Fortify Static Code Analyzer

Spec sheet

Purpose

Fortify SAST analyzes application source code, bytecode, or binaries to detect security vulnerabilities during development.Read 5 Oct 2026 · opentext.com

Deployment

The product page describes SaaS, private-hosted, and off-cloud deployment options.Read 5 Oct 2026 · opentext.com

Integrations

The product page lists integrations including GitHub, GitLab, Jenkins, Azure DevOps, VS Code, Eclipse, Visual Studio, IntelliJ, Maven, Gradle, and Jira.Read 5 Oct 2026 · opentext.com

Compliance

The product page says Fortify SAST supports compliance frameworks including OWASP Top 10, NIST, PCI-DSS, and ISO 27001.Read 5 Oct 2026 · opentext.com

Support

The product page links to documentation, a knowledge base portal, and OpenText support services.Read 5 Oct 2026 · opentext.com

Headquarters

OpenText lists its corporate headquarters in Waterloo, Ontario, Canada.Read 5 Oct 2026 · opentext.com

AI assistance

The product page describes AI-driven insights to help developers prioritize and resolve vulnerabilities, along with automated code fix suggestions through Fortify Remediation Aviator.Read 5 Oct 2026 · opentext.com

Application types

The product page says Fortify SAST supports web, mobile, desktop, and cloud-native applications, as well as infrastructure-as-code, containers, and APIs.Read 5 Oct 2026 · opentext.com

Coverage

The product page describes coverage across 44+ languages, 350+ frameworks, and more than one million APIs.Read 5 Oct 2026 · opentext.com

Manufacturer

OpenText says it was founded in 1991.Read 5 Oct 2026 · opentext.com

Open-source analysis

The product page says SAST primarily analyzes proprietary code and that OpenText SCA tools identify risks in open-source libraries.Read 5 Oct 2026 · opentext.com

Vulnerability detection

The product page says Fortify SAST assesses 1,524+ vulnerability categories.Read 5 Oct 2026 · opentext.com

Where Specifiction places it

• IDE Code Security Plugins#7 of 196.8
• C and C++ Static Analysis Tools#18 of 256.8