Fortify
More info
- Creator
- Fortify Software
- Released
- 2003
- Type
- Static analysis (SAST)
- Owner
- OpenText (formerly HP, Micro Focus)
Static analysis that hunts for vulnerabilities straight in the source code, before the program has even run.
Fortify Software was founded in 2003 in Palo Alto and made its name with Source Code Analyzer — an engine that reads source and traces how untrusted input can flow through to dangerous calls, the classic bugs like SQL injection and buffer overflow. That's SAST: flaws found without running the code, unlike dynamic scanners such as the company's own WebInspect.
HP acquired the company in 2010 to build a security portfolio around its testing tools. Like so much other HP software, it then landed at Micro Focus in 2017 and OpenText in 2023.