OpenText Fortify Software Security Platform
OpenText Fortify Software Security Platform: A broad Fortify platform for mature teams combining SAST and DAST. Ranked #5 of 25 in DevSecOps Platforms by our editors (8.8/10); pricing: Pricing on request; best for mature teams combining SAST and DAST.
At a glance
- Editor score8.8 / 10
- PricingPricing on request
- Best forMature teams combining SAST and DAST
- Policy as codeYes
- Founded1991 · Waterloo, Ontario, Canada
- Facts checked20 Sep 2026
Where it wins
- Combines SAST, DAST, SCA, IaC, container, and Kubernetes scanning
- Connects with major IDEs, CI/CD systems, and Jira
- Adds policy enforcement, remediation reporting, and AI guidance
Where it doesn't
- Pricing is sales-led rather than published by plan
- Its broad scope may exceed teams seeking a single focused scanner
- It is proprietary rather than open source
Our verdict on OpenText Fortify Software Security Platform
OpenText Fortify Software Security Platform is a hybrid application security platform for enterprise development, security, and compliance teams. It brings together static application security testing, dynamic application security testing, software composition analysis for open-source dependencies, infrastructure-as-code scanning, container and Kubernetes security, and API security capabilities. The portfolio is designed to help organizations identify, prioritize, and remediate vulnerabilities across the development lifecycle, with cloud-based, hosted, hybrid, and on-premises delivery models. OpenText has presented Fortify capabilities since 1991, giving the platform a long operating history in application security.
Integration breadth is a central part of the platform’s fit. Fortify connects with Visual Studio, IntelliJ, and Eclipse for development workflows, as well as Jenkins, GitHub Actions, GitLab CI, Azure DevOps, and Bamboo for CI/CD. Jira is included among its issue-tracking integrations. Policy-based scan enforcement, centralized vulnerability tracking, remediation reporting, compliance reporting, SBOM management, and remediation workflows support teams that need security controls to extend beyond individual scans. AI-assisted auditing and remediation guidance adds another layer for reviewing findings and addressing vulnerabilities.
Fortify uses a contact-sales pricing model, so teams should evaluate the commercial fit alongside their deployment requirements. Its broad coverage suits mature organizations that want SAST and DAST within a wider DevSecOps program, particularly where IaC, containers, Kubernetes, policy enforcement, and reporting matter. Teams seeking a narrowly focused scanner or an open-source product may prefer a more limited alternative. For organizations coordinating development, security, and compliance processes across multiple tools, Fortify’s hybrid delivery options and integration portfolio make it a substantial platform to assess.
OpenText Fortify Software Security Platform pricing
OpenText Fortify Software Security Platform fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Deployment model | Hybrid |
| IaC scanning | Yes |
| Container scanning | Yes |
| Policy as code | Yes |
| Remediation workflows | Yes |
| SBOM management | Yes |
| Compliance reporting | Yes |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Compliance & security | ISO 27001, PCI DSS |
| Support | Docs · 24/7 |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 9 integrations: Visual Studio, IntelliJ, Eclipse, Jenkins, GitHub Actions, GitLab CI … |
| Pricing | Pricing on request |
| Website | opentext.com |
| Facts checked | 20 Sep 2026 |
OpenText Fortify Software Security Platform integrations
OpenText Fortify Software Security Platform lists 9 integrations on its own site.
- Visual Studio
- IntelliJ
- Eclipse
- Jenkins
- GitHub Actions
- GitLab CI
- Azure DevOps
- Bamboo
- Jira
Alternatives to OpenText Fortify Software Security Platform
- Aikido SecurityBroad AppSec coverage with a free starting tier and hybrid deployment.9.4
- Semgrep AppSec PlatformAn affordable, developer-focused AppSec platform with broad integrations and cloud-only delivery.9.2
- Mend.ioBroad DevSecOps coverage for enterprises managing code, supply-chain, container, and AI risk.9.0
See all OpenText Fortify Software Security Platform alternatives →
OpenText Fortify Software Security Platform vs the competition
- OpenText Fortify Software Security Platform vs Aikido Security
- OpenText Fortify Software Security Platform vs Semgrep AppSec Platform
- OpenText Fortify Software Security Platform vs Mend.io
- OpenText Fortify Software Security Platform vs OX Security
- OpenText Fortify Software Security Platform vs GitHub Advanced Security
- OpenText Fortify Software Security Platform vs Contrast Security Platform
Compare OpenText Fortify Software Security Platform with any tool side by side →
Also Ranked In
OpenText Fortify Software Security Platform is ranked in 4 of our directories.
Used OpenText Fortify Software Security Platform? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used OpenText Fortify Software Security Platform for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
OpenText Fortify Software Security Platform is listed in our DevSecOps Platforms directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/opentext-fortify-software-security-platform/"><img src="https://www.itechguides.com/best/badge/opentext-fortify-software-security-platform.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update