Skip to content
@fortify

OpenText Application Security (Fortify)

Great code demands great security, and with Fortify, go beyond 'check the box' application security to achieve that.

Fortify Application Security provides your team with solutions to empower DevSecOps practices, enable cloud transformation, and secure your software supply chain. As the sole Code Security solution with over two decades of expertise and acknowledged as a market leader by all major analysts, Fortify delivers the most adaptable, precise, and scalable AppSec platform available, supporting the breadth of tech you use and integrated into your preferred toolchain. We firmly believe that your great code demands great security, and with Fortify, go beyond 'check the box' security to achieve that.

Repositories in this organization are categorized using GitHub topics. Note that a repository may appear in multiple categories.

Function-based categories Product-based categories
fortify-integration fortify-sca
fortify-integration-sample fortify-webinspect
fortify-deployment fortify-sc-sast
fortify-api fortify-sc-dast
fortify-api-sample fortify-on-demand
vulnerable-sample-app debricked
fortify-documentation

Pinned Loading

  1. fcli fcli Public

    fcli is a command-line utility for interacting with various Fortify products

    Java 62 34

  2. skills skills Public

    AI agent skills for OpenText Fortify — SAST/DAST/SCA scanning, vulnerability triage, remediation, dependency upgrades, CI/CD integration, and FCLI workflows. Works with Claude Code, Codex, Gemini C…

    19 1

  3. IWA-Java IWA-Java Public

    Insecure Web + API application with example Fortify integrations into many DevSecOps and CICD platforms

    Java 6 71

  4. CloudDevSecOpsTemplates CloudDevSecOpsTemplates Public

    Templates to integrate Fortify application security testing with Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI)

    Shell 19 9

Repositories

Showing 10 of 65 repositories
  • fcli Public

    fcli is a command-line utility for interacting with various Fortify products

    fortify/fcli's past year of commit activity
    Java 62 34 115 11 Updated Sep 11, 2026
  • tool-definitions Public

    Auto-generated lists of Fortify tools, URLs and hashes/signatures

    fortify/tool-definitions's past year of commit activity
    TypeScript 3 2 1 0 Updated Sep 11, 2026
  • fortify-ssc-parser-faa Public

    Fortify SSC parser plugin to import Fortify Agentic Analyzer results

    fortify/fortify-ssc-parser-faa's past year of commit activity
    Java 0 0 0 0 Updated Aug 31, 2026
  • fortify-ssc-parser-util Public

    Generic utility classes for implementing SSC parser plugins

    fortify/fortify-ssc-parser-util's past year of commit activity
    Java 3 2 1 0 Updated Aug 26, 2026
  • fortify-ssc-parser-owasp-dependency-check Public

    Fortify SSC Parser Plugin for OWASP Dependency Check results

    fortify/fortify-ssc-parser-owasp-dependency-check's past year of commit activity
    Java 4 1 4 2 Updated Aug 24, 2026
  • fortify-ssc-parser-burp Public

    Fortify SSC Parser Plugin for BURP Suite

    fortify/fortify-ssc-parser-burp's past year of commit activity
    Java 4 0 1 0 Updated Aug 17, 2026
  • fortify-ssc-parser-sarif Public

    SSC parser plugin for SARIF input files

    fortify/fortify-ssc-parser-sarif's past year of commit activity
    Java 7 4 3 0 Updated Aug 13, 2026
  • fortify-ssc-parser-generic-cyclonedx Public

    Generic Fortify SSC parser plugin for CycloneDX SBOM. For Debricked, please use the Debricked-branded plugin available at https://github.com/fortify/fortify-ssc-parser-debricked-cyclonedx

    fortify/fortify-ssc-parser-generic-cyclonedx's past year of commit activity
    Shell 3 3 1 1 Updated Aug 12, 2026
  • fortify-ssc-parser-debricked-cyclonedx Public

    Fortify SSC parser plugin to import Debricked SCA results for unified AppSec posture management

    fortify/fortify-ssc-parser-debricked-cyclonedx's past year of commit activity
    Shell 3 5 0 1 Updated Aug 12, 2026
  • fortify-ssc-parser-tenable-io-cs Public

    Fortify SSC Parser Plugin for Tenable.io Container Security results

    fortify/fortify-ssc-parser-tenable-io-cs's past year of commit activity
    Java 2 0 0 1 Updated Aug 11, 2026