
Fortify
Claim this toolComprehensive application security testing for identifying and remediating vulnerabilities.
Free plan available, paid tiers aboveVisit WebsiteThe Bottom Line
- Price
- Free plan available, paid tiers above. Compare plans
Key facts
- Comprehensive SAST, DAST, and IAST capabilities
- Integrates security into the SDLC
- Identifies and prioritizes software vulnerabilities
Pros
- Offers a broad range of AST technologies in one platform
- Strong reputation and maturity in the AST market
- Provides detailed and actionable vulnerability insights
- Good integration capabilities with development tools
- Scalable for large organizations and complex applications
Cons
- Can be complex to set up and configure
- May require significant resources for deployment and management
- Can produce a high number of findings, requiring effort to triage
What is Fortify?
Ratings Across the Web
Fortify holds an aggregate rating of 4.5 out of 5 from 118 reviews across SourceForge and G2, last checked September 16, 2026.
Ratings aggregated from independent review platforms. Learn more
Key Features
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Interactive Application Security Testing (IAST)
- Software Composition Analysis (SCA)
- Runtime Application Self-Protection (RASP)
- Vulnerability correlation and prioritization
- Integration with IDEs and CI/CD pipelines
- Customizable policies and rules
Pricing
Fortify offers a generous free tier with optional paid upgrades for advanced features.
Reviews

Review Fortify, get a free AI guide
Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.
Across 118 verified user reviews on SourceForge, G2
Add your hands-on experience using the offer above to help the next buyer.
Best Fortify Alternatives
Top alternatives based on features, pricing, and user needs.
The most comprehensive AI-powered DevSecOps platform for secure and accelerated software delivery.
Web security testing toolkit for penetration testers
Automated code review for bugs, vulnerabilities, and code smells
Secure your code, dependencies, containers, and IaC from dev to production
Application security testing platform
Application security testing platform
Open-source web application security scanner
Automate CI/CD, testing, and deployment directly from your repository
Still deciding?
Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.
Explore More
Fortify FAQ
How does Fortify help integrate security into the DevOps pipeline?
Which teams benefit most from using Fortify?
How does Fortify compare to Veracode in terms of its offerings?
What kind of trade-offs should organizations consider when implementing Fortify?
Does Fortify include a free tier?
How does Fortify provide a comprehensive view of application security risks?
Source: microfocus.com