Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | OpenText Fortify Static Code Analyzer by OpenText View product | GitHub Secret Protection by GitHub View product |
|---|---|---|
| Overview | ||
| What it is | What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals. | What does GitHub Secret Protection do? It covers bypass auditing. See typical use cases, cloud or on-premises deployment and how it compares to rivals. |
| Product type | Static Application Security Testing (SAST) Engine | Real-Time Developer Credential Protection & Push Protection Solution |
| Best for | Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High Tech | Technology, Financial Services, Healthcare, Government, Telecommunications |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | SaaSCloudOn-Premise |
| Deployment details | On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaS | Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Cloud; GitHub Enterprise Server |
| Data residency | Customer-hosted code sovereignty; Cloud SaaS options | United States; European Union; On-premises repository hosts |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: yes |
| Supported platforms | Source Code RepositoriesBuild ServersDeveloper IDEs | GitHub CloudGitHub Enterprise ServerGit CLI |
| Compliance | PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25NISTDISA STIG | SOC 2 Type IIISO/IEC 27001PCI DSSFedRAMP |
| Integrations & coverage | ||
| Integrations | Visual StudioVS CodeIntelliJ IDEAJenkinsGitHub ActionsGitLab CI | GitHub ActionsAWSAzureGoogle CloudHashiCorp VaultSlack |
| Industries | Software DevelopmentBankingHealthcareGovernmentAerospaceFinancial Services+2 more | TechnologyFinancial ServicesHealthcareGovernmentTelecommunications |
| Regions | Global enterprise deployments | Global |
| Vendor | ||
| Company | OpenText | GitHub |
| Headquarters | Waterloo, Ontario, Canada | San Francisco, California, USA |
| Company size | 20,000+ | 10,000+ |
| Founded | 1991 | 2008 |
Overview
What it is
OpenText Fortify Static Code Analyzer
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.GitHub Secret Protection
What does GitHub Secret Protection do? It covers bypass auditing. See typical use cases, cloud or on-premises deployment and how it compares to rivals.Product type
OpenText Fortify Static Code Analyzer
Static Application Security Testing (SAST) EngineGitHub Secret Protection
Real-Time Developer Credential Protection & Push Protection SolutionBest for
OpenText Fortify Static Code Analyzer
Software Development, Banking, Healthcare, Government, Aerospace, Financial Services, Aerospace & Defense, High TechGitHub Secret Protection
Technology, Financial Services, Healthcare, Government, TelecommunicationsPricing
Pricing model
OpenText Fortify Static Code Analyzer
Contact VendorGitHub Secret Protection
Contact VendorFree trial
OpenText Fortify Static Code Analyzer
Free trial: yesGitHub Secret Protection
Free trial: noDeployment
Deployment options
OpenText Fortify Static Code Analyzer
GitHub Secret Protection
Deployment details
OpenText Fortify Static Code Analyzer
On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaSGitHub Secret Protection
Cloud SaaS; On-premises (GitHub Enterprise Server); GitHub Cloud; GitHub Enterprise ServerData residency
OpenText Fortify Static Code Analyzer
Customer-hosted code sovereignty; Cloud SaaS optionsGitHub Secret Protection
United States; European Union; On-premises repository hostsKey features
What it offers
OpenText Fortify Static Code Analyzer
- Static Application Security Testing (SAST)
- 30+ programming languages supported
- Dataflow analysis
- Real-time IDE plugins
- CI/CD build integration
- ML triage
- Shift-left code scanning
- Automated CI/CD security gating
GitHub Secret Protection
- Push protection intercept
- Partner secret verification
- Custom regex pattern definitions
- Historical commit scanning
- Automated revocation webhooks
- Bypass auditing
- Credential leak prevention
- git push interception
Platform & access
API access
OpenText Fortify Static Code Analyzer
API access: yesGitHub Secret Protection
API access: yesSingle sign-on (SSO)
OpenText Fortify Static Code Analyzer
SSO: yesGitHub Secret Protection
SSO: yesRole-based access (RBAC)
OpenText Fortify Static Code Analyzer
RBAC: yesGitHub Secret Protection
RBAC: yesMulti-tenant
OpenText Fortify Static Code Analyzer
Multi-tenant: yesGitHub Secret Protection
Multi-tenant: yesMobile app
OpenText Fortify Static Code Analyzer
Mobile app: noGitHub Secret Protection
Mobile app: yesSupported platforms
OpenText Fortify Static Code Analyzer
GitHub Secret Protection
Compliance
OpenText Fortify Static Code Analyzer
GitHub Secret Protection
Integrations & coverage
Integrations
OpenText Fortify Static Code Analyzer
GitHub Secret Protection
Industries
OpenText Fortify Static Code Analyzer
GitHub Secret Protection
Regions
OpenText Fortify Static Code Analyzer
GitHub Secret Protection
Vendor
Company
OpenText Fortify Static Code Analyzer
OpenTextGitHub Secret Protection
GitHubHeadquarters
OpenText Fortify Static Code Analyzer
Waterloo, Ontario, CanadaGitHub Secret Protection
San Francisco, California, USACompany size
OpenText Fortify Static Code Analyzer
20,000+GitHub Secret Protection
10,000+Founded
OpenText Fortify Static Code Analyzer
1991GitHub Secret Protection
2008