# Fortify

**Canonical:** https://apis.io/providers/fortify/  
**Website:** https://www.opentext.com/products/fortify-on-demand  
**APIs profiled:** 42

Fortify is a comprehensive application security platform from OpenText that provides static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA) capabilities. It helps organizations identify and remediate vulnerabilities across the software development lifecycle.

## Kin Score — 52.4 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+1.9 from 50.5).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 68.8 |
| Governance | 9.8 |
| Contract Governance | 9.8 |
| Operational Transparency | 23.7 |
| Developer Ergonomics | 66.7 |
| Commercial Clarity | 50.0 |
| Access Clarity | 50.0 |

## Agent readiness — 33.3 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | yes |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Enterprise · Self-serve signup — onboarding: self-serve, pricing: enterprise, trial: no (confidence: high).

## APIs (42)

- **Fortify Alert Definitions API** — Manage alert definitions
- **Fortify API Keys API** — Manage API keys for programmatic access
- **Fortify Applications API** — Manage applications and their configurations
- **Fortify Artifacts API** — Manage scan artifacts and uploads
- **Fortify Attributes API** — Manage application attributes
- **Fortify Audit Templates API** — Manage audit templates for vulnerability triage
- **Fortify Auth Entities API** — Manage authentication entities (users and LDAP groups)
- **Fortify Authentication API** — Manage authentication tokens
- **Fortify CI/CD API** — CI/CD pipeline integration endpoints
- **Fortify Cloud Pools API** — Manage cloud scan worker pools
- **Fortify Custom Tags API** — Manage custom tags for issue triage
- **Fortify DAST Automated Scans API** — Configure and start DAST automated scans
- **Fortify Dynamic Scans API** — Configure and start dynamic application security testing scans
- **Fortify Event Logs API** — Access tenant event logs
- **Fortify Features API** — System feature and connectivity information
- **Fortify File Tokens API** — Manage file transfer tokens
- **Fortify Issue Selectors API** — Retrieve issue filter metadata
- **Fortify Issues API** — Access and manage vulnerability issues
- **Fortify Jobs API** — Monitor processing jobs
- **Fortify Lookup Items API** — Retrieve lookup and reference data
- **Fortify Microservices API** — Manage microservices within applications
- **Fortify Mobile Scans API** — Configure and start mobile application security testing scans
- **Fortify Notifications API** — Manage user notifications
- **Fortify Open Source Components API** — View open source component data
- **Fortify Open Source Scans API** — Manage open source / software composition analysis scans
- **Fortify Performance Indicators API** — Access performance indicator data
- **Fortify Personal Access Tokens API** — Manage personal access tokens
- **Fortify Project Versions API** — Manage application versions within projects
- **Fortify Projects API** — Manage top-level projects
- **Fortify Releases API** — Manage releases within applications
- **Fortify Reports API** — Generate and download reports
- **Fortify Saved Reports API** — Manage saved report configurations
- **Fortify Scan Policies API** — Manage scan policies
- **Fortify Scan Schedules API** — Manage scheduled scans
- **Fortify Scan Settings API** — Manage scan configuration settings
- **Fortify Scans API** — View and manage security scans
- **Fortify Sensor Pools API** — Manage sensor pools for scan distribution
- **Fortify Sensors API** — Manage WebInspect sensors
- **Fortify Static Scans API** — Configure and start static application security testing scans
- **Fortify System API** — System health and configuration
- …and 2 more, listed in full on the page.

## Agentic access (1)

- **Fortify Agentic Access** — 138 operations · 62 acting · 1 human-in-the-loop

## Security (2)

- **Fortify Authentication** — apiKey/http · 3 schemes
- **Fortify Domain Security** — TLSv1.2 · DMARC

## Plans (1)

- **Fortify Plans Pricing**

## Tags

Application Security, DAST, DevSecOps, SAST, SCA, Security Testing, Vulnerability Scanning

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/fortify/). Scores are computed from the provider's own public artifacts under a published rubric.