Core Application
Security (Fortify)
UX design for the only AppSec platform offering SAST, DAST, SCA, IAST, and MAST as a unified service, enabling continuous security testing at DevOps speed.
The product
OpenText Core Application Security (Fortify) is an Application Security as a Service platform. It is the only AppSec provider offering SAST, DAST, SCA, IAST, and MAST as a unified cloud service. Recognised as a market leader by Gartner, Forrester, IDC, and G2.
Product impact
What I worked on
Unified AppSec Testing
The only solution offering SAST, DAST, MAST, IAST, and SCA as a unified cloud service, eliminating the need for multiple vendors.
Expert Audit and False Positive Removal
All scans include a full expert audit of results, removing false positives and ensuring findings are accurate and immediately actionable.
CI/CD and DevOps Integration
Integrates into Jenkins, Azure DevOps, GitHub, and GitLab, enabling automated security scanning at every pipeline stage.
Compliance Coverage
Supports OWASP Top 10, PCI-DSS, HIPAA, FedRAMP, ISO 27001, and NIST with automated policy enforcement and compliance reporting.
AI Code Analysis
Includes AI-powered SAST Aviator for intelligent triage, false positive suppression, contextual code fix suggestions, and auto-remediation.
Scalable SaaS Architecture
Cloud-based, no on-premises infrastructure required. Scales from a handful of applications to thousands with dedicated Customer Success management.
What I did
UX Designer at OpenText
- Designed the UX for AI-powered application security features, improving the developer and analyst experience for vulnerability detection and triage.
- Worked on Connector Management and data integration patterns connecting Fortify findings into broader security operations workflows.
- Contributed to improving customer-facing dashboards, helping security teams understand and act on vulnerability data faster.
- Partnered with product and engineering teams to align design decisions with real security workflows, informed by research and usability testing.