

OpenText Core Application Security and Aikido Security are competing in the enterprise-level application security category. Aikido Security seems to have the upper hand with advanced features despite higher costs, while OpenText is noted for its favorable pricing and support.
Features: OpenText Core Application Security provides comprehensive application scanning, customizable dashboards, and integration capabilities. Aikido Security offers real-time threat intelligence, automated analysis, and a robust API ecosystem.
Ease of Deployment and Customer Service: OpenText's deployment is straightforward, supported by extensive documentation and attentive support. Aikido Security ensures fast deployment with an intuitive setup and proactive customer service.
Pricing and ROI: OpenText Core Application Security is considered more cost-effective with transparent pricing models, offering solid ROI. Aikido Security, although higher in setup cost, delivers substantial ROI with enhanced security capabilities justified by its advanced features.
Aikido Security caught a critical remote code execution vulnerability in my Python machine learning pipelines before it reached production.
Since we got rid of that, our productivity has increased, I believe, by thirty-two percent.
We were expecting to complete the compliance in a month, but I figured out Aikido Security could do it within a week for all our 13 repositories.
There is definitive ROI if OpenText Core Application Security is deployed properly; it substantially reduces efforts in securing the solution while averting various application-related risks.
Aikido Security was the easiest to use, the easiest to onboard, and the one with the most active customer support.
Their team proactively reached out after signup to ensure we were set up correctly.
Most issues were resolved through documentation links, configuration guidance, or clarification around findings.
Support tickets often stay open for one month to three months, which leads to customer frustration.
I had direct interaction with them, which facilitated how we onboarded Fortify.
The technical support from OpenText is very good.
That kind of reliability becomes invisible when it works well, which is exactly what you want from a security tool running in your CI/CD pipelines.
Scalability with Aikido Security has been good, as new teams continue to be added without significant performance issues.
Aikido Security scales well by supporting multiple projects, repositories, and development teams on a single platform.
If a customer wants to know the tools and the technology used for their application to scan their application, they provide less information on that.
OpenText Core Application Security is highly scalable; it is running on the cloud, and elasticity is one of the best points of a cloud environment.
Fortify is superior to many solutions because of its scalability and that it does not require massive compute capabilities for its SAST and sandboxing features.
The platform has been reliable and provides accurate security findings.
Aikido Security has been stable, and there have been no major outages affecting workflow.
OpenText Core Application Security is stable and has minimal downtime, benefitting from AWS cloud availability.
Deeper customization around policies and reporting would be beneficial, since some organizations have specific compliance requirements and the customization can feel limited compared to larger, enterprise-focused platforms.
I would love to see a Terraform module for Aikido Security.
I had a certain object with a UUID that was being considered as a private secret key or API key, which was not the case.
It would be beneficial if Fortify could check for CVEs (Common Vulnerabilities and Exposures) in third-party libraries, which I currently use a separate dependency checker tool for.
One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together.
I would say OpenText Core Application Security is not very user-friendly in terms of price; it is quite high.
I used the free trial, which was sufficient for evaluating the platform and its core features.
We were able to get all codebase vulnerability fixes within a week for all our 13 or 14 repositories that we had.
Security shifted left, meaning issues were caught during development rather than after deployment.
My favorite feature is the dependency vulnerability scanning because it quickly identifies the risk in third-party packages, which saves me time in finding vulnerabilities.
Fortify helps me find serious issues, such as developers inadvertently leaving access tokens, including API access tokens, in the source code.
On demand you have two levels of reports: the first from the tool, which is the same as we can get from Fortify on-premises, and a next level reporting made by experts from OpenText, leading to a more condensed and precise report as level three.
Additionally, you can integrate Fortify in CICD pipeline, so you get real-time updates about the security issues in your pipeline.
| Product | Mindshare (%) |
|---|---|
| OpenText Core Application Security | 3.2% |
| Aikido Security | 1.4% |
| Other | 95.4% |


| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 2 |
| Large Enterprise | 2 |
| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 8 |
| Large Enterprise | 46 |
Aikido Security is the no-nonsense platform that empowers developers by centralizing code-to-cloud security issues and providing rapid guidance for fixing vulnerabilities.
With over 6,000 teams utilizing its features, Aikido Security prioritizes effective security management by consolidating 11 comprehensive scans into one platform. This approach translates complex vulnerabilities into understandable insights, targeting non-enterprise SaaS businesses with engineering teams of 10-500 developers. It focuses on delivering security management without excessive costs or complexity through a product-led growth model.
What are the standout features of Aikido Security?In industries like software development and cloud services, Aikido Security is implemented to provide clear insights, enabling teams to focus on rapid product growth while maintaining robust security. Its product-led growth strategy, including a freemium offering, allows developers to experience benefits firsthand without initial investment.
OpenText Core Application Security offers robust features like static and dynamic scanning, real-time vulnerability tracking, and seamless integration with development platforms, designed to enhance code security and reduce operational costs.
OpenText Core Application Security is a cloud-based, on-demand service providing accurate and deep scanning capabilities with detailed reporting. Its integrations with development platforms ensure an enhanced security layer in the development lifecycle, benefiting users by lowering operational costs and facilitating efficient remediation. The platform addresses needs for intuitive interfaces, API support, and comprehensive vulnerability assessments, helping improve code security and accelerate time-to-market. Despite its strengths, challenges exist around false positives, report clarity, and language support, alongside confusing pricing and package options. Enhancements are sought in areas like CI/CD pipeline configuration, report visualization, scan times, and integration with third-party tools such as GitLab, container scanning, and software composition analysis.
What features define OpenText Core Application Security?Industries like mobile applications, e-commerce, and banking leverage OpenText Core Application Security for its ability to identify vulnerabilities such as SQL injections. Integrating seamlessly with DevSecOps and security auditing processes, this tool supports developers in writing safer code, ensuring secure application deployment and enhancing software assurance.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.