OpenText Fortify DAST
OpenText Fortify DAST: A compliance-oriented DAST solution with broad API coverage and enterprise automation. Ranked #10 of 26 in Dynamic Application Security Testing Software by our editors (8.5/10); pricing: Pricing on request; best for compliance-focused enterprise AppSec teams.
At a glance
- Editor score8.5 / 10
- PricingPricing on request
- Best forCompliance-focused enterprise AppSec teams
- Authenticated scanningYes
- Founded1991 · Waterloo, Ontario, Canada
- Facts checked22 Sep 2026
Where it wins
- Scans authenticated applications, including MFA-enabled environments
- Supports REST, SOAP, OpenAPI, GraphQL, gRPC, and other API formats
- Provides compliance policies for PCI DSS, NIST 800-53, ISO 27K, and HIPAA
Where it doesn't
- Pricing requires contacting sales rather than choosing a published plan
- Enterprise features may exceed the needs of smaller AppSec teams
- Hybrid deployment can require coordination across SaaS and off-cloud environments
Our verdict on OpenText Fortify DAST
OpenText Fortify DAST is an automated dynamic application security testing solution for DevSecOps teams securing running web applications, APIs, and services. It simulates attacks against live environments without requiring source code or staging systems, while supporting authenticated and MFA-enabled scanning. The product fits organizations that need security testing across modern JavaScript applications, API estates, and workflow-driven applications, particularly where compliance reporting is part of the AppSec process.
Its strongest differentiator is coverage depth across application types and testing conditions. API scanning supports REST, SOAP, Swagger, OpenAPI, Postman, GraphQL, and gRPC. Browser-based rendering and advanced crawling address modern JavaScript applications, while HAR files and macros support workflow scanning. Compliance policies and reports cover PCI DSS, DISA STIG, NIST 800-53, ISO 27K, OWASP, and HIPAA, giving enterprise teams a way to align DAST activity with established requirements.
For delivery pipelines, Fortify DAST provides REST APIs, CLI, containers, and pipeline workflows, with integrations for Jenkins, Azure DevOps, GitHub Actions, GitLab, Bamboo, and CircleCI. Remote-sensor orchestration supports rapid DAST scaling, and the deployment model spans SaaS and off-cloud options. According to the vendor's pricing approach, purchasing is handled through contact sales rather than published plan tiers. Choose Fortify DAST when broad API support, compliance policies, authenticated scanning, and enterprise automation are priorities. Smaller teams seeking a simpler, openly priced DAST tool may prefer a narrower alternative.
Your product? Our editors can test OpenText Fortify DAST in depth and publish a review, labelled as paid · from $149/mo →
OpenText Fortify DAST pricing
OpenText Fortify DAST fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Authenticated scanning | Yes |
| API testing | Yes |
| Browser-based scanning | Yes |
| CI/CD integration | Yes |
| Deployment model | Hybrid |
| Included scan targets | Not verified |
| Deployment | Cloud, Self-hosted |
| Platforms | Web, Linux |
| Compliance & security | PCI DSS, HIPAA, ISO 27001 |
| Support | Email, Phone, Tickets, Community, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 2 integrations: REST API, CI/CD pipelines |
| Pricing | Pricing on request |
| Website | opentext.com |
| Facts checked | 22 Sep 2026 |
OpenText Fortify DAST integrations
OpenText Fortify DAST lists 2 integrations on its own site.
- REST API
- CI/CD pipelines
Alternatives to OpenText Fortify DAST
- Safeguard DASTBroad authenticated web and API scanning with paid plans starting at $9/month.9.4
- OWASP ZAPA capable free DAST tool with broad web, API, browser, and automation coverage.9.3
- apPosture DASTEvidence-backed DAST for developers who need deep web and API testing.9.2
See all OpenText Fortify DAST alternatives →
Also Ranked In
OpenText Fortify DAST is ranked in 2 of our directories.
Used OpenText Fortify DAST? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used OpenText Fortify DAST for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
OpenText Fortify DAST is listed in our Dynamic Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/opentext-fortify-dast/"><img src="https://www.itechguides.com/best/badge/opentext-fortify-dast.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update