It helps to automate web application security testing for penetration testers and security auditors, as well as QA and development.
It is enhanced with:

•  Customization and Extensibility Capabilities
•  Broad Application Coverage
•  Advanced Remediation Recommendations
•  Regulatory Compliance Reports including HIPAA, PCI, SOX, GLBA, etc.

Fortify Source Code Analyzer (SCA) – “Analyze, prioritize and fix security issues early in development stage”

The world's most proven and widely used source code security analysis solution that enables security professionals to review more code and prioritize issues in less time, while helping development teams identify and fix issues early and with less effort.
Fortify SCA secures source code with:

1. The industry's most thorough code analysis
2. Quick and efficient remediation assistance
3. Provides IDE plug-ins and easy integration with build Environments
4. Supports a wide variety of languages, frameworks and operating systems
5. Feature-rich audit Workbench Enables fast and effective triage, review and audit.
6. Delivers depth and accurate results with Low false positives
7. Thousands of rules in over 118 vulnerability categories

• Integrates with Fortify Manager

• The de-facto standard in source code security analysis and winner of the 2005 Jolt Excellence and 2006 InfoWorld Security Analysis Technology of the Year awards.

 

Fortify Tracer – “Makes every black box security test measurable and actionable”

The first and only automated application security solution that makes black box security testing measurable and more actionable. Fortify Tracer can be used in conjunction with any manual or automated testing procedure.

• The first and only measure of "application security coverage“
• Works effectively on any J2EE based application.
• Collects code level vulnerability information to speed remediation.
• Identifies Vulnerabilities Not Found by Black Box Testing .
• Requires no source code to begin.

 

Fortify Defender – “Monitor and protect the deployed application”

The first and only application-level intrusion prevention solution for web applications already in deployment.
Fortify Defender enables a new, highly accurate layer of Web application security by monitoring security-critical functions and application programming interfaces (APIs)inside the Web application itself.
Fortify Defender gives you:

• Unparalleled insight into actual security events and reports on who attacked, how often, the technique used and much more

• Defense in depth for custom business web applications

• Addresses software security compliance requirements for Payment Card Industry (PCI) Data Security Standards, OWASP Top Ten, HIPAA and more.

• Requires minimal overhead and can be applied on any J2EE or .Net custom Web application, even those where source code is unavailable