Fortify Application Defender vs GitHub comparison

Fortify Application Defender

Read 98 GitHub reviews

5,656 Views
3,563 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 25, 2026

GitHub and Fortify Application Defender are tools for version control and application security respectively. GitHub leads in collaboration with strong integration and community support, whereas Fortify excels in security with advanced remediation capabilities.

Features: GitHub offers features like seamless project collaboration, SSH key support, and extensive integration with other development tools. It is also known for strong security measures and a user-friendly interface. Fortify Application Defender provides advanced machine learning algorithms, real-time remediation, and robust static code analysis intelligence.

Room for Improvement: GitHub can improve CI/CD integration, enhance large file processing speed, and expand project management features. Additional language support and better DevOps tool integration are also needed. Fortify could benefit from supporting more programming languages, reducing false positives, and revising its complex licensing model. Enhanced support for older compilers and IDEs is also necessary.

Ease of Deployment and Customer Service: GitHub operates in the public cloud providing ease of use and deployment with robust community support and accessible technical assistance. In contrast, Fortify Application Defender relies heavily on on-premises deployment, complicating support and community assistance.

Pricing and ROI: GitHub's competitive pricing includes a free tier for public repositories and affordable licensing, resulting in positive ROI through operational cost savings. Fortify Application Defender, however, has a higher, complex pricing structure, which challenges ROI evaluation, though justified by its major security benefits.

To learn more, read our detailed Fortify Application Defender vs. GitHub Report (Updated: April 2026).

Fortify Application Defender vs. GitHub

Download the complete report

Helped 886,719 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortify Application Defender

Ranking in Application Security Tools

25th

Average Rating

7.8

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

No ranking in other categories

GitHub

Ranking in Application Security Tools

4th

Average Rating

8.8

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Version Control (2nd), Agile and DevOps Services (2nd)

Mindshare comparison

As of April 2026, in the Application Security Tools category, the mindshare of Fortify Application Defender is 1.3%, up from 0.6% compared to the previous year. The mindshare of GitHub is 1.6%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools Mindshare Distribution
Product	Mindshare (%)
GitHub	1.6%
Fortify Application Defender	1.3%
Other	97.1%

Application Security Tools

Featured Reviews

VinothSivam

CTO at Abcl

Useful for fast code review in devOps pipelines

I rate the tool's scalability a seven out of ten. However, I'm concerned about how it handles an increasing number of lines of code. As the complexity grows, so does the time it takes for the tool to review everything. I want more clarity on how Fortify Application Defender handles multiple threats. We have numerous endpoints, but the tool runs in our pipeline, meaning it operates in the cloud. All our code is configured there, and the tool runs integration testing, unit testing, user testing, and final production code tests. It's a day-to-day experience. It's utilized almost every day as part of our pipeline runs. Each team responsible for integration testing, human testing, user access testing, and preproduction testing runs it whenever they take a build.

Read full review

Murathan OK

Software Development Manager at a media company with 10,001+ employees

CI/CD workflows have become streamlined and AI support has improved collaborative development

We are using GitHub because it is open-source software, which is the most valuable solution for us. The open source and community support are very good. We are always up-to-date with the community, and integration difficulty is very low. If you integrate any CI/CD solutions on GitHub, it's very easy. We started using GitHub about three months ago with AI integration. For our deployments, some developers can be very shy about asking for descriptions on their commits. We are using AI support for comments and deployment management, which is beautiful. We are not using the GitHub API for automating workflows in our projects. I give GitHub a five-star rating for the review capabilities. I also give GitHub five stars for integration with third-party applications. There is a lot of integration available on GitHub. If you want to integrate something, even if it could be integrated before GitHub, you can make your code and integrate your own in-house applications. It's a very easy and powerful aspect of GitHub.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The information from Fortify Application Defender on how to fix and solve issues is very good compared to other solutions."

"Its ability to find security defects is valuable."

"I find the configuration of rules in Fortify Application Defender useful. Its integration is also easy."

"Fortify Application Defender has a few drawbacks, it has its own pros and cons, but it's a good tool to use in any industry."

"The tool's most valuable feature is software composition analysis. This feature works well with my .NET applications, providing a better understanding of library vulnerabilities."

"The most valuable feature is that it analyzes data in real-time."

"The most valuable feature is the ability to automatically feed it rules what it's coupled with the WebInspect dynamic application scanning technology."

More Fortify Application Defender pros

"I appreciate saving from Visual Studio Code that implements changes directly on GitHub."

"GitHub has improved the productivity of my team by simplifying code merging and enabling effective branching strategies."

"We've found the technical support to be very helpful."

"GitHub is pure or open-source; you can access it anywhere, you can have a lot of collateral information, and you can make the changes and do the reviews from one place."

"The collaboration is really great, it has really worked and has really helped me a lot, and I find that it is a very important feature."

"GitHub Actions, specifically in the DevOps field, have been extremely valuable."

"The most valuable feature is the source code management. It's very helpful and it's a great product."

"The control is the most valuable feature as developers can work on a single code."

More GitHub pros

Cons

"Fortify Application Defender could improve by supporting more code languages, such as GRAAS and Groovy."

"The workbench is a little bit complex when you first start using it."

"The solution could improve the time it takes to scan. When comparing it to SonarQube it does it in minutes while in Fortify Application Defender it can take hours."

"The licensing can be a little complex."

"The biggest complaint that I have heard concerns additional platform support because right now, it only supports applications that are written in .NET and Java."

"The solution is quite expensive."

"I encountered many false positives for Python applications."

"The product should integrate industry-standard code review tools internally with its system. This would streamline the coding process, as developers wouldn't need multiple tools for code review and security checks. Many independent and open-source tools are available, from Apache to various libraries. Using multiple DevOps pipeline tools can slow the turnaround time."

More Fortify Application Defender cons

"The descriptions within Github could be more user-friendly to show the trees of Gitflow."

"The documentation needs to be more concise and easier for developers to understand."

"We would like this solution to have a more user-friendly interface."

"Scalability is an area with a shortcoming, because of which it has room for improvement."

"It would be good if there were training materials for junior developers."

"I faced one or two breakdowns. That said, they lasted only for a few seconds or a minute."

"GitHub storage is one of the main requirements and it could improve."

"I cannot recall coming across any shortcomings of the product."

More GitHub cons

Pricing and Cost Advice

"Fortify Application Defender is very expensive."

"The product’s price is much higher than other tools."

"I rate the solution's pricing a five out of ten. It comes as an annual cloud subscription. The tool's pricing is around 50 lakhs."

"The licensing is very complex, it's project based and can range from $10,000 to $200,000+ depending on the project type and size."

"The base licensing costs for the SaaS platform is about $900 USD per application, per year."

"The price of this solution could be less expensive."

"It is open-source. There is no license for GitHub."

"We have an enterprise licensing agreement, and I am not part of the finance department so I can't say how much it costs."

"I think, in terms of price, GitHub is okay compared to other tools."

"We are currently paying nothing for GitHub."

"I am using the free version of the solution. However, there are some costs my organization pays."

"I use the free version of the tool."

"The licensing model for GitHub is user-based. Whenever the new developer joins we have to get a new license and register their ID. The overall price of the solution is reasonable."

"You don't have to pay for a license if you are using the free version."

More GitHub pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

886,719 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Manufacturing Company

10%

Construction Company

Computer Software Company

Financial Services Firm

14%

Marketing Services Firm

10%

Comms Service Provider

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	1
Large Enterprise	8

By reviewers
Company Size	Count
Small Business	42
Midsize Enterprise	14
Large Enterprise	52

Questions from the Community

What do you like most about Fortify Application Defender?

I find the configuration of rules in Fortify Application Defender useful. Its integration is also easy.

What needs improvement with Fortify Application Defender?

The product should integrate industry-standard code review tools internally with its system. This would streamline the coding process, as developers wouldn't need multiple tools for code review and...

What is your primary use case for Fortify Application Defender?

We use the solution for fast code review. It is integrated into our DevOps pipeline.

What is your experience regarding pricing and costs for GitHub?

I was paying approximately one hundred dollars annually about a year ago. I am uncertain of the current cost, but GitHub without Copilot is free as far as I know. I am not paying anything for my Gi...

What needs improvement with GitHub?

Security could make GitHub better. OWASP Top Ten security advisors could be integrated on GitHub, and it could provide checks and advice. That would be much better. Additionally, LLM integration on...

What is your primary use case for GitHub?

When discussing my use case, I don't know which vendors we are working with in that area, as it's not my area of responsibility right now. About six months ago, I was promoted to Software Developme...

SonarQube vs Fortify Application Defender

Comparisons

Compared 11% of the time

Checkmarx One vs Fortify Application Defender

Compared 10% of the time

Veracode vs Fortify Application Defender

Compared 6% of the time

Klocwork vs Fortify Application Defender

Compared 5% of the time

GitGuardian Platform vs Fortify Application Defender

Compared 4% of the time

More Fortify Application Defender Competitors

Bitbucket vs GitHub

Compared 7% of the time

OpenText Core Application Security vs GitHub

Compared 6% of the time

Aikido Security vs GitHub

Compared 5% of the time

Snyk vs GitHub

Compared 5% of the time

PortSwigger Burp Suite Professional vs GitHub

Compared 5% of the time

More GitHub Competitors

Product Reports

Application Security Tools

Download Fortify Application Defender product report

Download GitHub product report

Also Known As

HPE Fortify Application Defender, Micro Focus Fortify Application Defender

No data available

Overview

Micro Focus Security Fortify Application Defender is a runtime application self-protection (RASP) solution that helps you manage and mitigate risk from homegrown or third-party applications. It provides centralized visibility into application use and abuse while protecting from software vulnerability exploits and other violations in real time.

OpenText

GitHub is a web-based Git repository hosting service. It offers all of the distributed revision control and source code management (SCM) functionality of Git as well as adding its own features. Unlike Git, which is strictly a command-line tool, GitHub provides a Web-based graphical interface and desktop as well as mobile integration. It also provides access control and several collaboration features such as bug tracking, feature requests, task management, and wikis for every project.

Sample Customers

ServiceMaster, Saltworks, SAP

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent

Fortify Application Defender vs. GitHub