OpenText Core Application Security vs Snyk comparison

OpenText Core Application S...

Read 49 Snyk reviews

19,965 Views
8,585 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 9, 2025

OpenText Core Application Security and Snyk compete in the application security domain, focusing on securing diverse application environments. While OpenText leads in comprehensive scanning capabilities and integration with CI/CD pipelines, Snyk stands out for its rapid integration with developer workflows and its focus on open-source vulnerabilities and container security.

Features: OpenText Core Application Security offers extensive scanning capabilities including SAST and DAST, and supports multiple languages and application types. It integrates with CI/CD pipelines and provides various scanning types with access to vulnerability reports. Snyk excels in integrating with developer workflows, focusing on open-source and container security. It provides detailed insights and actionable recommendations, supported by a comprehensive vulnerability database.

Room for Improvement: OpenText Core Application Security can improve by reducing scan times and false positives, and enhancing integration with newer technologies and additional languages. Users desire better reporting customization and faster incident management integration. Snyk needs enhancements in static analysis capabilities, supporting more programming languages, improving notification controls, and streamlining integration for developers. Both require improvements in false positive rates.

Ease of Deployment and Customer Service: OpenText Core Application Security supports on-premises, cloud, and hybrid deployments, offering flexibility for various IT environments. Customer service reviews are mixed, with some users experiencing support delays. Snyk focuses on cloud deployments suitable for DevOps environments, recognized for comprehensive documentation and responsive customer service, although it needs improvements in self-service educational resources and integration guidance.

Pricing and ROI: OpenText Core Application Security is perceived as expensive but considered a justified investment by many due to its robust security features, offering flexible licensing models. Snyk, though seen as costly, is effective, particularly for developers, offering value especially in open-source vulnerability management and container security, making it a preferred choice for cloud-focused organizations. Both are viewed as enhancing security posture and reducing vulnerabilities for long-term ROI.

To learn more, read our detailed OpenText Core Application Security vs. Snyk Report (Updated: September 2025).

OpenText Core Application Security vs. Snyk

September 2025

Download the complete report

Helped 872,778 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

OpenText Core Application S...

Ranking in Application Security Tools

14th

Ranking in Static Application Security Testing (SAST)

13th

Average Rating

8.0

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Snyk

Ranking in Application Security Tools

6th

Ranking in Static Application Security Testing (SAST)

8th

Average Rating

8.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (18th), GRC (5th), Cloud Management (14th), Vulnerability Management (14th), Container Security (6th), Software Composition Analysis (SCA) (1st), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (15th), DevSecOps (2nd), Application Security Posture Management (ASPM) (2nd)

Mindshare comparison

As of October 2025, in the Application Security Tools category, the mindshare of OpenText Core Application Security is 3.9%, down from 5.1% compared to the previous year. The mindshare of Snyk is 6.5%, down from 8.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools Market Share Distribution
Product	Market Share (%)
Snyk	6.5%
OpenText Core Application Security	3.9%
Other	89.6%

Application Security Tools

Featured Reviews

Jonathan Steyn

Principal Technical Consultant at EOH

Source code analyzer, FPR file generation, reduction of false positives and generates compliance reports, for in-depth analysis

Not challenges with the product itself. The product is very reliable. It does have a steep learning curve. But, again, one thing that Fortify or OpenText does very well is training. There are a lot of free resources and training in the community forums, free training as well as commercial training where users can train on how to use the back-end systems and the scanning engines and how to use command-line arguments because some of the procedures or some of the tools do require a bit of a learning curve. That's the only challenge I've really seen for customers because you have to learn how to use the tool effectively. But Fortify has, in fact, improved its user interface and the way users engage the dashboards and the interfaces. It is intuitive. It's easy to understand. But in some regards, the cybersecurity specialist or AppSec would need a bit of training to engage the user interface and to understand how it functions. But from the point of the reliability index and how powerful the tool is, there's no challenge there. But it's just from a learning perspective; users might need a bit more skill to use the tool. The user interface isn't that tedious. It's not that difficult to understand. When I initially learned how to use the interfaces, I was able to master it within a week and was able to use it quite effectively. So training is required. All skills are needed to learn how to use the tool. I would like to see more enhancements in the dashboards. Dashboards are available. They do need some configuration and settings. But I would like to see more business intelligence capabilities within the tool. It's not particularly a cybersecurity function, but, for instance, business impact analysis or other features where you can actually use business intelligence capabilities within your security tool. That would be remarkable because not only do you have a cybersecurity tool, but you also have a tool that can give you business impact analysis and some other measurements. A bit more intelligence in terms of that from a cybersecurity perspective would be remarkable.

Read full review

meetharoon

CEO at a computer software company with 10,001+ employees

Affordable tool boosts code scanning efficiency but faces integration hurdles

I lead a code security practice for our organization. We integrated Snyk into our GitHub, using CLI to automatically scan codebases and identify issues. We are a large organization with three independent entities, consolidating Snyk across all entities. We also provide access through numerous…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of Micro Focus Fortify on Demand is the information it can provide. There is quite a lot of information. It can pinpoint right down to where the problem is, allowing you to know where to fix it. Overall the features are easy to use, you don't have to be a coder. You can be a manager, or in IT operations, et cetera, anyone can use it. It is quite a well-rounded functional solution."

"Provides good depth of scanning and we get good results."

"We identified a lot of security vulnerability much earlier in the development and could fix this well before the product was rolled out to a huge number of clients."

"The solution is user-friendly."

"Once we have our project created with our application pipeline connected to the test scanning, it only takes two minutes. The report explaining what needs to be modified related to security and vulnerabilities in our code is very helpful. We are able to do static and dynamic code scanning."

"The features that I have found most valuable include its security scan, the vulnerability finds, and the web interface to search and review the issues."

"The vulnerability detection and scanning are awesome features."

"Fortify is effective in identifying such oversights, making it a really helpful tool despite its problems."

More OpenText Core Application Security pros

"It has improved our vulnerability rating and reduced our vulnerabilities through the tool during the time that we've had it. It's definitely made us more aware, as we have removed scoping for existing vulnerabilities and platforms since we rolled it out up until now."

"The code scans on the source code itself were valuable."

"It is one of the best product out there to help developers find and fix vulnerabilities quickly. When we talk about the third-party software vulnerability piece and potentially security issues, it takes the load off the user or developer. They even provide automitigation strategies and an auto-fix feature, which seem to have been adopted pretty well."

"It has an accurate database of vulnerabilities with a low amount of false positives."

"From the software composition analysis perspective, it first makes sure that we understand what is happening from a third-party perspective for the particular product that we use. This is very difficult when you are building software and incorporating dependencies from other libraries, because those dependencies have dependencies and that chain of dependencies can go pretty deep. There could be a vulnerability in something that is seven layers deep, and it would be very difficult to understand that is even affecting us. Therefore, Snyk provides fantastic visibility to know, "Yes, we have a problem. Here is where it ultimately comes from." It may not be with what we're incorporating, but something much deeper than that."

"The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities."

"We have integrated it into our software development environment. We have it in a couple different spots. Developers can use it at the point when they are developing. They can test it on their local machine. If the setup that they have is producing alerts or if they need to upgrade or patch, then at the testing phase when a product is being built for automated testing integrates with Snyk at that point and also produces some checks."

"We use Snyk to check vulnerabilities and rectify potential leaks in GitHub."

More Snyk pros

Cons

"The technical support is actually a problem that needs to be addressed. Since the acquisition and merger with Hewlett Packard, it has been really hard to know who the technical or salesperson to talk to."

"We want a user-based control and role-based access for developers. We want to give limited access to developers so that it only pertains to the code that they write and scanning of the codes for any vulnerabilities as they're progressing with writing the code. As of now, the interface to give restricted access to the developers is not the best. It gives them more access than what is basically required, but we don't want over-provisioning and over-access."

"The biggest deficiency is the integration with bug tracker systems. It might be better if the configuration screen presented for accessing the bug tracking systems could provide some flexibility."

"They have very good support, but there is always room for improvement."

"Sometimes when we run a full scan, we have a bunch of issues in the code. We should not have any issues."

"There were some regulated compliances, which were not there."

"Micro Focus Fortify on Demand could improve the reports. They could benefit from being more user-friendly and intuitive."

"If you have a continuous integration in place, for example, and you want it to run along with your build and you want it to be fast, you're not going to get it. It adds to your development time."

More OpenText Core Application Security cons

"We've also had technical issues with blocking newly introduced vulnerabilities in PRs and that was creating a lot of extra work for developers in trying to close and reopen the PR to get rid of some areas. We ended up having to disable that feature altogether because it wasn't really working for us and it was actually slowing down developer velocity."

"The tool should provide more flexibility and guidance to help us fix the top vulnerabilities before we go into production."

"It would be ideal if there was customization with a focus on specific cybersecurity areas or capabilities."

"The feature for automatic fixing of security breaches could be improved."

"Snyk should improve the scanning capabilities for other languages. For example, Veracode is strong with different languages such as Java, C#, and others."

"Scalability has some issues because we have a lot of code and its use is mandatory. Therefore, it can be slow at times, especially because there are a lot of projects and reporting. Some UI improvements could help with this."

"We had some issues integrating into our pipeline, however, they were resolved."

"Snyk's API and UI features could work better in terms of speed."

More Snyk cons

Pricing and Cost Advice

"Buying a license would be feasible for regular use. For intermittent use, the cloud-based option can be used (Fortify on Demand)."

"The subscription model, on a per-scan basis, is a bit expensive. That's another reason we are not using it for all the apps."

"Despite being on the higher end in terms of cost, the biggest value lies in its abilities, including robust features, seamless integration, and high-quality findings."

"The pricing can be improved because it is complex when compared to the competition."

"We make an annual purchase of the licenses we need."

"The product's cost depends on the type of license."

"There are different costs for Micro Focus Fortify on Demand depending on the assessments you want to use. There is only a standard license needed to use the solution."

"Micro Focus Fortify on Demand licenses are managed by our IT team and the license model is user-based."

More OpenText Core Application Security pricing and cost advice

"Snyk is a premium-priced product, so it's kind of expensive. The big con that I find frustrating is when a company charges extra for single sign-on (SSO) into their SaaS app. Snyk is one of the few that I'm willing to pay that add-on charge, but generally I disqualify products that charge an extra fee to do integrated authentication to our identity provider, like Okta or some other SSO. That is a big negative. We had to pay extra for that. That little annoyance aside, it is expensive. You get a lot out of it, but you're paying for that premium."

"We are using the open-source version for the scans."

"The license model is based on the number of contributing developers. Snyk is expensive, for a startup company will most likely use the community edition, while larger companies will buy the licensed version. The price of Snyk is more than other SLA tools."

"The product's price is okay."

"For what Snyk offers, it has the best cost-benefit I have ever seen because you're buying the license per user."

"It's good value. That's the primary thing. It's not cheap-cheap, but it's good value."

"The pricing is acceptable, especially for enterprises. I don't think it's too much of a concern for our customers. Something like $99 per user is reasonable when the stakes are high."

"The price is good. Snyk had a good price compared to the competition, who had higher pricing than them. Also, their licensing and billing are clear."

More Snyk pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

872,778 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Manufacturing Company

15%

Computer Software Company

10%

Government

Financial Services Firm

15%

Computer Software Company

12%

Manufacturing Company

10%

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	8
Large Enterprise	43

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	9
Large Enterprise	21

Questions from the Community

What do you like most about Micro Focus Fortify on Demand?

It helps deploy and track changes easily as per time-to-time market upgrades.

What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?

In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...

What needs improvement with Micro Focus Fortify on Demand?

There are frequent complaints about false positives from Fortify. One day it may pass a scan with no issues, and the next day, without any code changes, it will report vulnerabilities such as passw...

How does Snyk compare with SonarQube?

Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...

What do you like most about Snyk?

The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.

What needs improvement with Snyk?

There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...

SonarQube Server (formerly SonarQube) vs OpenText Core Application Security

Comparisons

Compared 15% of the time

Checkmarx One vs OpenText Core Application Security

Compared 13% of the time

Veracode vs OpenText Core Application Security

Compared 9% of the time

Coverity Static vs OpenText Core Application Security

Compared 9% of the time

DerScanner vs OpenText Core Application Security

Compared 3% of the time

More OpenText Core Application Security Competitors

SonarQube Server (formerly SonarQube) vs Snyk

Compared 8% of the time

GitHub Advanced Security vs Snyk

Compared 8% of the time

Trivy vs Snyk

Compared 8% of the time

SonarQube Cloud (formerly SonarCloud) vs Snyk

Compared 7% of the time

Wiz vs Snyk

Compared 5% of the time

More Snyk Competitors

Product Reports

OpenText Core Application Security

October 2025

OpenText Core Application Security report

Download OpenText Core Application Security product report

Download Snyk product report

October 2025

Also Known As

Micro Focus Fortify on Demand

Fugue, Snyk AppRisk

Overview

OpenText Core Application Security offers robust features like static and dynamic scanning, real-time vulnerability tracking, and seamless integration with development platforms, designed to enhance code security and reduce operational costs.

OpenText Core Application Security is a cloud-based, on-demand service providing accurate and deep scanning capabilities with detailed reporting. Its integrations with development platforms ensure an enhanced security layer in the development lifecycle, benefiting users by lowering operational costs and facilitating efficient remediation. The platform addresses needs for intuitive interfaces, API support, and comprehensive vulnerability assessments, helping improve code security and accelerate time-to-market. Despite its strengths, challenges exist around false positives, report clarity, and language support, alongside confusing pricing and package options. Enhancements are sought in areas like CI/CD pipeline configuration, report visualization, scan times, and integration with third-party tools such as GitLab, container scanning, and software composition analysis.

What features define OpenText Core Application Security?

Static and Dynamic Scanning: Offers thorough analysis to identify vulnerabilities during development.
Real-time Vulnerability Tracking: Continuously updates and monitors potential security threats.
Seamless Development Platform Integration: Enhances security processes without disrupting workflows.
Cloud-Based Service: Provides flexible, on-demand security capabilities with accurate results.
API Support: Allows smooth integration and automation within existing systems.

What benefits should users look for in reviews?

Reduced Operational Costs: Optimizes resources by lowering costs associated with security management.
Efficient Remediation: Speeds up the process of identifying and resolving vulnerabilities.
Enhanced Code Security: Strengthens overall application security during the development lifecycle.
Accelerated Time-to-Market: Streamlines development stages by integrating essential security tools.

Industries like mobile applications, e-commerce, and banking leverage OpenText Core Application Security for its ability to identify vulnerabilities such as SQL injections. Integrating seamlessly with DevSecOps and security auditing processes, this tool supports developers in writing safer code, ensuring secure application deployment and enhancing software assurance.

OpenText

Snyk excels in integrating security within the development lifecycle, providing teams with an AI Trust Platform that combines speed with security efficiency, ensuring robust AI application development.

Snyk empowers developers with AI-ready engines offering broad coverage, accuracy, and speed essential for modern development. With AI-powered visibility and security, Snyk allows proactive threat prevention and swift threat remediation. The platform supports shifts toward LLM engineering and AI code analysis, enhancing security and development productivity. Snyk collaborates with GenAI coding assistants for improved productivity and AI application threat management. Platform extensibility supports evolving standards with API access and native integrations, ensuring comprehensive and seamless security embedding in development tools.

What are Snyk's standout features?

Simplicity and Integration: Easy to integrate across platforms like GitLab, GitHub, and Jira.
Comprehensive Vulnerability Database: Offers accurate reporting for effective vulnerability management.
Developer-Friendly Design: Supports multiple programming languages, appealing to developers.
Automation and Flexibility: Enhances workflow efficiency with automated capabilities.

What benefits can users expect?

Efficiency in Vulnerability Detection: Streamlines prioritization and remediation processes.
Cost-Effectiveness: Offers a competitive pricing model compared to alternatives.
Enhanced Workflow: Integration with DevOps tools improves development processes.

Industries leverage Snyk for security in CI/CD pipelines by automating checks for dependency vulnerabilities and managing open-source licenses. Its Docker and Kubernetes scanning capabilities enhance container security, supporting a proactive security approach. Integrations with platforms like GitHub and Azure DevOps optimize implementation across diverse software environments.

Sample Customers

SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.

StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief