Skip to main content
Please sign-in to start using Help Center features

Fortify Command Line Interface (fcli) : The universal Fortify CLI

Maurizio Di Stefano
  • Updated

The Fortify Command Line Interface - Fortify CLI (fcli) - is a command line tool that is at the heart of our automation and integration strategy. If you haven't encountered fcli yet, think of it as a Swiss army knife for the entire OpenText Application Security portfolio. Through a single, unified interface, fcli provides command-line access to multiple Fortify products, like Software Security Center (SSC), ScanCentral SAST, ScanCentral DAST and Debricked (Software Composition Analysis). 

Originally conceived as a tool for integration and automation scenarios, fcli has grown into something more strategic. It offers rich functionality including: 

  • Unified access across all Fortify products with a consistent command structure 
  • Session management that eliminates repetitive authentication 
  • Flexible output formats (JSON, CSV, XML, YAML) for easy integration with other tools 
  • Powerful actions framework for running complex, multi-step workflows 
  • Variable management for passing data between commands 

Whether you're building CI/CD pipelines, automating security workflows, or creating custom integrations, fcli has become the foundation that many organizations build upon. And with the advent of AI agents (Fortify MCP Server - Complete AppSec Functionality for AI Agents), that foundation is becoming even more valuable. 

The documentation web page Fortify CLI (fcli) Documentation describes installation and general usage of fcli. For a full listing of fcli commands and corresponding command line options, please select a version from the menu on the top-right to view detailed usage documentation and manual pages for that version. 

The following are the references to fcli documentation:

Here few Youtube videos with regard fcli (available in the Fortify Unplugged Youtube Channel):

Related articles