OpenText™ Core Application Security (Fortify On Demand)
No trust center linked in FedRAMP's data as of Nov 2, 2026. TrustBox builds and hosts trust centers for FedRAMP providers. Get started
FedRAMP Marketplace listing · Provider website · JSON
The OpenText™ Core Application Security (FoD) for US Public Sector performs security assessments of application code and web site/web services testing without any software to install or manage. Static Code Scanning of code such as Java, .NET and other major programming languages for security defects are performed in the FoD System at the code layer followed by an audit review by a OpenText Fortify Static auditor. Dynamic Web Site and Web Services testing use OpenText Fortify's WebInspect software as the scan engine, followed by a review from a OpenText Fortify Dynamic tester.
Facts
- FedRAMP ID
- F1301101857
- Status
- FedRAMP Authorized
- Impact level
- Moderate
- Authorization path
- JAB
- Authorized
- Feb 4, 2015
- Service model
- SaaS
- Deployment
- Government Community Cloud
- Assessor
- Lunarline, Inc.
- Initial authorizing agency
- Department of Homeland Security
CR26 trust center
- Package
- FedRAMP Rev5
- Trust center
- Not listed
- Next ongoing report
- Not stated
- Schema check
- Passes FedRAMP's schema
Gaps found
- No UEI number; include it if you have one CDS-CSO-PUB
- No business category listed CDS-CSO-PUB
- No trust center link; CR26 requires one with access instructions CDS-CSO-UTC
- No link to secure configuration guidance SCG-CSO-RSC
- No next Ongoing Certification Report date CDS-CSO-PUB
- No service list; CR26 requires the services in scope CDS-CSO-SVC
- No documentation overview (repositories) listed CDS-CSO-PUB
Built on
- AWS GovCloud Amazon
Offerings built on OpenText™ Core Application Security (Fortify On Demand) 1
- Axonius Asset Cloud Axonius Federal Systems
Agencies with an ATO 7
Status history
- Feb 4, 2015 FedRAMP Certified Rev5
- Feb 7, 2014 JAB Review Rev5