Try our new research platform with insights from 80,000+ expert users
OpenText Core Application Security Logo

OpenText Core Application Security Reviews

Vendor: OpenText
4.0 out of 5
Leave a review

What is OpenText Core Application Security?

OpenText Core Application Security offers robust features like static and dynamic scanning, real-time vulnerability tracking, and seamless integration with development platforms, designed to enhance code security and reduce operational costs.

Get the OpenText Core Application Security Buyer's Guide and find out what your peers are saying about OpenText Core Application Security, SonarQube, Snyk and more!
OpenText Core Application Security is the #12 ranked solution in AST tools and #13 ranked solution in application security solutions. PeerSpot users give OpenText Core Application Security an average rating of 8.0 out of 10. OpenText Core Application Security is most commonly compared to SonarQube: OpenText Core Application Security vs SonarQube. OpenText Core Application Security is popular among the large enterprise segment, accounting for 69% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 18% of all views.
Buyer's Guide
OpenText Core Application Security
December 2025
Get the report
Helped 879,259 peers since 2012

Featured OpenText Core Application Security reviews

Read more reviews

OpenText Core Application Security mindshare

Product category:
Application Security Tools
As of December 2025, the mindshare of OpenText Core Application Security in the Application Security Tools category stands at 3.4%, down from 4.8% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
OpenText Core Application Security3.4%
SonarQube19.2%
Checkmarx One10.2%
Other67.2%
Application Security Tools

PeerResearch reports based on OpenText Core Application Security reviews

TypeTitleDate
CategoryApplication Security ToolsDec 29, 2025Download
ProductReviews, tips, and advice from real usersDec 29, 2025Download
ComparisonOpenText Core Application Security vs SonarQubeDec 29, 2025Download
ComparisonOpenText Core Application Security vs VeracodeDec 29, 2025Download
ComparisonOpenText Core Application Security vs Checkmarx OneDec 29, 2025Download
Suggested products
TitleRatingMindshareRecommending
SonarQube4.019.2%83%134 interviewsAdd to research
Snyk4.16.1%100%50 interviewsAdd to research
 
 
Key learnings from peers
Last updated Nov 16, 2025

Valuable Features

OpenText Core Application Security excels in source code and dynamic scanning, accurate results, vulnerability identification, integration with development platforms, and automated scanning. Users value its easy-to-use interface, efficient security testing, and support for multiple language frameworks. The real-time dashboard provides comprehensive vulnerability insights, enhancing remediation efforts. Fortify on Demand's cloud-based offering, customizable API integration, and minimal false positives make it favored for compliance and reduced operational costs. It efficiently aligns with DevOps, streamlining secure development workflows.
  • "The best features with Fortify on Demand include having analysis for any product based on analysis points."
  • "Fortify on Demand is a very good service which can be used by any organization when they are building a team because it identifies security vulnerabilities early in the software development life cycle and provides good visibility into issues in cloud-hosted applications."
  • "Fortify is effective in identifying such oversights, making it a really helpful tool despite its problems."

Room for Improvement

OpenText Core Application Security requires improvement in its reporting capabilities for visual appeal and seamless export. Users face challenges with integration, false positive management, and language support. They find the pricing structure confusing and seek faster scan times within build cycles. Enhanced features such as AI-driven analysis and quality code assessments for broader industry standards are desired. Increased language support, better support response, and improved integration with existing systems are necessary.
  • "I would rate the support for OpenText at no more than three out of ten; it is really bad, and we encounter a lot of problems when getting support."
  • "If you have an internal team and you want your internal team to validate false positives, basically to determine whether it's a valid issue or an invalid issue, then I wouldn't recommend it much."
  • "There are frequent complaints about false positives from Fortify. One day it may pass a scan with no issues, and the next day, without any code changes, it will report vulnerabilities such as password exposure."

ROI

Customers express satisfaction with OpenText Core Application Security for its quality and effectiveness in reducing security issues. It automates processes, saving time and resources with real-time dashboards. Users experience enhanced security by preventing breaches and minimizing attack surfaces. With cost-effective features and high availability, the application is seen as essential for maintaining robust security. Although some find it challenging to measure ROI precisely, many consider it valuable for safeguarding their infrastructure and avoiding significant potential costs.

Pricing

OpenText Core Application Security pricing is noted as being on the higher end; users often regard it as costly. Its subscription model, typically on a per-scan basis, lacks flexibility, but the solution offers robust features and a powerful performance. The cloud-based Fortify on Demand may seem initially expensive yet delivers extensive capabilities. Users suggest beginning with the trial version, as the solution can adapt to specific needs, with scalable licensing options available. Setup costs are minimal for this on-demand service.
  • "It is not more expensive than other solutions, but the pricing is competitive."
  • "Fortify on Demand is more expensive than Burpsuite. I rate its pricing a nine out of ten."
  • "The product's cost depends on the type of license."

Popular Use Cases

Users utilize OpenText Core Application Security primarily for static and dynamic code analysis, focusing on identifying vulnerabilities in software development. They leverage its capabilities for educational purposes, ensuring security by design. Often integrated with DevOps environments, it aids in scanning both web and mobile applications. Additionally, financial institutions and e-commerce platforms benefit from its robust security assessment features to safeguard applications before deployment, maintaining compliance with standards such as PCI and ISO 27001.

Service and Support

OpenText Core Application Security customer service is rated as helpful and responsive, with knowledgeable support. The technical support experiences vary widely; some find it responsive and effective, while others encounter delays and communication gaps. There is a consistent call for faster issue resolution and better coordination. Although some consider the support satisfactory, there's room for improvement, particularly in handling complex queries and offering comprehensive documentation and assistance during setup and implementation stages.

Deployment

OpenText Core Application Security's initial setup is generally easy and intuitive with straightforward deployment. Users appreciate the cloud-based nature, which simplifies the process. Some faced challenges like complex configurations or learning curves, especially with the on-premises installations. While certain integrations required additional support, most found the process manageable with available guidance and documentation. The simplicity and efficiency in deployment are commonly highlighted as positive factors.

Scalability

Users find OpenText Core Application Security highly scalable, capable of handling significant workloads without issues. Its infrastructure supports diverse applications and user bases, making it versatile for various industries. Despite some challenges with pricing and licensing, users appreciate its seamless integration and scalability across enterprise levels, including Fortune 500 companies. Some mention limits in concurrent scan capabilities, but generally, it effectively supports large code volumes, with plans for expanded use among existing clients.

Stability

OpenText Core Application Security generally demonstrates high stability, reflecting consistent performance and no significant issues. While some experiences show minor browser hiccups or occasional memory concerns, most users find it dependable. Instances of running out of memory, particularly during JavaScript-heavy scans, are noted, necessitating high system resources. Users often rate its stability positively, highlighting its reliability and lack of frequent crashes or glitches, with many awarding high stability scores.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our OpenText Core Application Security Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business13
Midsize Enterprise6
Large Enterprise38
By reviewers
By visitors reading reviews
Company SizeCount
Small Business234
Midsize Enterprise149
Large Enterprise836
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
18%
Manufacturing Company
14%
Computer Software Company
9%
Government
8%
Insurance Company
4%
University
4%
Comms Service Provider
4%
Educational Organization
4%
Healthcare Company
3%
Performing Arts
3%
Energy/Utilities Company
3%
Retailer
2%
Hospitality Company
2%
Media Company
2%
Transportation Company
2%
Real Estate/Law Firm
2%
Aerospace/Defense Firm
2%
Construction Company
2%
Outsourcing Company
2%
Legal Firm
1%
Logistics Company
1%
Recreational Facilities/Services Company
1%
Non Profit
1%
Marketing Services Firm
1%
Consumer Goods Company
1%
Wholesaler/Distributor
1%
Pharma/Biotech Company
1%

Compare OpenText Core Application Security with alternative products

Go!

Learn more about OpenText Core Application Security

OpenText Core Application Security is a cloud-based, on-demand service providing accurate and deep scanning capabilities with detailed reporting. Its integrations with development platforms ensure an enhanced security layer in the development lifecycle, benefiting users by lowering operational costs and facilitating efficient remediation. The platform addresses needs for intuitive interfaces, API support, and comprehensive vulnerability assessments, helping improve code security and accelerate time-to-market. Despite its strengths, challenges exist around false positives, report clarity, and language support, alongside confusing pricing and package options. Enhancements are sought in areas like CI/CD pipeline configuration, report visualization, scan times, and integration with third-party tools such as GitLab, container scanning, and software composition analysis.

What features define OpenText Core Application Security?
  • Static and Dynamic Scanning: Offers thorough analysis to identify vulnerabilities during development.
  • Real-time Vulnerability Tracking: Continuously updates and monitors potential security threats.
  • Seamless Development Platform Integration: Enhances security processes without disrupting workflows.
  • Cloud-Based Service: Provides flexible, on-demand security capabilities with accurate results.
  • API Support: Allows smooth integration and automation within existing systems.
What benefits should users look for in reviews?
  • Reduced Operational Costs: Optimizes resources by lowering costs associated with security management.
  • Efficient Remediation: Speeds up the process of identifying and resolving vulnerabilities.
  • Enhanced Code Security: Strengthens overall application security during the development lifecycle.
  • Accelerated Time-to-Market: Streamlines development stages by integrating essential security tools.

Industries like mobile applications, e-commerce, and banking leverage OpenText Core Application Security for its ability to identify vulnerabilities such as SQL injections. Integrating seamlessly with DevSecOps and security auditing processes, this tool supports developers in writing safer code, ensuring secure application deployment and enhancing software assurance.

OpenText Core Application Security was previously known as Micro Focus Fortify on Demand.

OpenText Core Application Security customers

SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.

Related questions

  • 24
What Is The Biggest Difference Between Fortify on Demand And SonarQube?
  • 21
What are the costs for Micro Focus Fortify on Demand?
  • 128
If you had to both encrypt and compress data during transmission, which would you do first and why?
  • 37
When evaluating Application Security, what aspect do you think is the most important to look for?
  • 92
What are the Top 5 cybersecurity trends in 2022?
  • 119
What are the threats associated with using ‘bogus’ cybersecurity tools?
  • 42
We're evaluating Tripwire, what else should we consider?
  • 30
Which application security solutions include both vulnerability scans and quality checks?
  • 409
Is SonarQube the best tool for static analysis?
  • 29
Why Do I Need Application Security Software?

Product Categories

Product Categories
Application Security Tools
Static Application Security Testing (SAST)

Popular Comparisons

Popular Comparisons
SonarQube vs OpenText Core Application Security Logo
SonarQube vs OpenText Core Application Security
Snyk vs OpenText Core Application Security Logo
Snyk vs OpenText Core Application Security
GitLab vs OpenText Core Application Security Logo
GitLab vs OpenText Core Application Security
Checkmarx One vs OpenText Core Application Security Logo
Checkmarx One vs OpenText Core Application Security
Veracode vs OpenText Core Application Security Logo
Veracode vs OpenText Core Application Security
Coverity Static vs OpenText Core Application Security Logo
Coverity Static vs OpenText Core Application Security
GitHub Advanced Security vs OpenText Core Application Security Logo
GitHub Advanced Security vs OpenText Core Application Security
OWASP Zap vs OpenText Core Application Security Logo
OWASP Zap vs OpenText Core Application Security
Mend.io vs OpenText Core Application Security Logo
Mend.io vs OpenText Core Application Security
Acunetix vs OpenText Core Application Security Logo
Acunetix vs OpenText Core Application Security
Sonatype Lifecycle vs OpenText Core Application Security Logo
Sonatype Lifecycle vs OpenText Core Application Security
PortSwigger Burp Suite Professional vs OpenText Core Application Security Logo
PortSwigger Burp Suite Professional vs OpenText Core Application Security
HCL AppScan vs OpenText Core Application Security Logo
HCL AppScan vs OpenText Core Application Security
Qualys Web Application Scanning vs OpenText Core Application Security Logo
Qualys Web Application Scanning vs OpenText Core Application Security
GitGuardian Platform vs OpenText Core Application Security Logo
GitGuardian Platform vs OpenText Core Application Security
See all alternatives
 
OpenText Core Application Security Reviews Summary
Author infoRatingReview Summary
Lead Cybersecurity at TBO3.5I've used Fortify for seven years and found it effective for early vulnerability detection, especially in AWS environments, though it's costly and less suitable for in-house teams; support is strong, but VB.NET support was initially lacking.
Chief Innovation Officer at SAGGA3.5I find Fortify on Demand effective for security analysis with a better licensing model, though it lacks quality code analysis and broader ISO 25000 coverage; support is poor, and pricing is confusing for customers despite easier setup.
Lead Developer at a legal firm with 1,001-5,000 employees3.5I use Fortify to identify security vulnerabilities and sensitive information in source code, particularly access tokens. It's effective but prone to false positives and doesn't check CVEs in third-party libraries, which necessitates using an additional tool.
Principal Technical Consultant at EOH5.0I find Fortify on Demand to be effective in enhancing security posture through SAST and DAST scanning. It offers valuable dashboards for vulnerability analysis, though there's a learning curve. Its AI-driven engine significantly reduces bug densities and security incidents.
Architecture Manager at Alinma Bank4.0We used Fortify on Demand for cybersecurity threats, but its limited programming support and lack of dynamic testing led us to transition to SonarQube. SonarQube’s broader language support and pipeline integration improved testing for our core banking application.
Cloud architect at Vodafone4.0We use Fortify on Demand to secure APIs and systems throughout development, testing, and production stages, finding its scanning capabilities crucial. Integration with pipelines like Jenkins could be smoother, but it remains essential for our security infrastructure.
Pre-Sales Manager at Ejada Company Limited4.5I use Fortify On Demand for identifying application vulnerabilities in sales and desk operations. Its seamless integration with DevOps enhances security testing. It's affordable, but I wish it had AI features like other vendors.
Security Tester at Ray Business Technologies Private Limited4.5We utilize Fortify on Demand for static code analysis. Its user-friendly automatic scanning and AI features excel in detecting vulnerabilities and recommending solutions. The integration with CI/CD tools is beneficial, though pricing could be improved.