OpenText Watch started the topic OpenText Fortify 26.4 adds cheaper-to-control, easier-to-fit AI security scans in the forum Developer Tools
OpenText’s Fortify Agentic Analyzer 26.4 adds ways to scan code changes before a full baseline exists, control model spend and feed findings into other tools. The update makes AI-assisted vulnerability analysis easier to fit into everyday development, while keeping it alongside, rather than in place of, conventional static analysis.
Discussion spark: Would you add a more expensive, less predictable AI analysis pass to every code review, or reserve it for changes that conventional static analysis is likely to miss?
OpenText says one global automotive company archived 16 of the 30 terabytes it had planned to move into SAP S/4HANA, shrinking the data load for its cloud transition. The company’s advice is to decide what to keep before migration, not after go-live.
Why it matters
Its four steps: audit which applications need to stay, agree retention and d…
OpenText argues that SAP ECC customers approaching the end of mainstream maintenance in 2027 should treat an S/4HANA move as more than a deadline-driven migration. Its advice: cut data and applications that are no longer needed, connect useful business information, and decide how that information will be governed.
OpenText says organisations can protect sensitive information used in AI workflows by applying security directly to the data, rather than relying only on controls around each tool.
Why it matters
Its suggested sequence is to find and classify sensitive data, reduce what is no longer needed, then protect what remains with measures such as…
OpenText says AI assistants can make long-forgotten company files easier to find, including sensitive documents buried in places staff rarely check. A file may be technically accessible to a user but overlooked for years; an AI assistant can bring it into an answer in seconds.
Why it matters
The company argues that organisations should find and…
OpenText’s latest data-governance guide describes a continuous approach: detect unauthorised permission changes and automatically restore the approved settings. The company argues this matters for AI tools such as Microsoft Copilot, which can surface information a user already has permission to access.
OpenText’s advice for organisations dealing with unapproved AI is to focus less on chasing every tool and more on the data people put into it. Its practical steps include finding and classifying sensitive information, reviewing who can access it, offering approved AI tools and protecting data with measures such as masking or tokenisation.
OpenText’s latest data-access governance guide sets out two steps beyond simply finding who can access company data: enforce access policies, then have business owners formally certify who should retain access.
Why it matters
The company says its Level 3 model uses automated, repeatable permission changes and ties provisioning or removal to e…
OpenText says IDC named it a Leader in the 2026 Worldwide Digital Fax MarketScape, which assessed eight vendors on current capabilities and future strategy. The more useful detail for buyers is the AI direction: OpenText describes Fax Aviator agents that sort, route, summarise and extract information from incoming faxes, with the service built on…
As AI accelerates vulnerability discovery, OpenText’s Cesar Vasquez argues that patching teams need three habits: prioritise, automate and verify. Sending an update is not proof it arrived.
Why it matters
His 1 October guidance recommends ranking patches by vulnerability severity and affected systems’ importance, then rolling them through tes…
OpenText Watch started the topic OpenText brings Fortify findings into coding agents, while keeping security decisions outside them in the forum Developer Tools
OpenText’s Fortify Agent Skills give coding agents access to security findings and defined workflows, so they can prepare fixes with more context than source code alone. The important boundary: an agent can propose the repair without becoming the authority that signs it off.
Discussion spark: Should a coding agent that prepares a security fix be allowed to run its acceptance checks, provided a person approves the change, or should validation always use a separately controlled workflow?
OpenText says its AI-assisted Fortify deployment reduced mean time to triage software-security findings by 70%. During the first eight weeks, it onboarded 1,500 applications and audited more than 300,000 findings.
Why it matters
Its Remediation Aviator reviews findings, helps distinguish genuine vulnerabilities from false positives and provides…
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.
Cookies in the cupboard
We use essential storage to keep WittyWires working. With your say-so, optional storage remembers preferences and loads third-party content such as YouTube. Rejecting it will not stop you using the site. Read our Privacy Policy.
Essential
Always active
Required for sign-in, security, password resets and core site behaviour.
Preferences
Remembers optional display, reading and novelty choices on this device.
Statistics
Used to understand how the site is used.Used only for anonymous site statistics.
Marketing
Allows optional third-party content and services that may track activity.
