Fortify Software Security Center vs Invicti comparison

Fortify Software Security C...

Read 29 Invicti reviews

2,696 Views
1,507 Comparison Views

96% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Fortify Software Security Center and Invicti are prominent tools in the software security domain, each offering unique capabilities. Invicti appears to have the upper hand with its superior features, which users find justify its price.

Features: Fortify Software Security Center features comprehensive vulnerability detection across various programming languages and strong integration capabilities with existing systems. Invicti provides user-friendly automation, accurate vulnerability identification, and faster scanning speeds that enhance reliability in reports. Invicti is modern and efficient, appealing to users who value these attributes.

Room for Improvement: Fortify Software Security Center could improve its scanning speed and reduce false positives. Scalability for large enterprise environments is a necessary development area for Invicti. Fortify users point to a need for refining result precision, while Invicti users suggest enhancements in scaling functionalities.

Ease of Deployment and Customer Service: Fortify Software Security Center receives mixed reviews for its deployment process, finding it complex yet supported by reliable customer service. Invicti offers a straightforward deployment process and efficient customer service that quickly addresses queries, making the overall experience smoother.

Pricing and ROI: Fortify Software Security Center is considered cost-effective, with a reasonable initial setup cost offering satisfactory ROI due to its detailed analysis capabilities. Invicti, while costing more initially, provides significant ROI by reducing manual testing time and enhancing detection accuracy. Users find Invicti offers better value despite its higher pricing.

To learn more, read our detailed Fortify Software Security Center vs. Invicti Report (Updated: April 2025).

Fortify Software Security Center vs. Invicti

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortify Software Security C...

Ranking in Static Application Security Testing (SAST)

26th

Average Rating

7.8

Reviews Sentiment

8.3

Number of Reviews

Ranking in other categories

No ranking in other categories

Invicti

Ranking in Static Application Security Testing (SAST)

15th

Average Rating

8.2

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

API Security (5th), Dynamic Application Security Testing (DAST) (3rd)

Mindshare comparison

As of May 2025, in the Static Application Security Testing (SAST) category, the mindshare of Fortify Software Security Center is 0.4%, up from 0.2% compared to the previous year. The mindshare of Invicti is 1.5%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Featured Reviews

Jonathan Steyn

Principal Technical Consultant at EOH

Comprehensive vulnerability analysis and customization features with decent pricing

Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances. WebInspect supports a number of APIs and web endpoints. I find its feature of macro recording allows for testing vulnerabilities during multi-factor authentication sessions very valuable. I appreciate the ability to further analyze data with tools like Audit Workbench.

Read full review

Kunal M

Capability Center Leader, ETRM Platforms at Shell

Proactive scanning measures and realistic audit recommendations enhance development focus

Invicti's proactive scanning measures vulnerabilities each time we deploy or push code to a new environment. This feature helps us focus on priorities and prioritize the development team's effort, integrating seamlessly with DevOps to facilitate proactive scans of environments. Invicti also provides audit recommendations that are quite realistic, making it easy to discuss plans with developers.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"You can easily download the tool's rule packs and update them."

"I like the explanation of issues provided by Fortify Software Security Center."

"This is a stable solution at the end of the day."

"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."

"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."

"The reporting is very useful because you can always view an entire list of the issues that you have."

"The overall rating for this tool is ten out of ten."

"Attacking feature: Actually, attacking is not a solo feature. It contains many attack engines, Hawk, and many properties. But Netsparker's attacking mechanism is very flexible. This increases the vulnerability detection rate. Also, Netsparker made the Hawk for real-time interactive command-line-based exploit testing. It's very valuable for a vulnerability scanner."

"The platform is stable."

"I would rate the stability as ten out of ten."

"When we try to manually exploit the vulnerabilities, it often takes time to realize what's going on and what needs to be done."

"I like that it's stable and technical support is great."

"I am impressed by the whole technology that they are using in this solution. It is really fast. When using netscan, the confirmation that it gives on the vulnerabilities is pretty cool. It is really easy to configure a scan in Netsparker Web Application Security Scanner. It is also really easy to deploy."

"The dashboard is really cool, and the features are really good. It tells you about the software version you're using in your web application. It gives you the entire technology stack, and that really helps. Both web and desktop apps are good in terms of application scanning. It has a lot of security checks that are easily customizable as per your requirements. It also has good customer support."

"I am impressed with Invictus’ proof-based scanning. The solution has reduced the incidence of false positive vulnerabilities. It has helped us reduce our time and focus on vulnerabilities."

More Invicti pros

Cons

"This solution is difficult to implement, and it should be made more comfortable for the end-users."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"We are having issues with false positives that need to be resolved."

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."

"Fortify Software Security Center's setup is really painful."

"I am not satisfied with the percentage of false positives, which is around eighteen percent."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"The solution needs to make a more specific report."

"I think that it freezes without any specific reason at times. This needs to be looked into."

"Reporting should be improved. The reporting options should be made better for end-users. Currently, it is possible, but it's not the best. Being able to choose what I want to see in my reports rather than being given prefixed information would make my life easier. I had to depend on the API for getting the content that I wanted. If they could fix the reporting feature to make it more comprehensive and user-friendly, it would help a lot of end-users. Everything else was good about this product."

"It would be better for listing and attacking Java-based web applications to exploit vulnerabilities."

"The higher level vulnerabilities like Cross-Site Scripting, SQL Injection, and other higher level injection attacks are difficult to highlight using Netsparker."

"Invicti takes too long with big applications, and there are issues with the login portal."

"They don't really provide the proof of concept up to the level that we need in our organization. We are a consultancy firm, and we provide consultancy for the implementation and deployment solutions to our customers. When you run the scans and the scan is completed, it only shows the proof of exploit, which really doesn't work because the tool is running the scan and exploiting on the read-only form. You don't really know whether it is actually giving the proof of exploit. We cannot prove it manually to a customer that the exploit is genuine. It is really hard to perform it manually and prove it to the concerned development, remediation, and security teams. It is currently missing the static application security part of the application security, especially web application security. It would be really cool if they can integrate a SAS tool with their dynamic one."

"Invicti's reporting capabilities need enhancement."

More Invicti cons

Pricing and Cost Advice

"This is a costly solution that could be cheaper."

"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."

"The solution is priced fair."

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"The price should be 20% lower"

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"We never had any issues with the licensing; the price was within our assigned limits."

"OWASP Zap is free and it has live updates, so that's a big plus."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

"It is competitive in the security market."

More Invicti pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

20%

Financial Services Firm

16%

Computer Software Company

12%

Government

Educational Organization

47%

Financial Services Firm

10%

Computer Software Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Micro Focus Software Security Center?

You can easily download the tool's rule packs and update them.

What is your experience regarding pricing and costs for Micro Focus Software Security Center?

In the beginning, it was difficult for me to verify that our usage of Fortify Software Security Center corresponded to the license and criteria. Now, we have negotiated a number of details to respe...

What needs improvement with Micro Focus Software Security Center?

I would like the false positive issue to diminish. I have experienced a lot of false positives, but I think this is due to using an older version. I hope the new version will resolve my problem.

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?

As a technical user, I do not handle pricing or licensing, but I am aware that Invicti offers flexible licensing models based on organizational needs.

What do you like most about Invicti?

The most valuable feature of Invicti is getting baseline scanning and incremental scan.

What needs improvement with Invicti?

Invicti's reporting capabilities need enhancement. We need enterprise-level information instead of repo-level details. Unlike Appiro, Invicti does not provide portfolio-level insights into vulnerab...

Fortify on Demand vs Fortify Software Security Center

Comparisons

Compared 57% of the time

Acunetix vs Fortify Software Security Center

Compared 43% of the time

More Fortify Software Security Center Competitors

Acunetix vs Invicti

Compared 19% of the time

OWASP Zap vs Invicti

Compared 12% of the time

SonarQube Server (formerly SonarQube) vs Invicti

Compared 6% of the time

Veracode vs Invicti

Compared 6% of the time

Snyk vs Invicti

Compared 6% of the time

More Invicti Competitors

Product Reports

Static Application Security Testing (SAST)

Download Fortify Software Security Center product report

Download Invicti product report

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect

Netsparker

Overview

Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.

OpenText

Invicti helps DevSecOps teams automate security tasks and save hundreds of hours each month by identifying web vulnerabilities that matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss with 99.98% accuracy, delivering on the promise of Zero Noise AppSec. Invicti helps discover all web assets — even ones that are lost, forgotten, or created by rogue departments. With an array of out-of-the-box integrations, DevSecOps teams can get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively while reducing risk and hitting the ROI goals.

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon

Samsung, The Walt Disney Company, T-Systems, ING Bank

Fortify Software Security Center vs. Invicti