Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Find and fix security problems early with the most accurate results available in the industry. The OpenText™, Fortify™, Static Code Analyzer pinpoints security vulnerabilities, prioritizes issues that are most serious, and provides detailed instructions on how to fix these. A centralized software security manager helps developers resolve issues faster. Support for 1,657 vulnerabilities categories in 33+ languages and more than 1 million APIs. Fortify's integration platform allows you to embed security into the application development tools that you use. Audit Assistant allows you to control the speed and accuracy SAST scans by adjusting the depth and minimizing false-positives. Scale SAST scans dynamically up or down in order to meet the changing needs of the CI/CD pipe. Shift-left security is achieved in a single solution for cloud-native apps, from IaC through to serverless.

Description

Contemporary security teams are essentially creating a supportive environment for developers by implementing code guardrails with each commit. With the capabilities of r2c’s Semgrep, organizations can effectively eradicate classes of vulnerabilities across the board. Enhance the efficiency of your security team through the use of lightweight static analysis tools. Semgrep stands out as a rapid, open-source static analysis solution that simplifies the expression of coding standards without the need for complex queries, allowing for early detection of bugs in the development process. The rules are designed to mirror the code being analyzed, eliminating the challenges associated with navigating abstract syntax trees or dealing with regex complexities. You can easily get started with over 900 pre-existing rules and utilize SaaS infrastructure to receive quick feedback directly in your editor, at the time of commit, or within continuous integration environments. If the standard rules do not meet your specific needs, you can swiftly and easily craft custom rules that reflect your organization’s unique coding standards, with the syntax resembling the target code. For instance, rules tailored for Go are presented in a way that aligns closely with the Go language itself, enabling you to identify function calls, class and method definitions, and much more without the burden of abstract syntax trees or regex challenges. This approach not only streamlines the security process but also empowers developers to maintain high-quality code more efficiently.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

GitHub
Jira
Tromzo
Amazon Web Services (AWS)
Azure DevOps Server
Bamboo
Bitbucket
Cider
CrowdStrike Container Security
Jit
Logilica
Mend.io
Oobeya
Phoenix Security
Seemplicity
Silk Security
Snyk
SonarQube Server
ThreadFix
Visual Studio

Integrations

GitHub
Jira
Tromzo
Amazon Web Services (AWS)
Azure DevOps Server
Bamboo
Bitbucket
Cider
CrowdStrike Container Security
Jit
Logilica
Mend.io
Oobeya
Phoenix Security
Seemplicity
Silk Security
Snyk
SonarQube Server
ThreadFix
Visual Studio

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

$40 per month
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

OpenText

Founded

1991

Country

Canada

Website

www.opentext.com/products/fortify-static-code-analyzer

Vendor Details

Company Name

r2c

Founded

2003

Country

United Kingdom

Website

r2c.dev/

Product Features

Application Security

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Product Features

Application Security

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Bug Tracking

Backlog Management
Filtering
Issue Tracking
Release Management
Task Management
Ticket Management
Workflow Management

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Alternatives

Alternatives

CodeQL Reviews

CodeQL

GitHub
PT Application Inspector Reviews

PT Application Inspector

Positive Technologies
Flawnter Reviews

Flawnter

CyberTest