Overall, it's a great and must have tool for every organization working on software development.

Fortify can be integrated into popular IDEs like Visual Studio, eclipse, IntelliJ Idea. It can also be integrated into GitLab, Jenkins CICD pipeline, bitbucket etc. It makes static code analysis very easy. It supports very wide range of security checks including both static and dynamic code analysis to detect vulnerabilities. Very easy to use and integrate. Very user-friendly dashboard to check all the issues. Good support from Microfocus.

It sometimes gives false positives which wastes effort and time of developers. Might be little bit costly for small organizations but used widely by many organizations. Might fail to detect certain vulnerabilities so we cannot fully rely on it.

A Perfect SAST Solution to implement in an DevSecOps pipeline. The tool is matured and perfect on its own flow.If your budget meets the cost, you can just go for it as it is a perfect SAST solution.

The user-friendly UI, easy connection with CI/CD, and excellent customer assistance are all highlighted along with the details of the code analysis of the problems. The fact that this software is compatible with practically all programming languages is what I enjoy most about it.

We have not discovered any issues with the tool; rather it is good and extremely comfortable using it, therefore we are pleased with how it has evolved.