OpenText Fortify SAST

by OpenText

Static application security testing with broad language coverage, AI-powered auditing and CI/CD integration.

Visit website

Application & API Security

Starting priceContact for pricing

Pricing modelcustom

DeploymentSaaS (Fortify on Demand); private hosted; private cloud; public cloud; on-premises

Free trialNo

Company sizeGlobal organizations of any size

About

Static application security testing with broad language coverage, AI-powered auditing and CI/CD integration.

OpenText Fortify SAST enables DevSecOps with precise vulnerability detection, broad language support and integration into enterprise CI/CD pipelines. AI-driven insights help developers prioritize and resolve vulnerabilities across the software lifecycle.

Coverage includes 44+ languages, 350+ frameworks and 200+ types of secrets, with integrated infrastructure-as-code scanning and a next-gen SAST engine. It can run on the SaaS Fortify on Demand platform, private hosted, private or public cloud, or fully on-premises. OpenText describes it as suited to global organizations of any size and cites professional services, banking, aerospace and high tech.

Key features

44+ languages and 350+ frameworks; 200+ types of secrets detection; Integrated IaC scanning; AI-powered auditing and remediation; Next-gen SAST engine; CI/CD pipeline integration; Centralized governance and reporting; Developer remediation guidance

Industries served

Professional Services; Banking; Aerospace; High Tech

Product details

Vendor

OpenText

Pricing

Contact for pricingNo free trial

Pricing model: custom

Visit website for full pricing details

Similar software

42Crunch

by 42Crunch

API security platform that applies contract driven security assessment, vulnerability testing and runtime protection to APIs and to the MCP servers used by AI agents.

Contact for pricing

Aikido Security

by Aikido Security

Developer-focused AppSec suite covering code, cloud and runtime with SAST, SCA, DAST and secrets detection.

Free; Basic $350/month

Akamai API Security

by Akamai Technologies

API security product from Akamai that gives visibility into an organization's full API estate with continuous detection and analysis, from development through production.

Contact for pricing

Barracuda WAF-as-a-Service

by Barracuda Networks

Cloud-delivered WAF with API protection, bot defense and unmetered L3-L7 DDoS protection.

Contact for pricing

Black Duck Polaris

by Black Duck

Cloud-native AppSec platform unifying SAST, SCA, DAST, IaC analysis and secrets detection.

Consumption-based pricing

Burp Suite Professional

by PortSwigger

Web security testing toolkit for penetration testers, with a proxy, scanner, Intruder and an extension store.

Professional $499