No more typing reviews! Try our Samantha, our new voice AI agent.

Aikido Security vs OpenText Core Application Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.4
Aikido Security enhances efficiency, reduces costs, simplifies compliance, and increases productivity by automating and consolidating security tasks.
Sentiment score
3.7
OpenText Core Application Security automates scans, enhances security, reduces costs, and is essential for minimizing risks and data leaks.
Aikido Security caught a critical remote code execution vulnerability in my Python machine learning pipelines before it reached production.
Product Manager at Zidio development
Since we got rid of that, our productivity has increased, I believe, by thirty-two percent.
SecOps Engineer at IriusRisk
We were expecting to complete the compliance in a month, but I figured out Aikido Security could do it within a week for all our 13 repositories.
Co-Founder & CTO at Mango Giraffe
There is definitive ROI if OpenText Core Application Security is deployed properly; it substantially reduces efforts in securing the solution while averting various application-related risks.
Co-Founder at Insecsys Technologies Private Limited
 

Customer Service

Sentiment score
7.4
Aikido Security's customer service is efficient, responsive, and provides technical, proactive support with highly valued resources for quick issue resolution.
Sentiment score
7.0
Customer service is praised for responsiveness, but technical support experiences vary, with both effective assistance and unresolved issues.
Aikido Security was the easiest to use, the easiest to onboard, and the one with the most active customer support.
SecOps Engineer at IriusRisk
Their team proactively reached out after signup to ensure we were set up correctly.
Product Manager at Zidio development
Most issues were resolved through documentation links, configuration guidance, or clarification around findings.
Software Developer at Bisag-N
Support tickets often stay open for one month to three months, which leads to customer frustration.
Chief Innovation Officer at SAGGA
I had direct interaction with them, which facilitated how we onboarded Fortify.
Lead Cybersecurity at TBO
The technical support from OpenText is very good.
Co-Founder at Insecsys Technologies Private Limited
 

Scalability Issues

Sentiment score
7.9
Aikido Security scales efficiently with multiple projects and teams, though organizational challenges and minor performance lags may occur.
Sentiment score
7.2
OpenText Core Application Security scales effectively in the cloud but faces pricing and scan-related challenges across industries.
That kind of reliability becomes invisible when it works well, which is exactly what you want from a security tool running in your CI/CD pipelines.
Product Manager at Zidio development
Scalability with Aikido Security has been good, as new teams continue to be added without significant performance issues.
Software Developer at Bisag-N
Aikido Security scales well by supporting multiple projects, repositories, and development teams on a single platform.
Full Stack Developer at Sri Krishna Arts and Science
If a customer wants to know the tools and the technology used for their application to scan their application, they provide less information on that.
Lead Cybersecurity at TBO
OpenText Core Application Security is highly scalable; it is running on the cloud, and elasticity is one of the best points of a cloud environment.
Cloud Security Manager at T-Systems International GmbH
Fortify is superior to many solutions because of its scalability and that it does not require massive compute capabilities for its SAST and sandboxing features.
Co-Founder at Insecsys Technologies Private Limited
 

Stability Issues

Sentiment score
8.8
Aikido Security is consistently reliable with no major disruptions, displaying dependable performance and precise security findings despite occasional delays.
Sentiment score
8.7
OpenText Core Application Security is reliable with minor resource concerns, consistent updates, and occasional JavaScript-related performance issues.
The platform has been reliable and provides accurate security findings.
Full Stack Developer at Sri Krishna Arts and Science
Aikido Security has been stable, and there have been no major outages affecting workflow.
Software Developer at Bisag-N
OpenText Core Application Security is stable and has minimal downtime, benefitting from AWS cloud availability.
Co-Founder at Insecsys Technologies Private Limited
 

Room For Improvement

Users want improved Jira integration, customization, niche language support, faster scans, better documentation, alerts, and affordable pricing.
OpenText Core Application Security faces efficiency, integration, and usability challenges, prompting calls for improvements in AI, interfaces, and pricing.
Deeper customization around policies and reporting would be beneficial, since some organizations have specific compliance requirements and the customization can feel limited compared to larger, enterprise-focused platforms.
Software Developer at Bisag-N
I would love to see a Terraform module for Aikido Security.
SecOps Engineer at IriusRisk
I had a certain object with a UUID that was being considered as a private secret key or API key, which was not the case.
Co-Founder & CTO at Mango Giraffe
It would be beneficial if Fortify could check for CVEs (Common Vulnerabilities and Exposures) in third-party libraries, which I currently use a separate dependency checker tool for.
Lead Developer at a legal firm with 1,001-5,000 employees
One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together.
Lead Cybersecurity at TBO
I would say OpenText Core Application Security is not very user-friendly in terms of price; it is quite high.
Co-Founder at Insecsys Technologies Private Limited
 

Setup Cost

OpenText Core Application Security is considered costly, but features and integration often justify the price for users.
I used the free trial, which was sufficient for evaluating the platform and its core features.
Full Stack Developer at Sri Krishna Arts and Science
 

Valuable Features

Aikido Security offers an intuitive interface, seamless integrations, and effective tools to enhance productivity and streamline security workflows.
OpenText Core Application Security is valued for vulnerability detection, DevOps integration, comprehensive scanning, customization, and enterprise scalability.
We were able to get all codebase vulnerability fixes within a week for all our 13 or 14 repositories that we had.
Co-Founder & CTO at Mango Giraffe
Security shifted left, meaning issues were caught during development rather than after deployment.
Product Manager at Zidio development
My favorite feature is the dependency vulnerability scanning because it quickly identifies the risk in third-party packages, which saves me time in finding vulnerabilities.
Full Stack Developer at Sri Krishna Arts and Science
Fortify helps me find serious issues, such as developers inadvertently leaving access tokens, including API access tokens, in the source code.
Lead Developer at a legal firm with 1,001-5,000 employees
On demand you have two levels of reports: the first from the tool, which is the same as we can get from Fortify on-premises, and a next level reporting made by experts from OpenText, leading to a more condensed and precise report as level three.
Chief Innovation Officer at SAGGA
Additionally, you can integrate Fortify in CICD pipeline, so you get real-time updates about the security issues in your pipeline.
Lead Cybersecurity at TBO
 

Categories and Ranking

Aikido Security
Ranking in Application Security Tools
20th
Ranking in Static Application Security Testing (SAST)
15th
Average Rating
8.6
Reviews Sentiment
7.7
Number of Reviews
6
Ranking in other categories
Web Application Firewall (WAF) (27th), Container Security (30th), Software Composition Analysis (SCA) (12th), Static Code Analysis (9th), Cloud Security Posture Management (CSPM) (23rd), Dynamic Application Security Testing (DAST) (9th), DevSecOps (9th), Application Security Posture Management (ASPM) (11th)
OpenText Core Application S...
Ranking in Application Security Tools
12th
Ranking in Static Application Security Testing (SAST)
9th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
64
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2026, in the Application Security Tools category, the mindshare of Aikido Security is 1.4%, up from 0.4% compared to the previous year. The mindshare of OpenText Core Application Security is 3.2%, down from 4.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
OpenText Core Application Security3.2%
Aikido Security1.4%
Other95.4%
Application Security Tools
 

Featured Reviews

B Goswami - PeerSpot reviewer
Product Manager at Zidio development
Security has shifted left and now catches vulnerabilities early in our development workflow
There are a few areas for improvement. The first is scan speed. For large repositories, initial scans can be slow. Incremental scanning helps, but full scans still take considerable time. The second thing is the false positive rate. While Auto-Triage is good, it is not perfect. Occasionally, genuine issues get filtered out and real false positives slip through. The third one is remediation guidance. Aikido Security tells you what is vulnerable, but sometimes the fix suggestions are generic. More specific, actionable remediation steps would save developer time. The fourth one is IDE integrations. It currently works best in CI/CD pipelines. A proper VS Code or JetBrains plugin for real-time scanning while coding would be a significant improvement. From a customer point of view, the following things could change. The first thing is documentation for custom rules. Aikido Security allows you to create custom scanning rules, but the documentation for this feature is surprisingly thin. I spent considerable time in community forums and with trial and error just to configure basic custom rules. Step-by-step guides with real-world examples would make this feature much more accessible. The second thing is better Slack and communication integrations. Currently, security alerts come through email and dashboard notifications, but our team lives in Slack. A more configurable Slack integration that sends contextual alerts directly to the relevant developer, not just a generic channel notification, would dramatically improve response time. The third one is historical trend reporting. While Aikido Security shows current vulnerability status well, generating historical reports showing security posture improvement over time is limited. For presenting security progress to management or stakeholders, better exportable trend reports would be very valuable.
Himanshu_Tyagi - PeerSpot reviewer
Lead Cybersecurity at TBO
Supports secure development pipelines and improves issue detection but limits internal visibility and needs broader dashboard integration
If you have an internal team and you want your internal team to validate false positives, basically to determine whether it's a valid issue or an invalid issue, then I wouldn't recommend it much. That was the only reason we migrated from Fortify on Demand to another solution. Fortify has another tool which is Fortify WebInspect. On Demand is the outsourcing solution, and WebInspect you can use with your in-house team, which is basically the product developed by the Fortify team. For automated scanning, Fortify helps a lot. Regarding the visibility for the internal team, everyone is moving toward the DevSecOps side, and Fortify team has made good progress that you can integrate into your CICD pipeline. One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together. If you have one tool that works for different solutions, it helps a lot. They are doing good, but they should invest more on the AI side as well because AI security is evolving these days. On the cloud side, they have already made good progress, but I believe they should explore the new area related to AI security as well.
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
12%
Manufacturing Company
11%
Financial Services Firm
10%
Computer Software Company
8%
Financial Services Firm
15%
Manufacturing Company
12%
Government
7%
Construction Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise8
Large Enterprise46
 

Questions from the Community

What needs improvement with Aikido Security?
I think Aikido Security could be improved by addressing its Jira integration, which I feel needs a bit of work. For my preferences, it is a bit too rigid. They recently added the capability of havi...
What is your primary use case for Aikido Security?
My main use case for Aikido Security is to utilize it as part of our vulnerability management program, where we also scan our images, codes, and manage our SBOM. A specific example of how I use Aik...
What advice do you have for others considering Aikido Security?
Since switching to Aikido Security, I have noticed a positive impact on my team's productivity with measurable results, as we now have measurements. Before, we did not even know how many vulnerabil...
What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?
In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...
What needs improvement with Micro Focus Fortify on Demand?
Areas for improvement should be contextualized post the OpenText acquisition, but back when I was working with Micro Focus, they focused heavily on enterprise-centric solutions. Now, after the acqu...
What is your primary use case for Micro Focus Fortify on Demand?
For OpenText Core Application Security, I currently support a couple of my clients who are using Fortify on Demand for their web application, CRM, and sales platform. Many good features of Fortify ...
 

Also Known As

No data available
Micro Focus Fortify on Demand
 

Overview

 

Sample Customers

FinTech GoCardless ZIP CertifID HealthTech Dental Intelligence PE & Group Techstars Cronos Group Security Tech Human Security Tines HR Tech Simployer Recruitee Agency November Five Other Lighthouse (Hospitality Tech) Smokeball (LegalTech) Runna (B2C Tech) GEA Group (Manufacturing) Community fibre (Telecom) n8n (Software Development)
SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: June 2026.
900,747 professionals have used our research since 2012.