Fortify Software Security Center vs Invicti comparison

Fortify Software Security C...

Read 31 Invicti reviews

7,864 Views
4,482 Comparison Views

96% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Fortify Software Security Center and Invicti are prominent tools in the software security domain, each offering unique capabilities. Invicti appears to have the upper hand with its superior features, which users find justify its price.

Features: Fortify Software Security Center features comprehensive vulnerability detection across various programming languages and strong integration capabilities with existing systems. Invicti provides user-friendly automation, accurate vulnerability identification, and faster scanning speeds that enhance reliability in reports. Invicti is modern and efficient, appealing to users who value these attributes.

Room for Improvement: Fortify Software Security Center could improve its scanning speed and reduce false positives. Scalability for large enterprise environments is a necessary development area for Invicti. Fortify users point to a need for refining result precision, while Invicti users suggest enhancements in scaling functionalities.

Ease of Deployment and Customer Service: Fortify Software Security Center receives mixed reviews for its deployment process, finding it complex yet supported by reliable customer service. Invicti offers a straightforward deployment process and efficient customer service that quickly addresses queries, making the overall experience smoother.

Pricing and ROI: Fortify Software Security Center is considered cost-effective, with a reasonable initial setup cost offering satisfactory ROI due to its detailed analysis capabilities. Invicti, while costing more initially, provides significant ROI by reducing manual testing time and enhancing detection accuracy. Users find Invicti offers better value despite its higher pricing.

To learn more, read our detailed Fortify Software Security Center vs. Invicti Report (Updated: September 2026).

Fortify Software Security Center vs. Invicti

Download the complete report

Helped 915,287 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortify Software Security C...

Ranking in Static Application Security Testing (SAST)

18th

Average Rating

8.0

Reviews Sentiment

4.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Invicti

Ranking in Static Application Security Testing (SAST)

16th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Container Security (32nd), Software Composition Analysis (SCA) (14th), API Security (12th), Dynamic Application Security Testing (DAST) (6th), Application Security Posture Management (ASPM) (12th)

Mindshare comparison

As of October 2026, in the Static Application Security Testing (SAST) category, the mindshare of Fortify Software Security Center is 1.5%, up from 0.5% compared to the previous year. The mindshare of Invicti is 2.0%, up from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST) Mindshare Distribution
Product	Mindshare (%)
Invicti	2.0%
Fortify Software Security Center	1.5%
Other	96.5%

Static Application Security Testing (SAST)

Featured Reviews

Diego Caicedo Lescano

Chief Innovation Officer at SAGGA

Enables centralized analysis and improves governance through seamless tool integration

The main use case for Fortify Software Security Center is exceptional because we have governance and control through that console. You can centralize both static analysis and dynamic analysis, and correlate both analyses in one tool to get better results by combining those independent results from each solution. That is outstanding, and there is no tool I have seen on the market that offers these capabilities. I appreciate the interoperability with other solutions from Fortify Software Security Center. Because we are using Kiuwan, you can run Kiuwan analyses and integrate them with Fortify Software Security Center to get those results in a single console. That is a good console for centralizing things in one point. That is one of the best features of the on-premises Fortify.

Read full review

PrashantUppuluri

Solution Architect at a tech services company with 51-200 employees

Automated scanning has strengthened web application security and supports hybrid protection

A good scanning engine is what I appreciate about Invicti. When you want to find out the vulnerabilities within your web applications, Invicti has done a thorough job with respect to filtering out the vulnerabilities and identifying the risk factors with respect to the security modules within the solution. Invicti does have a segment of the solution which works on the automated scanning engine. As long as the license is active, the scanners that work within the solution are pretty effective. With respect to SAST and DAST, being a real-time scanning engine is one of the portfolios and one of the selling factors of the solution. Invicti is known to be a solution that works within the hybrid environment, be it cloud, on-premises, or a mix and match across multiple marketplaces. It does a thorough job. Most importantly, Invicti is a very good SAST and DAST solution that is very competitive in the market with respect to competitors. Invicti is a part of the Magic Quadrant with respect to Gartner's Magic Quadrant and has made a very good customer database and pipeline within the marketplace locally. With respect to security impacts in terms of support, Invicti is pretty much supportive. With respect to use cases or the POCs I have run on the solution, we have identified a couple of vulnerabilities and Invicti was able to trace them, detect, and quarantine the attacks.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The overall rating for this tool is ten out of ten."

"The main use case for Fortify Software Security Center is exceptional because we have governance and control through that console."

"You can easily download the tool's rule packs and update them."

"I like the explanation of issues provided by Fortify Software Security Center."

"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."

"This is a stable solution at the end of the day."

"It's very important because they want to scan their source code every day, so we provide CICD integration to our customers so they can auto build and auto test every day, get reports, and fix issues."

"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."

More Fortify Software Security Center pros

"Scan, proxify the application, and then detailed report along with evidence and remediations to problems."

"The platform is stable."

"It has a comprehensive resulting mechanism. It is a one-stop solution for all your security testing mechanisms."

"I am impressed by the whole technology that they are using in this solution. It is really fast. When using netscan, the confirmation that it gives on the vulnerabilities is pretty cool. It is really easy to configure a scan in Netsparker Web Application Security Scanner. It is also really easy to deploy."

"Its ability to crawl a web application is quite different than another similar scanner, and sometimes it can find more vulnerabilities that another scanner can’t."

"I would tell potential users that it's really one of the best products in the market for web application security or Dynamic Application Security Testing (DAST)."

"High level of accuracy and quick scanning."

"Netsparker has done an awesome job with its crawler, as it has found all of the links (also thanks to its good DOM parser)."

More Invicti pros

Cons

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."

"We are having issues with false positives that need to be resolved."

"Fortify Software Security Center's setup is really painful."

"The support for Fortify on-premises is the same as for the other products. I would say the support is not good and I would rate it a three out of ten."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"I am not satisfied with the percentage of false positives, which is around eighteen percent."

"This solution is difficult to implement, and it should be made more comfortable for the end-users."

"The initial setup of this solution is very complex. Specifically, the integration between other parts of the solution is difficult."

"When scanning a large web-based application, it tends to process slow and takes a long time especially on crawling and attacking part."

"Invicti's reporting capabilities need enhancement. We need enterprise-level information instead of repo-level details. Unlike Appiro, Invicti does not provide portfolio-level insights into vulnerability remediation over time."

"Invicti takes too long with big applications, and there are issues with the login portal."

"I think that it freezes without any specific reason at times. This needs to be looked into."

"Perhaps the custom attack preparation screen might be improved."

"The higher level vulnerabilities like Cross-Site Scripting, SQL Injection, and other higher level injection attacks are difficult to highlight using Netsparker."

"I find that the scannings are not sufficiently updated."

"Invicti's reporting capabilities need enhancement."

More Invicti cons

Pricing and Cost Advice

"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."

"The solution is priced fair."

"This is a costly solution that could be cheaper."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."

"OWASP Zap is free and it has live updates, so that's a big plus."

"It is competitive in the security market."

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"The price should be 20% lower"

More Invicti pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

915,287 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

13%

Financial Services Firm

Comms Service Provider

Outsourcing Company

Financial Services Firm

13%

Manufacturing Company

10%

Construction Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	1
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	4
Large Enterprise	13

Questions from the Community

What is your experience regarding pricing and costs for Micro Focus Software Security Center?

The pricing for the on-premises Fortify is expensive.

What needs improvement with Micro Focus Software Security Center?

In my opinion, there are no areas that could be improved with Fortify Software Security Center. I would say it is a good product and a mature product. However, the SAST has many improvement areas. ...

What is your primary use case for Micro Focus Software Security Center?

We have installed Fortify Static Code Analysis, SAST, in Ecuador in two customers. The Fortify ScanCentral includes three components: SAST, Fortify Software Security Center, and the WebInspect.

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?

The setup cost is pretty competitive. For example, if you want to talk about the SAST license, it comes to about $150 or sometimes less than $100, depending on the conversion or the number of licen...

What needs improvement with Invicti?

At this time, there is nothing that comes to mind. However, most of the products in the market are pretty much neck-to-neck competitors. Speaking about it, there are a couple of factors which they ...

What is your primary use case for Invicti?

I have worked on a couple of products, specifically in web application security. I have worked on Invicti, and with respect to PAM, I have worked with BeyondTrust. I have not worked specifically fo...

Checkmarx One vs Fortify Software Security Center

Comparisons

Compared 19% of the time

Checkmarx IaC Security / KICS vs Fortify Software Security Center

Compared 11% of the time

SonarQube vs Fortify Software Security Center

Compared 7% of the time

OpenText Core Application Security vs Fortify Software Security Center

Compared 7% of the time

Coverity Static vs Fortify Software Security Center

Compared 7% of the time

More Fortify Software Security Center Competitors

Veracode vs Invicti

Compared 8% of the time

Acunetix vs Invicti

Compared 6% of the time

OpenText Dynamic Application Security Testing vs Invicti

Compared 5% of the time

Checkmarx One vs Invicti

Compared 4% of the time

Snyk vs Invicti

Compared 4% of the time

More Invicti Competitors

Product Reports

Static Application Security Testing (SAST)

Download Fortify Software Security Center product report

Download Invicti product report

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect

Netsparker

Overview

Fortify Software Security Center offers comprehensive application security through a centralized console that integrates static and dynamic analysis, making it essential for organizations focused on robust security operations.

Fortify Software Security Center delivers extensive capabilities that facilitate application security testing, code audits, and bug fixes. Its centralized console enhances governance and control, while its interoperability with tools like Kiuwan and Azure strengthens its functionality. The dashboard's intuitive data customization, along with the ability to store and report data on-premises, further complements its integration capabilities. Although improvements in dataset aggregation, integration with tools like Jira, and resolution of false positives are required, its ability to scan and analyze source code to identify security violations is acknowledged.

What are the key features of Fortify Software Security Center?

Centralized Console: Streamlines governance and control through combined static and dynamic analysis.
Interoperability: Enhances functionality with tools like Kiuwan for comprehensive testing.
Customizability: Tailors vulnerability testing to standards such as OWASP Top Ten.
Macro Recording: Facilitates multi-factor authentication processes.
CI/CD Integration: Ensures seamless integration with development workflows.
Collaboration Module: Supports teamwork with clarification on issues.
Daily Scanning: Elevates code quality through regular evaluations.

Why should users consider Fortify Software Security Center for ROI?

Code Quality Enhancement: Improves coding practices through continuous deployment and daily scanning.
Seamless Deployment: Enhances implementation success and mitigates security threats effectively.
Customization Flexibility: Offers tailored solutions for overlapping features despite increased costs.
Collaboration Efficiency: Boosts teamwork through detailed issue explanations and analysis.

Fortify Software Security Center is adopted in software-driven industries for its robust application security capabilities. Users in technology sectors rely on its static code analysis for auditing and security testing. Its on-premises deployment model and integration with platforms like Azure make it ideal for storing and reporting data, providing customization that aligns with industry standards.

OpenText

Invicti offers advanced web application security testing focused on identifying vulnerabilities like SQL injection and cross-site scripting. Its Proof-Based Scanning minimizes false positives and integrates seamlessly with CI/CD pipelines, making it an effective tool for enterprise environments.

Invicti provides comprehensive scanning capabilities that include detecting and verifying critical vulnerabilities and security data consolidation. Its scalable scanning engine and robust API support allow for flexible testing across diverse environments, including web and API testing. Despite some drawbacks like limited single sign-on integration and slow scanning speeds for large applications, Invicti remains a popular choice for automating security assessments, ensuring compliance with standards like OWASP Top 10, PCI DSS, and GDPR.

What are the key features of Invicti?

Comprehensive Vulnerability Scanning: Detects vulnerabilities like SQL injection and XSS.
Proof-Based Scanning: Confirms exploitability and reduces false positives.
CI/CD Integration: Seamlessly integrates with development pipelines.
Security Data Consolidation: Centralizes data for better insights.
User-Friendly Interface: Facilitates easy analysis and reporting.
Scalable Scanning Engine: Supports testing in enterprise environments.
Robust API Support: Enhances flexibility in testing.

What benefits and ROI should users look for in reviews?

Proactive Security: Actively identifies and verifies vulnerabilities to prevent breaches.
Regulatory Compliance: Helps maintain compliance with standards like PCI DSS and GDPR.
Efficient Vulnerability Management: Aids in prioritizing remediation efforts.
Integration Capabilities: Streamlines processes with CI/CD pipeline compatibility.

In industries like finance, healthcare, and e-commerce, Invicti is implemented to bolster security through automated vulnerability assessments. Its ability to provide insightful reports and remediation suggestions assists companies in efficiently managing security risks and achieving compliance with critical regulatory standards.

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon

Samsung, The Walt Disney Company, T-Systems, ING Bank

Fortify Software Security Center vs. Invicti