OpenText Application Security Aviator

OpenText Application Security Aviator is an AI-powered capability within OpenText's application security portfolio, which is built on the Fortify platform. Fortify has long been one of the most established names in application security testing, and it became part of OpenText through the acquisition of Micro Focus. The portfolio addresses the risk that vulnerabilities in custom software, open-source components and application programming interfaces expose organisations to breaches, malware and malicious insiders. Aviator applies large language models to the results of static code analysis, helping developers understand security findings and generate suggested code fixes, with the aim of reducing the time and expertise needed to remediate vulnerabilities and easing friction between security and development teams.

The wider Fortify platform provides static application security testing, which analyses source code for vulnerabilities early in development, and dynamic application security testing, which examines running applications for exploitable weaknesses. Software composition analysis identifies risks in open-source dependencies, while API security testing and infrastructure-as-code scanning extend coverage. Aviator augments these tools by explaining issues in plain language, prioritising findings and proposing code-level remediations that developers can review and apply. Integration with integrated development environments, source control systems and continuous integration and delivery pipelines allows security testing to be embedded into existing development workflows, supporting DevSecOps practices. Centralised management, policy enforcement and reporting help security teams track risk across application portfolios and demonstrate compliance with standards such as OWASP, PCI DSS and relevant government frameworks. Deployment options include on-premises installations, cloud-based Fortify on Demand services and hybrid arrangements, with support for a wide range of programming languages and frameworks. The platform is used by large enterprises, government agencies, financial institutions and software vendors with significant development activity and regulatory obligations. Pricing is quote-based and is not published in this listing, and no free trial or free version is indicated.