OpenText Dynamic Application Security Testing (Fortify)
Continuously test live apps to find real-world vulnerabilities
Gartner® named OpenText a leader in Application SecurityGet the Magic Quadrant report
Overview
Simulate real-world attacks on live applications, APIs, and services to uncover exploitable vulnerabilities. Validate production environments—no source code or staging required.
Why OpenText Dynamic Application Security Testing?
Secure your software supply chain and protect application integrity with efficiency, scale, and modern testing capabilities
- Speed
Find vulnerabilities earlier and more efficiently
Accelerate security feedback by tuning OpenText DAST to your application environment and surfacing real-world vulnerabilities earlier in the SDLC. - Automation
Reduce manual effort and scale securely
Enhance team productivity with automated attack simulations, macro generation, redundant page detection, and flexible CI/CD container delivery. - Proficiency
Test today’s modern applications
Scan and analyze modern web stacks like HTML5, JSON, AJAX, JavaScript, and HTTP2, ensuring coverage across evolving digital surfaces.
We see OpenText Dynamic Application Security Testing [Fortify] as a very important link in our value chain and look forward to further testing automation and expanding our use of the solution.
Learn more
Automating Azure DevOps pipeline scans and using SC DAST automation has improved vulnerability work processes with OpenText Dynamic Application Security Testing (Fortify).
By integrating [OpenText DAST] into our CI/CD pipelines, we automate security testing and identify vulnerabilities early, reducing remediation costs and accelerating secure software delivery.
With OpenText, we now feel very confident that our developers can find and fix security flaws during every stage of the development cycle, creating secure software with more flexibility and speed.
Learn more
Use cases
Why OpenText Dynamic Application Security Testing?
-
Make sure nothing gets missed with testing that uses all the functional tests IAST does—then keeps going.
-
Prevent vulnerabilities by finding where updates are needed, such as client-side frameworks and the version numbers.
-
Client-side software composition analysis (SCA) provides CVEs of client-side libraries, health data of open source projects, and an exportable CycloneDX SBOM.
-
WebInspect can use HAR files for workflow scanning, ensuring scans cover important content.
-
WebInspect continues to scan, even in multi-factor authentication (MFA) environments.
Key features
Automate compliance, scale effortlessly, and scan APIs with precision. With flexible deployment, rapid horizontal scaling, and client-side SCA, stay ahead of evolving threats
API scanning
Presents a complete story of your APIs, whether they’re SOAP, REST, Swagger, OpenAPI , Postman, GraphQL, or gRPC.
ScanCentral DAST
Offloads code analysis tasks from your build machine to remote sensors so you can efficiently manage your time and resources.
Compliance management
Provides pre-configured policies and reports for all major compliance regulations related to web application security, including PCI DSS, DISA STIG, NIST 800-53, ISO 27K, OWASP, and HIPAA.
Flexible deployment
Gets you started quickly and scales as needed, with the flexibility of off-cloud deployments, SaaS, or AppSec-as-a-service.
Rapid DAST scaling
Dynamically scales up or down to meet the changing demands of the CI/CD pipeline.
Accelerate the value of Dynamic Application Security Testing
Deployment
OpenText offers deployment choice and flexibility for OpenText Dynamic Application Security Testing.
-
Run anywhere and scale globally in the public cloud of your choice
OpenText Public Cloud (Multi-Tenant SaaS)
-
Extend your team
Off Cloud, on-premises software, managed by your organization or OpenText
-
Accelerate cloud strategies with OpenText cloud experts
OpenText Private Cloud (Single Tenant) on OpenText Cloud, AWS, GCP, or Azure
-
Develop, connect and extend your Information Management capabilities
API from OpenText Developer Cloud
Professional Services
OpenText Professional Services combines end-to-end solution implementation with comprehensive technology services to help improve systems.
-
Get a trusted partner to guide your information management path
Your journey to success
-
Accelerate your information management journey
Consulting Services
-
Propel your business into the future with modern solutions
NextGen Services
-
Unlock the full potential of your information management solution
Customer Success Services
Partners
OpenText helps customers find the right solution, the right support, and the right outcome.
-
Search OpenText's Partner directory
Find a Partner
-
Explore OpenText's Partner solutions catalog
Application Marketplace
-
Industry-leading organizations that enhance OpenText products and solutions
Strategic Partners
Communities
Explore our OpenText communities. Connect with individuals and companies to get insight and support. Get involved in the discussion.
-
Explore ideas, join discussions, and network
OpenText community
OpenText Dynamic Application Security Testing resources
OpenText Dynamic Application Security Testing
Read the data sheetScanCentral DAST
Read the data sheet5 reasons why SAST + DAST with OpenText makes sense
Learn moreDAST for the enterprise—a shift to the left
Read the paperAppSec testing in multi-factor authentication environments
Read the flyerOpenText Dynamic Application Security Testing
Read the data sheetScanCentral DAST
Read the data sheet5 reasons why SAST + DAST with OpenText makes sense
Learn moreDAST for the enterprise—a shift to the left
Read the paperAppSec testing in multi-factor authentication environments
Read the flyer
3 reasons DAST is more effective than IAST
DAST uncovers more vulnerabilities, simulates real attacks, and seamlessly integrates security.
Read the blog
Gartner names OpenText a Leader in critical capabilities
OpenText is a top Leader in SAST and DAST, and one of the only vendors that moved up in the quadrant.
Read the blog
Customers’ Choice
OpenText recognized for application security testing on Gartner ® Peer Insights™︎.
Read the blogWhat is dynamic application security testing (DAST)?
Learn moreCybersecurity in a Web 3.0 world
Read the flyer5 reasons why SAST + DAST with OpenText makes sense
Learn moreOpenText Application Security Testing Tools
Visit the community pageWhat is dynamic application security testing (DAST)?
Learn moreCybersecurity in a Web 3.0 world
Read the flyer5 reasons why SAST + DAST with OpenText makes sense
Learn moreOpenText Application Security Testing Tools
Visit the community page-
OpenText™ Core Application Security
Unlock security testing, vulnerability management, and tailored expertise and support
-
OpenText™ Static Application Security Testing
Find and fix security issues early with industry-leading accuracy
-
OpenText™ Application Security Aviator
Secure smarter, not harder with AI code analysis and code fix suggestions
-
OpenText™ Core Software Composition Analysis
Take full control of open source security, compliance, and health
