What Fortify is
Fortify had a great reputation before the MicroFocus acquisition, but has since become slower to innovate. Lacks a lot of functionality compared to other SaaS options, and heavily based in old school models. The vendor site is www.opentext.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Fortify covers
Fortify is in the catalog for these capabilities. Categories: SAST. Catalog tags: Hands-on and Best for Enterprise.
How to evaluate Fortify in a security program
Use Fortify as a stack candidate, not as diligence evidence. The oneNorma score for Fortify is 2.5/10 (percentile 1). If the real gap is in SAST, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.opentext.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
