OpenText Fortify Static Code Analyzer
by OpenTextVerified
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.
- Product Type
- Static Application Security Testing (SAST) Engine
- Deployment
- SaaS / Cloud / On-Premise
- Industries
- 8+ industries
- Regions
- Global enterprise deployments
- Free Trial
- Yes
- Pricing
- Contact Vendor
About OpenText Fortify Static Code Analyzer
Fortify Static Code Analyzer (SCA, by OpenText) is the industry-standard static application security testing (SAST) engine designed to analyze source code for security vulnerabilities, software weaknesses, and compliance violations early in the software development lifecycle. Supporting more than 30 programming languages and major frameworks, Fortify Static Code Analyzer scans raw source code, byte code, and binary files without requiring code execution, uncovering vulnerabilities before applications are compiled and deployed.
Categories & Subcategories
Where OpenText Fortify Static Code Analyzer is ranked
Featured in 3 Cyber Rank rankings.
Key Features
6 capabilities that OpenText Fortify Static Code Analyzer offers.
30+ programming languages supported
Dataflow analysis
Real-time IDE plugins
CI/CD build integration
ML triage
Use Cases
Shift-left code scanning
Automated CI/CD security gating
Source code flaw remediation
Secure coding compliance
Industries Served
OpenText Fortify Static Code Analyzer is used across 8+ industries.
Software Development
Banking
Healthcare
Government
Aerospace
Financial Services
Aerospace & Defense
High Tech
Regions
Global enterprise deployments
Integrations
Works with the tools teams already use
Visual Studio
VS Code
IntelliJ IDEA
Jenkins
GitHub Actions
GitLab CI
Deployment Options
Flexible deployment to meet your needs
SaaSCloudOn-Premise
Platform & Access
What OpenText Fortify Static Code Analyzer supports, at a glance.
- API accessYes
- Single sign-on (SSO)Yes
- Role-based access (RBAC)Yes
- Multi-tenantYes
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
- NISTNIST CSF
PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25DISA STIG
- Supported platforms
- Source Code RepositoriesBuild ServersDeveloper IDEs
- Operating systems
- WindowsLinuxmacOS
- Browser support
- Modern web browsersCLIDesktop IDEs
- Languages supported
- EnglishJapaneseMulti-language IDE plugins
- Data residency
- Customer-hosted code sovereignty; Cloud SaaS options
- Deployment details
- On-premises CLI/IDE; Build Server; Cloud SaaS; On-premises CLI/Server; Developer Workstation; Cloud SaaS
OpenText Fortify Static Code Analyzer Reviews
No reviews yet
Be the first to share your experience with OpenText Fortify Static Code Analyzer.
More Products from OpenText
View all →OpenText Voltage
Get the facts on OpenText Voltage: Identity-Based Encryption. Built for PCI-DSS cardholder scope reduction. Compare it with other Data Security options before you decide.
OpenText ArcSight Enterprise Security Manager
OpenText ArcSight Enterprise Security Manager: sub-second event correlation and stateful correlation rules. Built for SOC triage automation. Compare SIEM alternatives.
Fortify Software Security Center
Fortify Software Security Center: Jira/Azure DevOps sync and Audit Assistant ML triage. Built for compliance auditing. Compare Application Security alternatives.
OpenText Data Privacy & Protection
OpenText Data Privacy & Protection offers automated PII/PHI discovery and data classification. Use it for PII discovery. See Data Security alternatives.
OpenText Core Endpoint Protection
Shortlisting Endpoint Security tools? OpenText Core Endpoint Protection by OpenText brings web threat filtering, with cloud deployment. See strengths and alternatives.
OpenText ArcSight
Evaluating OpenText ArcSight? See how this SIEM tool handles real-time event correlation and CEF log normalization, where it fits best and which alternatives to compare.
OpenText Voltage SecureData
Looking for Data Security software? OpenText Voltage SecureData by OpenText provides dynamic masking for cardholder data protection. Compare features and alternatives.
Fortify on Demand
Fortify on Demand: Application Security Testing as a Service and SAST and DAST scans. Built for CI/CD security gating. Compare Application Security Testing alternatives.
Product Resources
Explore More Products
Other cybersecurity products listed on Cyber Rank.
Semgrep Code
bySemgrep
What does Semgrep Code do? It covers taint analysis, PR review comments and custom rule writing. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.
Application SecurityView details
Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.
DevSecOps & Software Supply ChainView details
Semgrep AppSec Platform
bySemgrep
Semgrep AppSec Platform: semantic SAST scanning and reachable SCA dependency analysis. Built for static code security testing. Compare Application Security alternatives.
Application SecurityView details