Jan 11, 2019
I think the benefit of Fortify on Demand is that it covers all the scan types: DAST, SAST. RASP, and Mobile. The research team that builds the vuln database is solid and well-staffed.
OpenText Core Application Security and SonarQube Server are leading tools in the security testing market. Based on user feedback, SonarQube Server has an edge due to its open-source features and integration capabilities.
Features: OpenText Core Application Security provides precise vulnerability tracking, fast turnarounds, and compliance assistance. SonarQube Server offers extensive static code analysis, customizable dashboards, and integration with development tools.
Room for Improvement: OpenText needs better integration with incident management systems and a reduction in false positives. SonarQube is advised to enhance its security scanning capabilities and streamline its reporting.
Ease of Deployment and Customer Service: OpenText Core offers hybrid deployment flexibility and strong customer service with timely support. SonarQube, while intuitive in setup, can improve its support responsiveness.
Pricing and ROI: OpenText usually operates under a subscription model considered costly but justified by its comprehensive support. SonarQube's open-source model is attractive for budget-conscious organizations, offering cost-effective options with licenses available for expanded features.
| Product | Market Share (%) |
|---|---|
| SonarQube Server (formerly SonarQube) | 19.3% |
| OpenText Core Application Security | 3.7% |
| Other | 77.0% |
| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 8 |
| Large Enterprise | 43 |
| Company Size | Count |
|---|---|
| Small Business | 32 |
| Midsize Enterprise | 21 |
| Large Enterprise | 75 |
OpenText Core Application Security offers robust features like static and dynamic scanning, real-time vulnerability tracking, and seamless integration with development platforms, designed to enhance code security and reduce operational costs.
OpenText Core Application Security is a cloud-based, on-demand service providing accurate and deep scanning capabilities with detailed reporting. Its integrations with development platforms ensure an enhanced security layer in the development lifecycle, benefiting users by lowering operational costs and facilitating efficient remediation. The platform addresses needs for intuitive interfaces, API support, and comprehensive vulnerability assessments, helping improve code security and accelerate time-to-market. Despite its strengths, challenges exist around false positives, report clarity, and language support, alongside confusing pricing and package options. Enhancements are sought in areas like CI/CD pipeline configuration, report visualization, scan times, and integration with third-party tools such as GitLab, container scanning, and software composition analysis.
What features define OpenText Core Application Security?Industries like mobile applications, e-commerce, and banking leverage OpenText Core Application Security for its ability to identify vulnerabilities such as SQL injections. Integrating seamlessly with DevSecOps and security auditing processes, this tool supports developers in writing safer code, ensuring secure application deployment and enhancing software assurance.
SonarQube Server aids in enhancing code quality and security for development teams by providing extensive programming language support, customizable quality gates, and integration with CI/CD pipelines.
Designed for static code analysis, SonarQube Server assists development teams in identifying bugs and vulnerabilities, promoting coding standards, and reducing technical debt. It offers centralized management of code quality metrics through its dashboard while supporting integration with Jenkins for seamless project management. However, challenges in interface design, analysis time, and reporting need addressing. While SonarQube Server offers significant benefits, users call for enhanced plug-in diversity, better documentation, and smoother upgrades.
What are SonarQube Server's most important features?In industries like security organizations and enterprises, SonarQube Server is integrated into CI/CD pipelines to audit code and monitor coding standards. It assists in detecting security issues, ensuring compliance, and automating quality checks, helping businesses maintain high coding standards and improve development workflows.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
