Fortify Application Defender Reviews

Used for multiple environments, compilers, and operating systems, including Altera, Xilinx, Linux, Windows, and cross-compiler environments.

It is a good product when support for environments is included. It finds several items and is also good at not reporting false positives.

Its ability to find security defects is valuable. The elimination of security defects is my top priority. Of secondary importance is finding coding defects.

Support for older compilers/IDEs is lacking. Many developers are still using environments that are known for having security issues. For example, Visual Studio 2005, 2008, and older, gcc 1.x, etc. are still being used. However, we cannot analyze a project using these older compilers because they are no longer supported by Fortify. If I can't find security issues injected by the development environment because I'm forced to use a newer compiler, then I cannot make recommendations to use an updated compiler. This is a particularly thorny issue wherein development environments of mission critical systems do not change and yet we need to recommend usage of newer development environments.

The most valuable features of Fortify Application Defender are the code packages that are default.

Fortify Application Defender could improve by supporting more code languages, such as GRAAS and Groovy.

I have been using Fortify Application Defender for approximately four years.

Fortify Application Defender is a stable solution.

The scalability of Fortify Application Defender is good.

I have not used technical support but I have some good feedback.

I have not used another similar solution to Fortify Application Defender.

Fortify Application Defender has a few drawbacks, it has its own pros and cons, but it's a good tool to use in any industry.

I would recommend this solution to others.

I rate Fortify Application Defender a seven out of ten.

We use the solution for static code analysis. We do static code analysis on our application project code and we use the solution to check the product quality.

The solution helped us to improve the code quality of our organization.

The solution is quite expensive.

There could be little improvements made in the solution's performance, reporting, management, interface, dashboard, etc. 

Their level of support could also be better.  They should be more qualified and quicker to respond, for example. 

It would be beneficial if the dashboard integrated with JIRA.

The solution is very stable. We find it pretty robust.

We used it for more than 70-80 products for doing standard code analysis and the scalability was pretty good. We didn't see any performance issues.

Technical support is pretty helpful.

The initial setup is pretty straightforward. You need less than three people to maintain the solution after implementation.

We've been using the private cloud deployment model.

If you need a huge impact, a business impact, then I think I would recommend HP Fortify. However, if a user is looking for a small scale application with less business impact, I would go with a free solution.

I would rate the solution ten out of ten. Aside from the cost, the application is pretty good.