{"id":"F1301101857","name":"OpenText™ Core Application Security (Fortify On Demand)","provider":"OpenText","providerSlug":"opentext","status":"FedRAMP Authorized","impact":"Moderate","authType":"JAB","authDate":"2015-02-04","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":[""],"assessor":"Lunarline, Inc.","assessorId":"137004","smallBusiness":false,"website":"https://www.opentext.com/products/fortify-on-demand","description":"The OpenText™ Core Application Security (FoD) for US Public Sector performs security assessments of application code and web site/web services testing without any software to install or manage. Static Code Scanning of code such as Java, .NET and other major programming languages for security defects are performed in the FoD System at the code layer followed by an audit review by a OpenText Fortify Static auditor. Dynamic Web Site and Web Services testing use OpenText Fortify's WebInspect software as the scan engine, followed by a review from a OpenText Fortify Dynamic tester.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/OpenText%20Logo2.jpg","inMarketplace":true,"agencies":["22-011-10","22-016-07","22-016-03","22-002","22-061-01","22-042-02","22-014-02"],"reuseCount":6,"leverages":["F1603047866"],"leveragedBy":["FR2401047002"],"timeline":[{"date":"2014-02-07","to":"JAB Review","certType":"Rev5"},{"date":"2015-02-04","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Lunarline, Inc."},"sponsor":"22-002","trustCenterCheck":null}