# OpenText Cybersecurity

**Canonical:** https://apis.io/providers/opentext-cybersecurity/  
**Website:** https://cybersecurity.opentext.com/  
**APIs profiled:** 1

OpenText Cybersecurity is the security business of OpenText, assembled from the Micro Focus security portfolio (Fortify application security, ArcSight threat detection and response, NetIQ identity and access management, Voltage data privacy) and the SMB/MSP brands OpenText acquired through Webroot, Carbonite and Zix — endpoint protection, DNS protection, EDR/MDR, email threat protection and encryption, security awareness training, backup and disaster recovery. Two product lines expose a public developer surface. OpenText Core Application Security (Fortify on Demand) publishes a live Swagger 2.0 contract with 159 operations across applications, releases, static/dynamic/mobile scans, vulnerabilities, reports and tenant administration, served per region from api.ams / api.emea / api.apac.fortify.com. The Webroot Unity API is the multi-tenant REST platform managed service providers use to run Secure Cloud sites, endpoints, policies, licensing and near-real-time event notifications. Fortify also ships a first-party CLI (fcli), a first-party MCP server inside that CLI, and a published set of Agent Skills for Claude Code, GitHub Copilot, Codex and Gemini CLI.

## Kin Score — 54.2 / 100 (developing)

Scored 2026-09-14 under rubric 0.22.0.

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 48.1 |
| Contract Governance | 18.2 |
| Operational Transparency | 52.6 |
| Developer Ergonomics | 78.6 |
| Access Clarity | 52.6 |

## Agent readiness — 32.2 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | yes |
| Agent Skills | yes |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## APIs (2)

- **OpenText Core Application Security (Fortify on Demand) API** — The REST API behind OpenText Core Application Security, still branded Fortify on Demand across the contract and the tooling. 159 operations over 125 paths cover applications, re...
- **Webroot Unity API** — The Webroot Unity API is the multi-tenant REST platform OpenText Cybersecurity partners and managed service providers use to reach Webroot and Secure Cloud services — endpoint s...

## MCP servers (1)

- **fcli MCP server (OpenText Fortify)**

## Security (2)

- **Opentext Cybersecurity Authentication** — 0 schemes
- **Opentext Cybersecurity Domain Security** — TLSv1.3 · HSTS · DMARC

## Plans (1)

- **Opentext Cybersecurity Plans Pricing**

## Tags

Cybersecurity, Application Security, Vulnerability Management, SAST, DAST, Endpoint Security, Threat Detection, Email Security, Backup and Recovery, Managed Service Providers, Identity and Access, Data Privacy, Enterprise Software

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/opentext-cybersecurity/). Scores are computed from the provider's own public artifacts under a published rubric.