortify Static Code Analyzer
Black Duck CodeSight
Integrations & coverage
Integrations
OpenText Fortify Static Code Analyzer
Black Duck CodeSight
Industries
OpenText Fortify Static Code Analyzer
Black Duck CodeSight
Regions
OpenText Fortify Static Code Analyzer
Black Duck CodeSight
Vendor
Company
OpenText Fortify Static Code Analyzer
OpenTextBlack Duck CodeSight
Black DuckHeadquarters
OpenText Fortify Static Code Analyzer
Waterloo, Ontario, CanadaBlack Duck CodeSight
Burlington, Massachusetts, USACompany size
OpenText Fortify Static Code Analyzer
20,000+Black Duck CodeSight
1,001-5,000Founded
OpenText Fortify Static Code Analyzer
1991Black Duck CodeSight
2001