No more typing reviews! Try our Samantha, our new voice AI agent.

Cequence Security vs OpenText Core Application Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cequence Security
Ranking in Application Security Tools
23rd
Average Rating
10.0
Reviews Sentiment
5.4
Number of Reviews
1
Ranking in other categories
Bot Management (9th), API Security (5th)
OpenText Core Application S...
Ranking in Application Security Tools
12th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
64
Ranking in other categories
Static Application Security Testing (SAST) (9th)
 

Mindshare comparison

As of May 2026, in the Application Security Tools category, the mindshare of Cequence Security is 0.6%, up from 0.1% compared to the previous year. The mindshare of OpenText Core Application Security is 3.1%, down from 4.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
OpenText Core Application Security3.1%
Cequence Security0.6%
Other96.3%
Application Security Tools
 

Featured Reviews

reviewer2395431 - PeerSpot reviewer
Technology Consultant at a tech services company with 51-200 employees
Detect and mitigate attacks with API protection
Compliance with standards like those in Europe often requires ensuring that APIs adhere to OAuth and other security protocols. Many organizations need to verify that their APIs meet these compliance requirements. We can include information about where an API was first recorded and create a detailed chart. Some competitors already offer this feature. It is simple to integrate. Overall, I rate the solution a ten out of ten.
Himanshu_Tyagi - PeerSpot reviewer
Lead Cybersecurity at TBO
Supports secure development pipelines and improves issue detection but limits internal visibility and needs broader dashboard integration
If you have an internal team and you want your internal team to validate false positives, basically to determine whether it's a valid issue or an invalid issue, then I wouldn't recommend it much. That was the only reason we migrated from Fortify on Demand to another solution. Fortify has another tool which is Fortify WebInspect. On Demand is the outsourcing solution, and WebInspect you can use with your in-house team, which is basically the product developed by the Fortify team. For automated scanning, Fortify helps a lot. Regarding the visibility for the internal team, everyone is moving toward the DevSecOps side, and Fortify team has made good progress that you can integrate into your CICD pipeline. One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together. If you have one tool that works for different solutions, it helps a lot. They are doing good, but they should invest more on the AI side as well because AI security is evolving these days. On the cloud side, they have already made good progress, but I believe they should explore the new area related to AI security as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It uses machine learning algorithms to detect attacks and manage API inventory."
"I use the solution in my company for security code scans."
"Fortify on Demand is a very good service which can be used by any organization when they are building a team because it identifies security vulnerabilities early in the software development life cycle and provides good visibility into issues in cloud-hosted applications."
"If you are looking for commercial tools, Micro Focus Fortify on Demand is one of the best tools."
"OpenText Core Application Security helps maintain compliance standards with a faster remediation cycle, as we know the vulnerabilities, and everybody knows that the developers can perform fixes more quickly."
"The feature that I find the most useful is being able to just see the vulnerabilities online while checking the code and then checking suggestions for fixing them."
"HP Fortify on Demand provides an independent review of third-party applications, allowing organizations to test software before purchasing, and also allowing software vendors to demonstrate the security of their software."
"The source code analyzer is the most effective for identifying security vulnerabilities."
"Micro Focus WebInspect and Fortify code analysis tools are fully integrated with SSC portals and can instantly register to error tracking systems, like TFS and JIRA."
 

Cons

"It is expensive."
"Takes up a lot of resources which can slow things down."
"The Visual Studio plugin seems to hang when a scan is run on big projects."
"Integration to CI/CD pipelines could be improved. The reporting format could be more user friendly so that it is easy to read."
"There are many false positives identified by the solution."
"Integration to CI/CD pipelines could be improved."
"Temenos's (T-24) info basic is a separate programming interface, and such proprietary platforms and programming interfaces were not easily supported by the out-of-the-box versions of Fortify."
"The cybersecurity specialist or AppSec would need a bit of training to engage the user interface and to understand how it functions."
"It's still a little bit too complex for regular developers. It takes a little bit more time than usual. I know static code scan is not the main focus of the tool, but the overall time span to scan the code, and even to set up the code scanning, is a bit overwhelming for regular developers."
 

Pricing and Cost Advice

Information not available
"I believe the rental license is not too expensive, but it provides a lot of information about the vulnerabilities."
"The product's cost depends on the type of license."
"If I exceed one million lines of code, there might be an extra cost or a change in the pricing bracket."
"We used the one-time application, Security Scan Dynamic. I believe the original fee was $8,000."
"The subscription model, on a per-scan basis, is a bit expensive. That's another reason we are not using it for all the apps."
"It is quite expensive. Pricing and the licensing model could be improved."
"It is cost-effective."
"The licensing was good because the licenses have the heavy centralized server."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
893,915 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
22%
Manufacturing Company
10%
Computer Software Company
10%
Educational Organization
6%
Financial Services Firm
14%
Manufacturing Company
13%
Computer Software Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise8
Large Enterprise46
 

Questions from the Community

What is your primary use case for Cequence Security?
We use the solution to detect and mitigate attacks. It helps prevent them while also protecting APIs and effectively managing API inventory.
What advice do you have for others considering Cequence Security?
Compliance with standards like those in Europe often requires ensuring that APIs adhere to OAuth and other security protocols. Many organizations need to verify that their APIs meet these complianc...
What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?
In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...
What needs improvement with Micro Focus Fortify on Demand?
Areas for improvement should be contextualized post the OpenText acquisition, but back when I was working with Micro Focus, they focused heavily on enterprise-centric solutions. Now, after the acqu...
What is your primary use case for Micro Focus Fortify on Demand?
For OpenText Core Application Security, I currently support a couple of my clients who are using Fortify on Demand for their web application, CRM, and sales platform. Many good features of Fortify ...
 

Also Known As

Cequence ASP, Cequence Unified API Protection Platform
Micro Focus Fortify on Demand
 

Overview

 

Sample Customers

T-Mobile, Lbrands, Ulta Beauty
SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: May 2026.
893,915 professionals have used our research since 2012.