Fortify Software Security Center vs GitLab comparison

Fortify Software Security C...

Read 88 GitLab reviews

17,371 Views
2,779 Comparison Views

97% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Fortify Software Security Center and GitLab compete in the software security arena. GitLab is generally preferred due to its feature richness despite Fortify's positive feedback on pricing and support.

Features: Fortify is recognized for robust security analysis, competitive setup costs, and effective deployment processes. GitLab is notable for its CI/CD capabilities, seamless integration, and comprehensive feature set supporting varied workflows.

Room for Improvement: Fortify could expand its integration scope and more frequently update its analysis tools. It could also improve customer service proactivity. GitLab needs to enhance customer support response times, navigation intuitiveness, and address high setup costs concerns.

Ease of Deployment and Customer Service: Fortify deploys effectively with straightforward processes but could benefit from more proactive customer service. GitLab offers flexible deployment with efficient processes, though customer service responsiveness needs improvement.

Pricing and ROI: Fortify has competitive setup costs, but its ROI receives mixed feedback. GitLab, despite higher setup costs, is perceived to offer value proportional to its pricing, with users noting a higher ROI aligned with its extensive feature set.

To learn more, read our detailed Fortify Software Security Center vs. GitLab Report (Updated: December 2025).

Fortify Software Security Center vs. GitLab

December 2025

Download the complete report

Helped 879,259 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortify Software Security C...

Ranking in Static Application Security Testing (SAST)

21st

Average Rating

8.0

Reviews Sentiment

4.6

Number of Reviews

Ranking in other categories

No ranking in other categories

GitLab

Ranking in Static Application Security Testing (SAST)

8th

Average Rating

8.4

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Application Security Tools (12th), Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (10th), Software Composition Analysis (SCA) (5th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (1st)

Mindshare comparison

As of December 2025, in the Static Application Security Testing (SAST) category, the mindshare of Fortify Software Security Center is 0.7%, up from 0.3% compared to the previous year. The mindshare of GitLab is 2.2%, down from 2.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST) Market Share Distribution
Product	Market Share (%)
GitLab	2.2%
Fortify Software Security Center	0.7%
Other	97.1%

Static Application Security Testing (SAST)

Featured Reviews

Diego Caicedo Lescano

Chief Innovation Officer at SAGGA

Enables centralized analysis and improves governance through seamless tool integration

The main use case for Fortify Software Security Center is exceptional because we have governance and control through that console. You can centralize both static analysis and dynamic analysis, and correlate both analyses in one tool to get better results by combining those independent results from each solution. That is outstanding, and there is no tool I have seen on the market that offers these capabilities. I appreciate the interoperability with other solutions from Fortify Software Security Center. Because we are using Kiuwan, you can run Kiuwan analyses and integrate them with Fortify Software Security Center to get those results in a single console. That is a good console for centralizing things in one point. That is one of the best features of the on-premises Fortify.

Read full review

Rohit Kesharwani

Manager, Engineering at 7-Eleven

Improved agility and time to market with CI/CD enhancements

The CI/CD pipelines in GitLab are highly valuable. Another important feature is the single source of repository, allowing efficient repository management and source code management. GitLab provides manageability by allowing us to manage source code effectively through separate repositories. Additionally, GitLab enables the creation of individual CI/CD pipelines for each repository, making software more agile. By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"You can easily download the tool's rule packs and update them."

"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."

"The overall rating for this tool is ten out of ten."

"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."

"The reporting is very useful because you can always view an entire list of the issues that you have."

"The main use case for Fortify Software Security Center is exceptional because we have governance and control through that console."

"It's very important because they want to scan their source code every day, so we provide CICD integration to our customers so they can auto build and auto test every day, get reports, and fix issues."

"This is a stable solution at the end of the day."

More Fortify Software Security Center pros

"The most valuable features of GitLab are the review, patch repo, and plans are in YAML."

"It streamlines our DevOps processes with automated CI/CD pipelines."

"It is a speedy platform compared to the others I have used. I have also enjoyed using the platform as this solution offers a good user experience."

"The merging feature makes it easy later on for the deployment."

"As a developer, this solution is useful as a repository holder because most of the POC projects that we have are on GitLab."

"The solution's service delivery model is fantastic."

"I have found the most valuable feature is security control. I also like the branching and cloning software."

"The most valuable features of GitLab are ease of use and highly intuitive UI and performance."

More GitLab pros

Cons

"Improvements needed for Software Security Center include better aggregation views of datasets."

"This solution is difficult to implement, and it should be made more comfortable for the end-users."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."

"The support for Fortify on-premises is the same as for the other products. I would say the support is not good and I would rate it a three out of ten."

"I am not satisfied with the percentage of false positives, which is around eighteen percent."

"Fortify Software Security Center's setup is really painful."

"We are having issues with false positives that need to be resolved."

"The solution should be more cloud-native and have more cloud-native capabilities and features."

"I would like to see better integration with project management tools such as Jira."

"The documentation is confusing."

"I used Spring Cloud config and to connect that to GitLab was so hard."

"This solution could be improved by adding modifications such as slack notifications."

"I would like to see AI support in GitLab."

"I have encountered issues with the deployment of CI/CD pipelines, especially dealing with variable environments."

"The solution should again offer an on-premises deployment option."

More GitLab cons

Pricing and Cost Advice

"The solution is priced fair."

"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."

"This is a costly solution that could be cheaper."

"I don't mind the price because I use the free version."

"GitLab's pricing is good compared to others on the market."

"GitLab is an open-source solution."

"As I work in a vast enterprise, I'm unsure about the licensing cost for GitLab. It's the management team that takes care of that."

"GitLab is cheap."

"The open-source version is very good and the commercial version is reasonably priced."

"My company uses the free version of GitLab, which is GitLab Community Edition. There is a licensed version also available for GitLab."

"This product is not very expensive but the price can be better."

More GitLab pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

879,259 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

18%

Financial Services Firm

10%

Government

Computer Software Company

Financial Services Firm

14%

Computer Software Company

13%

Government

11%

Manufacturing Company

11%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	1
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	36
Midsize Enterprise	10
Large Enterprise	43

Questions from the Community

What is your experience regarding pricing and costs for Micro Focus Software Security Center?

The pricing for the on-premises Fortify is expensive.

What needs improvement with Micro Focus Software Security Center?

In my opinion, there are no areas that could be improved with Fortify Software Security Center. I would say it is a good product and a mature product. However, the SAST has many improvement areas. ...

What is your primary use case for Micro Focus Software Security Center?

We have installed Fortify Static Code Analysis, SAST, in Ecuador in two customers. The Fortify ScanCentral includes three components: SAST, Fortify Software Security Center, and the WebInspect.

What do you like most about GitLab?

I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.

What is your experience regarding pricing and costs for GitLab?

We are currently using general GitLab, not GitLab Premium.

What needs improvement with GitLab?

GitLab can be improved by being more responsive in the UI and offering better pricing for premium features, which would be useful for small startups. While GitLab's CI/CD is powerful, it is somewha...

Checkmarx One vs Fortify Software Security Center

Comparisons

Compared 16% of the time

OpenText Core Application Security vs Fortify Software Security Center

Compared 14% of the time

Acunetix vs Fortify Software Security Center

Compared 10% of the time

Checkmarx IaC Security / KICS vs Fortify Software Security Center

Compared 9% of the time

Snyk vs Fortify Software Security Center

Compared 7% of the time

More Fortify Software Security Center Competitors

Microsoft Azure DevOps vs GitLab

Compared 46% of the time

GitHub CoPilot vs GitLab

Compared 8% of the time

SonarQube vs GitLab

Compared 4% of the time

TeamCity vs GitLab

Compared 4% of the time

Tekton vs GitLab

Compared 4% of the time

More GitLab Competitors

Product Reports

Static Application Security Testing (SAST)

November 2025

Download Fortify Software Security Center product report

Download GitLab product report

December 2025

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect

Fuzzit

Overview

Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.

OpenText

GitLab offers a secure and user-friendly platform for CI/CD pipeline management, code repository control, and collaboration, enhancing development speed and efficiency. It facilitates automation with extensive customization and tool integration, ideal for DevOps processes.

GitLab supports source code management, version control, and collaborative development. It's frequently used in CI/CD processes to automate builds and deployments while integrating DevOps practices. GitLab allows companies to manage repositories, automate pipelines, conduct code reviews, and maintain development lifecycles. The platform supports infrastructure and configuration management, enabling efficient code collaboration, deployment automation, and comprehensive repository handling. Many organizations commit and deploy developed code using GitLab's capabilities.

What are GitLab's most valuable features?

CI/CD Pipeline Management: Streamlines development through automated testing and deployment.
User-Friendly Interface: Ensures ease of collaboration and task automation.
Code Merging and Branching: Facilitates smooth code integration and version control.
Security Platform: Provides strong security features for safe development.
Tool Integration: Enhances functionality with diverse tool integration.

What benefits should users evaluate?

Development Speed: Accelerates processes through automation.
Collaboration Ease: Simplifies team interactions and workflow.
Customization Options: Offers extensive personalization for specific needs.
Comprehensive Documentation: Provides detailed guidance for users.
Secure Platform: Maintains integrity with robust security features.

In specific industries, GitLab serves as a backbone for source code management and CI/CD implementation. Companies leverage its capabilities for infrastructure management and deployment automation, thus streamlining project delivery timelines. Its ability to handle configuration management and code repositories effectively aids in maintaining development lifecycles, making it a preferred choice for organizations committed to enhancing their DevOps practices.

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon

1. NASA 2. IBM 3. Sony 4. Alibaba 5. CERN 6. Siemens 7. Volkswagen 8. ING 9. Ticketmaster 10. SpaceX 11. Adobe 12. Intuit 13. Autodesk 14. Rakuten 15. Unity Technologies 16. Pandora 17. Electronic Arts 18. Nordstrom 19. Verizon 20. Comcast 21. Philips 22. Deutsche Telekom 23. Orange 24. Fujitsu 25. Ericsson 26. Nokia 27. General Electric 28. Cisco 29. Accenture 30. Deloitte 31. PwC 32. KPMG