OpenText™ Core Application Security (Fortify On Demand)

How to buy

Confirmed paths come from GSA and the FedRAMP record; searches are places to look.

Confirmed buying paths

• Vendor directGovernment sales page from the FedRAMP record
  Visit →

Other places to check

• AWS MarketplaceExact listing not yet verified by FedCatalog · Search listings; GovCloud (US) availability is shown on each listing
  Search AWS Marketplace →
• Azure MarketplaceExact listing not yet verified by FedCatalog · Search listings; Azure Government editions are listed separately
  Search Azure Marketplace →
• Google Cloud MarketplaceExact listing not yet verified by FedCatalog · Search listings
  Search Google Cloud Marketplace →
• Oracle Cloud MarketplaceExact listing not yet verified by FedCatalog · Browse listings
  Open Oracle Cloud Marketplace →
• GSA eLibraryExact listing not yet verified by FedCatalog · MAS contract holders that list the vendor
  Search GSA eLibrary →
• GSA AdvantageExact listing not yet verified by FedCatalog · Products and prices on GSA schedules
  Search GSA Advantage →
• NASA SEWPExact listing not yet verified by FedCatalog · Provider and contract-holder lookup
  Open NASA SEWP →

✓ verified by FedCatalog · ○ vendor-supplied and reviewed · searches are places to look, not matches. FedCatalog shows what it can verify and labels what it can’t. Sell this to government? Send exact marketplace, GSA or SEWP listings to mark@fedcatalog.com.

FedRAMP Marketplace listing ↗ · Section 508 ACR Repository ↗ · SAM.gov ↗

Government footprint

7 agencies have an authorization or reuse on record for this offering.

What it does

The OpenText™ Core Application Security (FoD) for US Public Sector performs security assessments of application code and web site/web services testing without any software to install or manage. Static Code Scanning of code such as Java, .NET and other major programming languages for security defects are performed in the FoD System at the code layer followed by an audit review by a OpenText Fortify Static auditor. Dynamic Web Site and Web Services testing use OpenText Fortify's WebInspect software as the scan engine, followed by a review from a OpenText Fortify Dynamic tester.

Authorization details

• Offering
  OpenText™ Core Application Security (Fortify On Demand)FedRAMP ID F1301101857
• Status
  FedRAMP AuthorizedJAB authorization path · authorized Feb 4, 2015
• FedRAMP impact level
  ModerateAuthorized against the FedRAMP Moderate baseline, the most common one.
• Deployment
  Government Community CloudSaaS
• Runs on
  AWS GovCloudFrom FedRAMP leveraged-system relationships.
• Assessor (3PAO)
  Lunarline, Inc.
• Leveraged by
  1 other offeringsFedRAMP offerings built on this one
• Government sales
  uspublicsectorsales@opentext.comContact published on the FedRAMP listing
• Data as of
  Oct 7, 2026FedRAMP Marketplace, refreshed daily

An authorization belongs to this specific offering and boundary; the vendor’s other offerings are listed separately. Source: FedRAMP Marketplace · refreshed Oct 7, 2026.

Other offerings from OpenText