Get a recommendation
Tell us your requirements and our advisors will help you compare and shortlist the best-fit options, free and unbiased.
A real human, fast
Someone on our team replies within one business day, no bots, no ticket queue.
Routed to the right team
Buying, selling, partnering, or investing, you reach the people who can actually help.
Independent & unbiased
No pushy sales. Just honest guidance grounded in the ecosystem.
Tailored to your context
Tell us what you need and we shape the next steps around it.
Who are you? Pick the option that fits best.
Application security testing (SAST/DAST)
Fortify is application security testing software offering an application security suite (OpenText Fortify) with SAST and DAST for secure development. Founded in 2003 and based in San Jose, California, USA, Fortify helps enterprises running application security programs work more efficiently and achieve better outcomes.
Fortify is built for enterprises running application security programs. It suits teams that want static and dynamic security testing without spreadsheets and disconnected tools.
Compared with alternatives like Checkmarx, Fortify differentiates on static and dynamic security testing. Pricing is quote-based and scoped to your usage and team size.
Pricing Model
Quote-based
Starting Price
Contact vendor
Free Options
Free trial
Core Fortify for growing teams. Contact for a quote.
Advanced Fortify for larger organizations. Contact for a quote.
| Feature | Professional Popular | Enterprise |
|---|---|---|
| static and dynamic security testing | , | |
| broad language support | , | |
| Integrations | , | |
| Analytics and reporting | , | |
| Standard support | , | |
| Everything in Professional | , | |
| DevSecOps integration | , | |
| security compliance reporting | , | |
| Advanced security and controls | , | |
| Dedicated support and onboarding | , |
Other
DevOps
Missing an integration?
API Types
SDK Availability
Verify SDK availability in vendor's documentation.
Developer Features
No reviews yet. Be the first to review Fortify.
Have a question about Fortify? Ask the community.
Compliance Standards
SOC 2 Type II
EnterpriseISO 27001
EnterpriseGDPR Compliant
GlobalHIPAA
HealthcarePCI DSS
FinanceCCPA
PrivacyFedRAMP
GovernmentCSA STAR
CloudDeployment & Data
Data Residency Options
Verify with vendor for your specific region requirements.
Code quality and security analysis (static analysis)
Fast, customizable static analysis for code security
