Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

OpenText Fortify Static Code AnalyzerGitHub Code Scanning2 of 3 products

Side-by-side comparison of OpenText Fortify Static Code Analyzer, GitHub Code Scanning
Product	OpenText Fortify Static Code Analyzer by OpenText View product	GitHub Code Scanning by GitHub View product
Overview
What it is	What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.	Evaluating GitHub Code Scanning? See how this SAST tool handles native CodeQL analysis and SARIF report ingestion, where it fits best and which alternatives to compare.
Product type	Static Application Security Testing (SAST) Engine	Developer-First Static Application Security Testing (SAST)
Best for	Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High Tech	Technology, Financial Services, Healthcare, Government, Manufacturing, Education, Retail, Telecommunications
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	SaaSCloudOn-Premise	SaaSCloudOn-Premise
Deployment details	On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaS	Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Cloud; GitHub Enterprise Server
Data residency	Customer-hosted code sovereignty; Cloud SaaS options	United States; European Union; Customer-hosted options
Key features
What it offers	Static Application Security Testing (SAST) 30+ programming languages supported Dataflow analysis Real-time IDE plugins CI/CD build integration ML triage Shift-left code scanning Automated CI/CD security gating	Native CodeQL analysis SARIF report ingestion Inline pull request annotations Automated branch scanning Custom query creation CWE classification Automated code vulnerability scanning Pull request security review
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: yes
Supported platforms	Source Code RepositoriesBuild ServersDeveloper IDEs	GitHub repositoriesCI/CD runners (GitHub Actions, self-hosted)
Compliance	PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25NISTDISA STIG	SOC 1SOC 2 Type IIISO 27001NIST SP 800-218
Integrations & coverage
Integrations	Visual StudioVS CodeIntelliJ IDEAJenkinsGitHub ActionsGitLab CI	GitHub ActionsVisual Studio CodeJenkinsAzure DevOpsJiraSlack
Industries	Software DevelopmentBankingHealthcareGovernmentAerospaceFinancial Services+2 more	TechnologyFinancial ServicesHealthcareGovernmentManufacturingEducation+2 more
Regions	Global enterprise deployments	Global
Vendor
Company	OpenText	GitHub
Headquarters	Waterloo, Ontario, Canada	San Francisco, California, USA
Company size	20,000+	10,000+
Founded	1991	2008

OpenText Fortify Static Code Analyzer

by OpenText

View product

GitHub Code Scanning

by GitHub

View product

Overview

What it is

OpenText Fortify Static Code Analyzer

What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.

GitHub Code Scanning

Evaluating GitHub Code Scanning? See how this SAST tool handles native CodeQL analysis and SARIF report ingestion, where it fits best and which alternatives to compare.

Product type

OpenText Fortify Static Code Analyzer

Static Application Security Testing (SAST) Engine

GitHub Code Scanning

Developer-First Static Application Security Testing (SAST)

Best for

OpenText Fortify Static Code Analyzer

Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High Tech

GitHub Code Scanning

Technology, Financial Services, Healthcare, Government, Manufacturing, Education, Retail, Telecommunications

Pricing

Pricing model

OpenText Fortify Static Code Analyzer

Contact Vendor

GitHub Code Scanning

Contact Vendor

Free trial

OpenText Fortify Static Code Analyzer

GitHub Code Scanning

Deployment

Deployment options

OpenText Fortify Static Code Analyzer

SaaSCloudOn-Premise

GitHub Code Scanning

SaaSCloudOn-Premise

Deployment details

OpenText Fortify Static Code Analyzer

On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaS

GitHub Code Scanning

Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Cloud; GitHub Enterprise Server

Data residency

OpenText Fortify Static Code Analyzer

Customer-hosted code sovereignty; Cloud SaaS options

GitHub Code Scanning

United States; European Union; Customer-hosted options

Key features

What it offers

OpenText Fortify Static Code Analyzer

Static Application Security Testing (SAST)
30+ programming languages supported
Dataflow analysis
Real-time IDE plugins
CI/CD build integration
ML triage
Shift-left code scanning
Automated CI/CD security gating

GitHub Code Scanning

Native CodeQL analysis
SARIF report ingestion
Inline pull request annotations
Automated branch scanning
Custom query creation
CWE classification
Automated code vulnerability scanning
Pull request security review

Platform & access

API access

OpenText Fortify Static Code Analyzer

GitHub Code Scanning

Single sign-on (SSO)

OpenText Fortify Static Code Analyzer

GitHub Code Scanning

Role-based access (RBAC)

OpenText Fortify Static Code Analyzer

GitHub Code Scanning

Multi-tenant

OpenText Fortify Static Code Analyzer

GitHub Code Scanning

Mobile app

OpenText Fortify Static Code Analyzer

GitHub Code Scanning

Supported platforms

OpenText Fortify Static Code Analyzer

Source Code RepositoriesBuild ServersDeveloper IDEs

GitHub Code Scanning

GitHub repositoriesCI/CD runners (GitHub Actions, self-hosted)

Compliance

OpenText Fortify Static Code Analyzer

PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25NISTDISA STIG

GitHub Code Scanning

SOC 1SOC 2 Type IIISO 27001NIST SP 800-218

Integrations & coverage

Integrations

OpenText Fortify Static Code Analyzer

Visual StudioVS CodeIntelliJ IDEAJenkinsGitHub ActionsGitLab CI

GitHub Code Scanning

GitHub ActionsVisual Studio CodeJenkinsAzure DevOpsJiraSlack

Industries

OpenText Fortify Static Code Analyzer

Software DevelopmentBankingHealthcareGovernmentAerospaceFinancial Services+2 more

GitHub Code Scanning

TechnologyFinancial ServicesHealthcareGovernmentManufacturingEducation+2 more

Regions

OpenText Fortify Static Code Analyzer

Global enterprise deployments

GitHub Code Scanning

Global

Vendor

Company

OpenText Fortify Static Code Analyzer

OpenText

GitHub Code Scanning

GitHub

Headquarters

OpenText Fortify Static Code Analyzer

Waterloo, Ontario, Canada

GitHub Code Scanning

San Francisco, California, USA

Company size

OpenText Fortify Static Code Analyzer

20,000+

GitHub Code Scanning

10,000+

Founded

OpenText Fortify Static Code Analyzer

1991

GitHub Code Scanning

2008