OpenText 首頁。
OpenText Fortify SAST

靜態應用程式安全測試和程式碼分析

及早發現並修正安全問題，以業界領先的準確度

聯絡我們
電腦上的 OpenText Fortify SAST 平台儀表板。

Gartner® 評選 OpenText 為應用程式安全領域的領導者獲取 Magic Quadrant 報告

在 CI/CD 管道中自動化安全措施

觀看 AI 驅動的 SAST 如何幫助團隊及早發現並修正風險

傳統的 SAST 工具通常需要調整和專業知識，讓團隊疲於應付假陽性結果。其他軟體雖然容易使用，但卻會遺漏漏洞。 OpenText™ Fortify™ SAST 可讓 DevSecOps 具有精確的漏洞偵測、廣泛的語言支援，以及無縫的 CI/CD 整合。AI 驅動的洞察力可協助開發人員優先處理並有效解決弱點，降低整個 SDLC 的安全風險。

為何選擇 Fortify SAST？

找出其他人遺漏的重要弱點。 Fortify SAST 與 GitHub、GitLab、Jenkins、Azure DevOps、VS Code、Eclipse 等整合，能及早保護程式碼，同時保持開發者快速運作。

  • 1,524+
    已評估的脆弱性類別
    涵蓋 44 種以上的語言及超過一百萬個獨立的 API。
  • 350+
    支持的框架
    提供無與倫比的廣度和彈性，確保在各種開發環境中都能涵蓋全面的安全性。
  • 94%
    OpenText 用戶同意
    Fortify SAST 協助您提升應用程式安全計畫。
    看看客戶怎麼說

使用案例

Fortify SAST 可為多種開發語言提供全面的安全保護，並可與您選擇的開發工具整合。透過自訂掃描深度平衡速度與準確度，透過 AI 協助減少誤報，並動態擴展。

  • 在程式碼編寫時進行掃描，以便在合併或發布之前發現漏洞。在合併前，先在開發者 IDE 或 pull request 中找出問題。及早修復問題可大幅降低修復成本，並避免累積安全債務。

  • 將 SAST 嵌入 DevOps 管道中，以便在每個建置或部署階段自動封鎖或標記不安全的程式碼。這確保安全性能跟上敏捷開發的步伐，並且不會減慢發布速度。

  • 透過政策驅動的掃描執行與報告，強化安全編碼實務，並偵測 OWASP Top 10、NIST、PCI-DSS、ISO 27001 等合規框架的違規行為，降低因不合規而遭受稽核、罰款或聲譽損害的風險。

  • 在傳統堆疊和現代架構（例如：微服務、API、容器）中，應用一致的安全掃描。靜態分析擴展至行動平台、REST API 和現代介面。這項服務適用於運行混合環境且需要全方位安全覆蓋的企業。

  • 使用集中式儀表板和可自訂的報告來追蹤發現、修復進度及團隊表現，為資安領導者提供所需的能見度，以管理風險並向管理層和開發團隊溝通狀態。

  • 提供可行的指導、IDE 整合，以及情境中的修復建議，以協助開發人員更快地修復漏洞。減少資安與開發團隊之間的摩擦，提升修復率，並鼓勵安全的程式碼習慣。

    主要功能

    Fortify SAST 提供企業級程式碼安全，結合 AI 驅動的分析、雲端原生支援及靈活部署，協助組織降低風險、簡化合規流程，並大規模建構安全軟體。

    與 Fortify SAST 兼容的產品截圖

    全面的語言和框架覆蓋

    支援 44 種以上的語言、350 種以上的框架，並能偵測超過 200 種以上的原始碼秘密類型。能在整個程式碼庫中進行一致且全面的安全測試。

    Fortify SAST 使用者介面的螢幕截圖，顯示了一個儀錶板。

    彈性部署選項

    包含基於 SaaS 的 OpenText™ Fortify™ on Demand 平台、結合 SaaS 與本地功能的私有主機，以及可完全控制應用安全測試解決方案的離線平台。

    Fortify SAST 使用者介面截圖。

    整合式基礎架構即程式碼 (IaC) 掃描

    在同一平台上提供頂尖的 IaC 和應用程式安全掃描，支援 Docker®、Kubernetes® 和無伺服器，全部由單一核心引擎驅動。

    Fortify SAST 使用者介面的截圖，顯示發佈問題。

    AI 驅動的審計與修復

    加速稽核與漏洞偵測，並結合自動化程式碼修正建議，使用 OpenText™ Fortify™ Remediation Aviator™，透過 SaaS 及雲端離線存取。

    Fortify SAST 使用者介面的截圖，強調代幣管理。

    新一代 SAST 引擎

    提供涵蓋 44 種以上語言及 1,524 種以上漏洞類別、350 種以上框架及超過 100 萬個 API。


    全面的語言和框架覆蓋

    Fortify SAST 為 44 種以上主流語言及其框架提供精準支持，並由業界領先的軟體安全研究（SSR）團隊提供敏捷更新支援

    Ada logoAda
    SAP ABAP logoSAP ABAP
    Action Script 標誌Action Script
    Angular 標誌Angular
    Apex 標誌Apex
    Microsoft ASP 標誌Microsoft ASP
    Bash logoBash
    Bicep logoBicep
    CSharp 標誌CSharp
    C++ 標誌C++
    COBOL 標誌COBOL
    Cold Fusion 標誌Cold Fusion
    Delphi logoDelphi
    Docker 標誌Docker
    Elixir logoElixir
    Erlang logoErlang
    Go Lang 標誌Go Lang
    Groovy logoGroovy
    HTML5 標誌HTML5
    Java 標誌Java
    Java Script 標誌Java Script
    JSON logoJSON
    JSP 標誌JSP
    Kotlin logoKotlin
    Lua logoLua
    MXML 標誌MXML
    Net logo.Net
    NETCore 標誌.NETCore
    Perl logoPerl
    PL/SQL logoPL/SQL
    PowerShell 標誌PowerShell
    Python 標誌Python
    R logoR
    Ruby 標誌Ruby
    Rust logoRust
    Scala 標誌Scala
    Swift Trans 標誌Swift Trans
    T-SQL logoT-SQL
    Terraform 標誌Terraform
    TypeScript 標誌TypeScript
    Microsoft Visual Basics 標誌Microsoft Visual Basics
    Visual Basic 標誌Visual Basic
    Windows 行動標誌Windows Mobile
    XML 標誌XML
    YAML 標誌YAML

    加速強化SAST的價值

    部署

    探索適用於任何規模全球組織的可擴展和彈性部署選項。

    合作夥伴

    OpenText 協助客戶找到合適的解決方案、適當的支援和適當的結果。

    全球系統整合商（GSI）

    這些 GSI 均已接受 OpenText 解決方案的培訓和認證，提供的服務可提升獨立解決方案的價值。

    Capgemini 標誌透過 OpenText 和 Capgemini 釋放商業價值
    惠普企業標誌透過 OpenText 和 HPE 加速混合式環境的創新
    埃森哲標誌透過 OpenText 和 Accenture，協助開發和 SAP S/4HANA 的成功
    Deloitte logo與 OpenText 和 Deloitte 共同推動數位轉型
    OpenText 合作夥伴目錄OpenText Application Marketplace

    社群

    探索我們的 OpenText 社群。與個人及公司聯繫以獲得見解和支持。參與討論。

      Fortify SAST resources

      Location World logo

      OpenText supports high-quality application release with less expense and effort

      Learn more
      SAP logo

      OpenText protects SAP and customers against software-related financial losses

      Learn more
      Callcredit logo

      Callcredit adds OpenText into development lifecycle

      Learn more
      DATEV eg logo

      OpenText helped reduce complexity and improved development collaboration

      Learn more
      Professional services customer story

      Strategic alliance with OpenText lowers TCO while enhancing cyber resilience

      Learn more
      Banking customer story

      Custom software solutions boost health management and ensure data compliance

      Learn more
      High tech customer story

      OpenText delivers effective and streamlined application security

      Learn more
      See more success stories

      OpenText Static Application Security Testing (SAST)

      Read the data sheet

      Support and documentation

      View the documentation

      Knowledge base

      View the knowledge base portal

      Support and documentation

      View the documentation

      Knowledge base

      View the knowledge base portal

      • Static application security testing (SAST) analyzes application source code, bytecode, or binaries to detect security vulnerabilities during development. Identifying risks like early in the software development lifecycle (SDLC), makes remediation faster and less expensive.

      • Fortify SAST is a static analysis solution supporting 33+ programming languages and integrating with developer tools, CI/CD pipelines, and ticketing systems. It combines deep static analysis with vulnerability coverage mapped to standards such as OWASP Top 10, CWE, and NIST.

      • SAST helps developers embed security into early software development. Fortify SAST integrates with IDEs (e.g., Visual Studio®, IntelliJ®), build tools (e.g., Maven, Gradle), and CI/CD platforms (e.g., Jenkins™, Azure DevOps®), allowing security scans to run automatically during coding and builds.

      • While SAST primarily analyzes proprietary code, OpenText complements it with Software Composition Analysis (SCA) tools that identify risks in open-source libraries, such as known vulnerabilities, outdated components, and licensing issues.

      • Fortify SAST supports web, mobile, desktop, and cloud-native applications across a wide range of languages including Java, .NET, JavaScript, Python, C/C++, Swift, Kotlin, Go, and more. It also handles infrastructure-as-code (IaC), containers, and APIs.

      • Fortify SAST provides out-of-the-box support for security and compliance frameworks such as OWASP Top 10, PCI DSS, NIST 800-53, and ISO 27001. The platform delivers policy-based scan management, audit-ready reporting, and dashboards that demonstrate risk posture and remediation progress.

      • Fortify SAST offers flexible deployment on-premises for full control and customization, as hosted and managed scanning infrastructure where your team submits code remotely, and as a fully managed experience (Fortify on Demand).

      • Fortify SAST includes support for popular IDEs like Visual Studio, IntelliJ, and Eclipse®, as well as CI/CD tools such as Jenkins, GitHub Actions®, GitLab CI®, Azure DevOps, and Bamboo™. The platform also integrates with issue tracking systems like Jira®, enabling automatic ticket creation.

        A person working on a computer
        January 26, 2026

        OpenText Application Security Content (Fortify) Update 26.1

        SAST Application Security Content detects 1,524 unique categories of vulnerabilities across 44+ languages.

        Read the blog
        Mobile and tablet devices
        March 11, 2025

        Smarter, faster AppSec

        Turn SAST findings into learning, helping developers quickly remediate vulnerabilities.

        Read the blog
        March 3,2025

        Why SAST false positives are inevitable

        Explore why false positives in SAST tools occur, the trade-offs involved, and how to manage them.

        Read the blog
        Security shield image
        January 17, 2025

        Why SAST + SCA is the key to protecting your organization in 2025

        Software supply chain risk continues to rise—156% year-over-year increase in malicious attacks.

        Read the blog
        Person typing on a laptop
        November 25, 2024

        Customers’ Choice

        OpenText recognized for Application Security Testing on Gartner® Peer Insights™︎.

        Read the blog
        Generative AI image
        October 25, 2024

        Generative AI: A double-edged sword for application security

        IDC predicts that by 2026, 40% of net-new applications will incorporate AI.

        Read the blog
        Person wearing glasses looking at a computer screen
        September 26, 2024

        Auto-remediation: the future of AppSec?

        Read the blog
        June 20,2023

        OpenText named a Leader in Critical Capabilities by Gartner

        OpenText is a Leader in SAST and DAST, and one of the only vendors that moved up in the quadrant.

        Read the blog

        What is static application security testing (SAST)

        Learn more

        Cybersecurity in a Web 3.0 world

        Learn more

        5 reasons why SAST + DAST with OpenText makes sense

        Learn more

        OpenText SAST tools

        View the community page

        Cybersecurity in a Web 3.0 world

        Learn more

        5 reasons why SAST + DAST with OpenText makes sense

        Learn more

        OpenText SAST tools

        View the community page

        賣出下一步

        想了解更多嗎？OpenText 專家隨時準備協助。

        聯絡我們

        我們能如何幫助您？