Try our new research platform with insights from 80,000+ expert users

Fortify Software Security Center vs OpenText Dynamic Application Security Testing comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Fortify Software Security C...
Average Rating
7.8
Reviews Sentiment
5.7
Number of Reviews
7
Ranking in other categories
Static Application Security Testing (SAST) (28th)
OpenText Dynamic Applicatio...
Average Rating
7.2
Reviews Sentiment
6.1
Number of Reviews
22
Ranking in other categories
Dynamic Application Security Testing (DAST) (2nd), DevSecOps (8th)
 

Mindshare comparison

While both are Quality Assurance solutions, they serve different purposes. Fortify Software Security Center is designed for Static Application Security Testing (SAST) and holds a mindshare of 0.4%, up 0.3% compared to last year.
OpenText Dynamic Application Security Testing, on the other hand, focuses on Dynamic Application Security Testing (DAST), holds 17.9% mindshare, down 22.0% since last year.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
Fortify Software Security Center0.4%
SonarQube Server (formerly SonarQube)20.3%
Checkmarx One9.9%
Other69.4%
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST) Market Share Distribution
ProductMarket Share (%)
OpenText Dynamic Application Security Testing17.9%
HCL AppScan14.3%
Checkmarx One13.5%
Other54.3%
Dynamic Application Security Testing (DAST)
 

Featured Reviews

Jonathan Steyn - PeerSpot reviewer
Comprehensive vulnerability analysis and customization features with decent pricing
Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances. WebInspect supports a number of APIs and web endpoints. I find its feature of macro recording allows for testing vulnerabilities during multi-factor authentication sessions very valuable. I appreciate the ability to further analyze data with tools like Audit Workbench.
Navin N - PeerSpot reviewer
Effective scanning of diverse file extensions with fast reporting and issue resolution
We develop software packages for clients, and these clients are mostly in the BFSI sector. The packages need to be scanned, and we engage Fortify WebInspect for this.  Customers typically perform their own application pen tests, but in some cases, we have engagements where customers want us to scan…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"You can easily download the tool's rule packs and update them."
"This is a stable solution at the end of the day."
"I like the explanation of issues provided by Fortify Software Security Center."
"The overall rating for this tool is ten out of ten."
"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."
"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."
"The reporting is very useful because you can always view an entire list of the issues that you have."
"Technical support has been good."
"The feature that has been most influential in identifying vulnerabilities is its ability to crawl the website, understand the structure, and analyze the network packets sent and received."
"It's a well-known platform for doing dynamic application scanning."
"The solution is easy to use."
"The most valuable feature is the static analysis."
"Reporting, centralized dashboard, and bird's eye view of all vulnerabilities are the most valuable features."
"Fortify WebInspect is a scalable solution, it is good for a lot of applications."
"It is easy to use, and its reporting is fairly simple."
 

Cons

"We are having issues with false positives that need to be resolved."
"Improvements needed for Software Security Center include better aggregation views of datasets."
"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."
"Fortify Software Security Center's setup is really painful."
"Improvements needed for Software Security Center include better aggregation views of datasets."
"This solution is difficult to implement, and it should be made more comfortable for the end-users."
"I am not satisfied with the percentage of false positives, which is around eighteen percent."
"Fortify WebInspect's shortcoming stems from the fact that it is a very expensive product in Korea, which makes it difficult for its potential customers to introduce the product in their IT environment."
"It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application."
"Creating reports is very slow and it is something that should be improved."
"I'm not sure licensing, but on the pricing, it's a bit costly. It's a bit overpriced. Though it is an enterprise tool, there are other tools also with similar functionalities."
"Our biggest complaint about this product is that it freezes up, and literally doesn't work for us."
"Lately, we've seen more false negatives."
"We have had a problem with authentification."
"The installation could be a bit easier. Usually it's simple to use, but the installation is painful and a bit laborious and complex."
 

Pricing and Cost Advice

"This is a costly solution that could be cheaper."
"The solution is priced fair."
"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."
"This solution is very expensive."
"Fortify WebInspect is a very expensive product."
"It’s a fair price for the solution."
"The pricing is not clear and while it is not high, it is difficult to understand."
"The price is okay."
"Our licensing is such that you can only run one scan at a time, which is inconvenient."
"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
867,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
18%
Financial Services Firm
13%
Computer Software Company
11%
Government
8%
Financial Services Firm
15%
Government
15%
Manufacturing Company
13%
Computer Software Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise3
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise1
Large Enterprise15
 

Questions from the Community

What is your experience regarding pricing and costs for Micro Focus Software Security Center?
In the beginning, it was difficult for me to verify that our usage of Fortify Software Security Center corresponded to the license and criteria. Now, we have negotiated a number of details to respe...
What needs improvement with Micro Focus Software Security Center?
I would like the false positive issue to diminish. I have experienced a lot of false positives, but I think this is due to using an older version. I hope the new version will resolve my problem.
What is your primary use case for Micro Focus Software Security Center?
They use it to scan applications and fix bugs, which are my customers' main use cases for Fortify Software Security Center. As a reseller, I sell this product to provide application security becaus...
What is your experience regarding pricing and costs for Fortify WebInspect?
While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs between $15,000 to $19,000. In comparison, Burp Suite costs approximately $500 to ...
What needs improvement with Fortify WebInspect?
WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produ...
What is your primary use case for Fortify WebInspect?
I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite from PortSwigger. For API testing, I use Postman with Burp Suite or WebInspect fo...
 

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect
Micro Focus WebInspect, WebInspect
 

Overview

 

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon
Aaron's
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST). Updated: August 2025.
867,341 professionals have used our research since 2012.