OpenText Fortify Static Code Analyzer

Introduction:

OpenText Fortify SAST, also known as Fortify Static Code Analyzer, is a leading static application security testing (SAST) tool that enables organizations to rapidly build secure software.

Product description:

Fortify Static Code Analyzer is a fast and accurate static code analysis tool that doesn’t sacrifice result quality. It supports over 30 programming languages and frameworks. It enables security automation in the CI/CD process through a rich integration ecosystem and open-source component analysis tools. It offers flexible deployment options: on-premises, cloud, or AppSec-as-a-Service. It provides comprehensive cloud application security, from infrastructure as code (IaC) to serverless solutions. It enables regulation of SAST speed and accuracy through scan depth and false positive minimization.

Supported languages:

Fortify SAST supports ABAP/BSP, ActionScript, Apex, ASP.NET, C# (.NET), C/C++, Classic ASP (with VBScript), COBOL, ColdFusion CFML, Go, HTML, Java (including Android), JavaScript/AJAX, JSP, Kotlin, MXML (Flex), Objective C/C++, PHP, PL/SQL, Python, Ruby, Swift, T-SQL, VB.NET, VBScript, Visual Basic, XML, JSON/YAML, Terraform HCL, and Docker (Dockerfile).

Customer benefits:

Thanks to Fortify SAST, companies can detect security issues early and fix them at DevOps pace. The tool offers support for over 30 languages and easily integrates with development tools, making it easy to incorporate security analysis into daily programming practices.

Target audience:

OpenText Fortify SAST is an ideal solution for IT and cybersecurity companies that need a fast but accurate code security analysis tool capable of integrating with CI/CD processes and supporting a wide range of programming languages.