Modern, agentic development demands more than manual triage and remediation. As code is committed and scanned, AI-driven SAST auto-triages findings and opens pull requests to fix what it can, handing complex cases to developers and their AI coding agents.

OpenText™ Fortify™ Remediation Aviator™ is an AI code security assistant (ACSA) for auditing and automated fixes of SAST vulnerabilities. It embeds in your dev environment, using AI to explain issues in context and generate fixes. Auto-remediation can apply validated fixes to eligible findings, accelerating delivery and reducing developer toil. Available as SaaS or on premise, it supports hybrid, public, and private infrastructure.

Read the product overview

Why choose Fortify Remediation Aviator as your ACSA?

Proven AI and LLM expertise

Leverage LLM-based auditing and remediation in production since 2024, built on years of machine learning in OpenText™ Fortify™ SAST auditing.
One tool for code auditing and remediation

Eliminate the need for multiple tools. Fortify Remediation Aviator uses auditing results for contextualized remediation assistance, resulting in higher quality recommendations.
Scalability without pipeline changes

Configure server-side to roll out Fortify Remediation Aviator across teams without each developer modifying DevSecOps pipelines or installing new tools.
Built for agentic development workflows

Keep security in step with modern Git and AI-assisted development: Scanning, triage, and fixes run automatically, so Fortify Remediation Aviator speeds delivery instead of slowing it.
Reduced MTTR, from days to hours

Move from triage to resolution even faster with auto-remediation applying validated fixes where safe.
Best of both: Detection depth + AI fixes

Pair Fortify Remediation Aviator with OpenText’s industry-leading detection for more true positives and fewer false positives.

How Fortify Remediation Aviator can benefit organizations

Address security vulnerabilities faster and easier with AI and LLM.

Read the data sheet

Shred the security backlog

Drastically reduce the time developers spend remediating code security issues with code-fix suggestions from AI code analysis.
Boost developer productivity and enablement

Audit and explain security issues to developers in the context of their code and terms they understand.
Reduce code fixing friction

Seamlessly integrate AI code-fix suggestions into developers' workflows for a frictionless experience.
Separate real risk from noise

Help teams spend less time triaging and more time fixing with clear explanations and high-confidence suppression.
Add developer-ready guidance to your flow

Map contextual explanations and code-level suggestions directly to each finding and write back into your OpenText application security workflow, with no new UI to learn.
Ensure enterprise-level privacy

Rest assured that customer information isn’t used for model training. And audit outcomes stay under your control to support governance and compliance requirements.

Features

Auto-remediation

Automatically generates and applies validated fixes to eligible findings. Where it’s confident, it opens a pull request to apply the fix directly in your Git workflow.
Reduced false positives

Applies consistent audit decisions across every scan and application, with high-confidence suppression of findings that do not need a developer's time.
Fast code issue remediation

Provides a concrete fix for an issue, beyond the standard recommendation text. Automated fix suggestions significantly cut down the time required to remediate security issues.
Ease of use

Implements as a command-line tool directly operating on an OpenText™ Fortify™ on Demand results file, eliminating complexity and improving user experience.
Contextual explanations

Helps developers understand security vulnerabilities in layman's terms.
Broad coverage, deep context

Analyzes results across 47+ languages and 1,545 vulnerability categories to deliver precise, contextual guidance.
SAST-DAST correlation

Matches Fortify SAST and OpenText™ Fortify™ DAST findings that describe the same underlying vulnerability, so teams track one cross-validated defect instead of two.
LLM-based DAST auditing

Audits eligible DAST findings as true or false positives and writes the results back for OpenText Application Security, on the same quota and entitlement model as SAST auditing.

Watch the demo

Accelerate the value of Fortify Remediation Aviator

Deployment

Explore scalable and flexible deployment options for global organizations of any size.

Unlock the value of the cloud while maintaining control and compliance

Private cloud

Services

Accelerate digital transformation with guidance from certified experts.

Modernize your information management with certified experts

Professional Services
Turn support into your strategic advantage

Support Services

Meet business goals with expert guidance, managed services, and more

Customer Success Services
Free up your internal teams with expert IT service management

Managed Services

Partners

OpenText helps customers find the right solution, the right support, and the right outcome.

Global system integrators (GSIs)

These GSIs are trained and certified on OpenText solutions, offering services that enhance the value of stand-alone solutions.

Unlock business value with OpenText and Capgemini

Accelerate innovation across hybrid environments with OpenText and HPE

Enable development and SAP S/4HANA success with OpenText and Accenture

Power digital transformation with OpenText and Deloitte

OpenText Partner directory OpenText Application Marketplace

Training

OpenText Learning Services offers comprehensive enablement and learning programs to accelerate knowledge and skills.

Meet the demands of all types of users for effective adoption

Learning Services

Unlimited access to training with personalized tiers to fit your needs

Learning Subscriptions

Communities

Explore our OpenText communities. Connect with individuals and companies to get insight and support. Get involved in the discussion.

Explore ideas, join discussions, and network

OpenText’s forums

Fortify Remediation Aviator resources

How OpenText cut triage time by 70%, saving 3 million minutes of manual review, with AI-powered SAST

Read the guide

Move From Finding to Fix Faster with OpenText Fortify Remediation Aviator

Watch the video

Fortify Agentic Analyzer—agentic AST that finds the flaws rules-based analysis misses, included with SAST

Learn more

Move From Finding to Fix Faster with OpenText Fortify Remediation Aviator

Watch the video

Fortify Agentic Analyzer—agentic AST that finds the flaws rules-based analysis misses, included with SAST

Learn more

How can we help?

[1]IDC, DevOps Survey, 2024