25RB033 RFI MicroFocus Fortify 2025.xlsx

RFI Excel version of Word sheet

MicroFocus Fortify harnesses the power of application security data across the software development life-cycle (SDLC) by measuring and improving the efficiency, accuracy, and value to an organization. MicroFocus Fortify helps to provide an accurate picture and scope of the application security posture across the enterprise.

MicroFocus Fortify delivers the advanced correlation, analytics, applications protection and data security Platform One (P1) requires to protect its software ecosystem from sophisticated cyber threats. Fortify supplies both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to meet P1's rigorous security requirements.

MicroFocus Fortify (MFF) is a critical component of the Party Bus Value Stream's support to its customers security and software development. MFF scans the mission applications at run time during operation (i.e. as the application us being used) and highlights poorly written/unsecure code providing developer teams with suggestions for improvements/corrections for the unsecure code or highlighted security concern. MFF also links into other pipelines such as SD Elements. MFF is integrated into the Party Bus software development tool-chain, granting the developers the ability to find and fix security flaws at every stage of the Development Security Operations (DevSecOps) process in real time.

(Please provide details on available options, such as enterprise, cloud-managed, or open-source/community editions. For each licensing option/solution set, please provide how it differs from the listed license.)

2 For each licensing option/solution set, please provide how it is similar from the listed license.

(Specify any feature restrictions, scalability limitations, or support differences among the licenses (e.g., data retention, search query limits, or alerting capabilities)

3 For each licensing option/solution set, please provide how it meets the above requirements.

(Identify core features or capabilities that are shared across all options, such as log aggregation, visualization tools, and monitoring capabilities, regardless of the license type.)

4 For each licensing option/solution set, clarify how it meets the above requirements for our logging and monitoring needs.

(Please highlight specific ways in which each licensing tier can address our operational, security, and compliance needs, particularly in areas like multi-environment visibility, role-based access control, and support for compliance auditing.)

(Include details on onboarding costs, consulting, or configuration support required for a smooth transition. Specify any training options available, such as workshops, online courses, or documentation resources, and their associated costs.)

2 For each license, please provide any price plans associated such as monthly, trial, annual.

(Indicate if discounts are offered for longer-term contracts or high-volume deployments. For cloud-managed options, provide cost breakdowns for storage, query processing, and other usage-based charges.)

For example, are advanced analytics, machine learning-based anomaly detection, or pre-built integrations with other monitoring tools included at higher licensing tiers? - Clarify any value-added services, such as dedicated account support, proactive health checks, or best-practice workshops, that come with certain licenses.

2 Is your company willing to enter into contracts with a base year with up to four one-year options? If not, how many years is your company willing to agree to?

(For longer-term contracts, specify any guarantees on pricing, renewal terms, or opportunities to adjust the contract scope to accommodate potential changes in our data volume or monitoring requirements.)

Requirements Capability Sheet

- Java

- Javascript/TypeScript/React

- Python

- Dotnet/C#

- C++

- Ruby

- Golang

- PHP