Products

Static Analysis, also known as Static Application Security Testing (SAST), available from Fortify Static Code Analyzer (SCA).

• Detects more types of potential vulnerabilities than any other detection method
• Pinpoints the root cause of vulnerabilities with line-of-code detail
• Helps you identify critical issues during development when they are easiest and least expensive to fix

Dynamic Analysis, also known as Dynamic Application Security Testing (DAST), available from HP WebInspect.

• Detects vulnerabilities in running Web applications and Web services by simulating comprehensive attack scenarios
• Validates whether a particular vulnerability is in fact genuinely exploitable
• Speeds remediation by enabling you to know with certainty which issues to address first and why

Fortify on Demand serves the role of an independent, third-party system of record, conducting a consistent, unbiased analysis of an application and providing a detailed tamperproof report back to the security and development teams.

Fortify on Demand is:

• Easy to manage: No hardware, no software, and no maintenance
• Fast: Results typically in less than 24 hours for static assessments
• Compliant: Quickly pass compliance PCI, HIPAA, FISMA, and many other standards
• Flexibility: Migrate easily and quickly to the Fortify on-premise solution and vice versa