Fortify

Fortify provides enterprise-grade application security through automated static (SAST), dynamic (DAST), and interactive (IAST) testing.

Fortify secures the modern SDLC by integrating automated testing directly into CI/CD pipelines (Jenkins, GitHub, and Azure DevOps). The suite centers on Fortify Static Code Analyzer (SCA): a tool that scans 30+ languages including Java, C#, and Python to pinpoint vulnerabilities like SQL injection or buffer overflows. Organizations utilize WebInspect for dynamic analysis and Fortify on Demand for a scalable, cloud-based managed service. By mapping results to industry standards (OWASP Top 10 and SANS/CWE), security teams manage risk across thousands of applications from a centralized dashboard.

https://www.opentext.com/products/fortify