Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | OpenText Fortify Static Code Analyzer by OpenText View product | Black Duck SAST by Black Duck View product |
|---|---|---|
| Overview | ||
| What it is | What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals. | Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools. |
| Product type | Static Application Security Testing (SAST) Engine | Static Application Security Testing |
| Best for | Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High Tech | Cross-industry, Technology, FinTech, Software |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | SaaSCloudOn-Premise |
| Deployment details | On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaS | Cloud; On-premises; Cloud SaaS; On-premises enterprise server |
| Data residency | Customer-hosted code sovereignty; Cloud SaaS options | Global; US; EU; APAC |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Source Code RepositoriesBuild ServersDeveloper IDEs | Source Code RepositoriesCI/CD Build Systems |
| Compliance | PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25NISTDISA STIG | OWASP Top 10CWEPCI DSSISO 27001 |
| Integrations & coverage | ||
| Integrations | Visual StudioVS CodeIntelliJ IDEAJenkinsGitHub ActionsGitLab CI | GitHubGitLabJenkinsAzure DevOpsJiraPolaris |
| Industries | Software DevelopmentBankingHealthcareGovernmentAerospaceFinancial Services+2 more | Cross-industryTechnologyFinTechSoftware |
| Regions | Global enterprise deployments | Global |
| Vendor | ||
| Company | OpenText | Black Duck |
| Headquarters | Waterloo, Ontario, Canada | Burlington, Massachusetts, USA |
| Company size | 20,000+ | 1,001-5,000 |
| Founded | 1991 | 2001 |
Overview
What it is
OpenText Fortify Static Code Analyzer
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.Product type
OpenText Fortify Static Code Analyzer
Static Application Security Testing (SAST) EngineBlack Duck SAST
Static Application Security TestingBest for
OpenText Fortify Static Code Analyzer
Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High TechBlack Duck SAST
Cross-industry, Technology, FinTech, SoftwarePricing
Pricing model
OpenText Fortify Static Code Analyzer
Contact VendorBlack Duck SAST
Contact VendorFree trial
OpenText Fortify Static Code Analyzer
Free trial: yesBlack Duck SAST
Free trial: yesDeployment
Deployment options
OpenText Fortify Static Code Analyzer
Black Duck SAST
Deployment details
OpenText Fortify Static Code Analyzer
On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaSBlack Duck SAST
Cloud; On-premises; Cloud SaaS; On-premises enterprise serverData residency
OpenText Fortify Static Code Analyzer
Customer-hosted code sovereignty; Cloud SaaS optionsBlack Duck SAST
Global; US; EU; APACKey features
What it offers
OpenText Fortify Static Code Analyzer
- Static Application Security Testing (SAST)
- 30+ programming languages supported
- Dataflow analysis
- Real-time IDE plugins
- CI/CD build integration
- ML triage
- Shift-left code scanning
- Automated CI/CD security gating
Black Duck SAST
- Static application security testing
- Proprietary code scanning
- OWASP Top 10 analysis
- Deep dataflow tracing
- Code auditing
- AppSec compliance
Platform & access
API access
OpenText Fortify Static Code Analyzer
API access: yesBlack Duck SAST
API access: yesSingle sign-on (SSO)
OpenText Fortify Static Code Analyzer
SSO: yesBlack Duck SAST
SSO: yesRole-based access (RBAC)
OpenText Fortify Static Code Analyzer
RBAC: yesBlack Duck SAST
RBAC: yesMulti-tenant
OpenText Fortify Static Code Analyzer
Multi-tenant: yesBlack Duck SAST
Multi-tenant: yesMobile app
OpenText Fortify Static Code Analyzer
Mobile app: noBlack Duck SAST
Mobile app: noSupported platforms
OpenText Fortify Static Code Analyzer
Black Duck SAST
Compliance
OpenText Fortify Static Code Analyzer
Black Duck SAST
Integrations & coverage
Integrations
OpenText Fortify Static Code Analyzer
Black Duck SAST
Industries
OpenText Fortify Static Code Analyzer
Black Duck SAST
Regions
OpenText Fortify Static Code Analyzer
Black Duck SAST
Vendor
Company
OpenText Fortify Static Code Analyzer
OpenTextBlack Duck SAST
Black DuckHeadquarters
OpenText Fortify Static Code Analyzer
Waterloo, Ontario, CanadaBlack Duck SAST
Burlington, Massachusetts, USACompany size
OpenText Fortify Static Code Analyzer
20,000+Black Duck SAST
1,001-5,000Founded
OpenText Fortify Static Code Analyzer
1991Black Duck SAST
2001