Fortify Software Security Center vs PortSwigger Burp Suite Professional comparison

OpenText and PortSwigger are both solutions in the Static Application Security Testing (SAST) category. OpenText is ranked #28 with an average rating of 8.0, while PortSwigger is ranked #6 with an average rating of 8.8. OpenText holds a 0.4% mindshare in SAST, compared to PortSwigger’s 2.0% mindshare. Additionally, 100% of OpenText users are willing to recommend the solution, compared to 98% of PortSwigger users who would recommend it.

Fortify Software Security C...

Read 7 Fortify Software Security Center reviews

576 Views
513 Comparison Views

100% willing to recommend

PortSwigger Burp Suite Prof...

Read 64 PortSwigger Burp Suite Professional reviews

4,607 Views
2,948 Comparison Views

98% willing to recommend

Fortify Software Security C...

PortSwigger Burp Suite Prof...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Fortify Software Security Center and PortSwigger Burp Suite Professional compete in the realm of software security solutions. PortSwigger Burp Suite Professional appears to have the upper hand due to its flexibility and innovative features, whereas Fortify is superior in comprehensive security management capabilities.

Features: Fortify Software Security Center includes static and dynamic analysis, extensive reporting, and integration capabilities for enterprise environments. PortSwigger Burp Suite Professional features interactive web vulnerability scanning, advanced attack simulation tools, and integration with CI/CD pipelines.

Room for Improvement: Fortify Software Security Center could improve by simplifying its deployment process, reducing setup time, and offering more user-friendly interfaces. It may also benefit from expanding community-driven support resources. PortSwigger Burp Suite Professional could enhance by broadening its application security scope, improving detailed reporting features, and increasing enterprise-level integration options.

Ease of Deployment and Customer Service: Fortify Software Security Center requires substantial infrastructure, potentially impacting deployment speed, and offers comprehensive enterprise-focused support. PortSwigger Burp Suite Professional provides faster implementation with easier deployment, supported by a knowledgeable community forum and direct critical issue support.

Pricing and ROI: Fortify Software Security Center has a higher setup cost aimed at long-term ROI through enhanced security posture. PortSwigger Burp Suite Professional offers a more attractive initial pricing structure, providing quicker ROI with efficient web testing capabilities.

To learn more, read our detailed Fortify Software Security Center vs. PortSwigger Burp Suite Professional Report (Updated: July 2025).

Buyer's Guide

Fortify Software Security Center vs. PortSwigger Burp Suite Professional

July 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortify Software Security C...

Ranking in Static Application Security Testing (SAST)

28th

Average Rating

7.8

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

PortSwigger Burp Suite Prof...

Ranking in Static Application Security Testing (SAST)

6th

Average Rating

8.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Application Security Tools (10th), Fuzz Testing Tools (1st)

Mindshare comparison

As of August 2025, in the Static Application Security Testing (SAST) category, the mindshare of Fortify Software Security Center is 0.4%, up from 0.3% compared to the previous year. The mindshare of PortSwigger Burp Suite Professional is 2.0%, up from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Featured Reviews

Jonathan Steyn

Principal Technical Consultant at EOH

Comprehensive vulnerability analysis and customization features with decent pricing

Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances. WebInspect supports a number of APIs and web endpoints. I find its feature of macro recording allows for testing vulnerabilities during multi-factor authentication sessions very valuable. I appreciate the ability to further analyze data with tools like Audit Workbench.

Read full review

Anuradha.Kapoor Kapoor

Head - Quality Control at Net Solutions

Offers efficient scanning of entire websites but presence of false positive bugs, leading to time-consuming efforts in distinguishing real bugs from false alarms

We have found that so many times, false positive bugs are there, and then we spend a lot of time basically separating them from real bugs. So that's the reason we are looking for some other tool. So we were in discussion with Acunetix. Therefore, the false positive rate is, like, something that we would like to improve. What we are looking for is if this false positive rate goes down because we were OWASP Zap tool users, which was free anyway. But there were a lot of false positives there, and we used to spend a lot of time, like, for security reasons, reproducing those bugs for the development team to fix it. So then we thought, okay, why not we go with the tool? Even if it is not very expensive. But still, every year, we have to renew the license. And we got this tool. Again, we found that in this tool also, even if it is less, there are still a lot of false positive bugs out there. So we again have to spend so much time. So we hired a security tester, who was basically using Acunetix in his previous company for almost three years, and then you said that in that scanning is very slow. The scanning is also slow. Like, sometimes the site scan takes eight hours, six to eight hours. Yeah. And whereas in Acunetix, it took three to four hours. And plus, there are no false positives. I'm not saying none but there's very little. But here, the rate sometimes is very high. These are the two features I think we would like to improve further.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."

"The reporting is very useful because you can always view an entire list of the issues that you have."

"I like the explanation of issues provided by Fortify Software Security Center."

"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."

"The overall rating for this tool is ten out of ten."

"You can easily download the tool's rule packs and update them."

"This is a stable solution at the end of the day."

"The most valuable feature of Burp Suite Professional is its ability to schedule tasks for scanning websites, which helps in performing regular checks of IP addresses."

"We are mostly using it for scanning the entire website. So, we basically create a script with the entire website and then run it for different injections."

"It helps in API testing, where manual intervention was previously necessary for each payload."

"The solution has a limited range of functions, which is good for small companies. This is because, in small companies, websites are less complex. They also have single services which makes the solution good enough for them. However, the most advantageous aspect of the solution is its affordable price."

"PortSwigger Burp Suite Professional is one of the best user-friendly solutions for getting the proxy set up."

"The Repeater and the BApp extensions are particularly useful. Certain extensions, such as the Active Scan extensions and the Autoracer extension, are very good."

"The solution helped us discover vulnerabilities in our applications."

"The most valuable feature is Burp Collaborator."

More PortSwigger Burp Suite Professional pros

Cons

"Improvements needed for Software Security Center include better aggregation views of datasets."

"This solution is difficult to implement, and it should be made more comfortable for the end-users."

"Fortify Software Security Center's setup is really painful."

"I am not satisfied with the percentage of false positives, which is around eighteen percent."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."

"We are having issues with false positives that need to be resolved."

"A lot of our interns find it difficult to get used to PortSwigger Burp's environment."

"The price could be better. The rest is fine."

"The biggest drawback is reporting. It's not so good. I can download them, but they're not so informative."

"There could be an improvement in the API security testing. There is another tool called Postman and if we had a built-in portal similar to Postman which captures the API, we would be able to generate the API traffic. Right now we need a Postman tool and the Burp Suite for performing API tests. It would be a huge benefit to be able to do it in a single UI."

"As with most automated security tools, too many false positives."

"You can have many false positives in Burp Suite. It depends on the scale of the penetration testing."

"One area for improvement is the integrated browser, Chromium. Single Sign-On (SSO) methods like Microsoft authentication login sometimes fail and show errors. As a workaround, I have to use a different browser, such as Firefox, to log in and make Burp work."

"Mitigating the issues and low confluence issues needs some improvement. Implementing demand with the ChatGPT under the web solution is an additional feature I would like to see in the next release."

More PortSwigger Burp Suite Professional cons

Pricing and Cost Advice

"This is a costly solution that could be cheaper."

"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."

"The solution is priced fair."

"We have one license. The price is very nominal."

"At $400 or $500 per license paid annually, it is a very cheap tool."

"This solution requires a license. It is expensive but you receive a lot of functionality for the price."

"There are different licenses available that include a free version."

"PortSwigger Burp Suite Professional is an expensive solution."

"PortSwigger is reasonably-priced. It's fair."

"For a country such as Sri Lanka, the pricing is not reasonable."

"The price for the solution is expensive and could be cheaper. We pay an annual license and our team has several of them."

More PortSwigger Burp Suite Professional pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

16%

Financial Services Firm

14%

Computer Software Company

10%

Government

Computer Software Company

13%

Financial Services Firm

11%

Government

11%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Micro Focus Software Security Center?

In the beginning, it was difficult for me to verify that our usage of Fortify Software Security Center corresponded to the license and criteria. Now, we have negotiated a number of details to respe...

See all answers

What needs improvement with Micro Focus Software Security Center?

I would like the false positive issue to diminish. I have experienced a lot of false positives, but I think this is due to using an older version. I hope the new version will resolve my problem.

See all answers

What is your primary use case for Micro Focus Software Security Center?

They use it to scan applications and fix bugs, which are my customers' main use cases for Fortify Software Security Center. As a reseller, I sell this product to provide application security becaus...

See all answers

Is OWASP Zap better than PortSwigger Burp Suite Pro?

OWASP Zap and PortSwigger Burp Suite Pro have many similar features. OWASP Zap has web application scanning available with basic security vulnerabilities while Burp Suite Pro has it available with ...

See all answers

What do you like most about PortSwigger Burp Suite Professional?

The solution helped us discover vulnerabilities in our applications.

See all answers

What is your experience regarding pricing and costs for PortSwigger Burp Suite Professional?

The cost of PortSwigger Burp Suite Professional is reasonable at approximately $500 per year per user.

See all answers

Comparisons

OpenText Core Application Security vs Fortify Software Security Center

Compared 49% of the time

Acunetix vs Fortify Software Security Center

Compared 38% of the time

HCL AppScan vs Fortify Software Security Center

Compared 13% of the time

More Fortify Software Security Center Competitors

Acunetix vs PortSwigger Burp Suite Professional

Compared 16% of the time

OpenText Dynamic Application Security Testing vs PortSwigger Burp Suite Professional

Compared 13% of the time

OWASP Zap vs PortSwigger Burp Suite Professional

Compared 9% of the time

SonarQube Server (formerly SonarQube) vs PortSwigger Burp Suite Professional

Compared 7% of the time

HCL AppScan vs PortSwigger Burp Suite Professional

Compared 6% of the time

More PortSwigger Burp Suite Professional Competitors

Product Reports

Buyer's Guide

Static Application Security Testing (SAST)

August 2025

Download Fortify Software Security Center product report

Buyer's Guide

PortSwigger Burp Suite Professional

August 2025

PortSwigger Burp Suite Professional report

Download PortSwigger Burp Suite Professional product report

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect

Burp

Overview

Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.

OpenText

Burp Suite Professional, by PortSwigger, is the world’s leading toolkit for web security testing. Over 52,000 users worldwide, across all industries and organization sizes, trust Burp Suite Professional to find more vulnerabilities, faster. With expertly-engineered manual and automated tooling, you're able to test smarter - not harder.

PortSwigger is the web security company that is enabling the world to secure the web. Over 50,000 security engineers rely on our software and expertise to secure their world.

PortSwigger

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon

Google, Amazon, NASA, FedEx, P&G, Salesforce

Buyer's Guide

Fortify Software Security Center vs. PortSwigger Burp Suite Professional

July 2025

Free Report: Fortify Software Security Center vs. PortSwigger Burp Suite Professional

Find out what your peers are saying about Fortify Software Security Center vs. PortSwigger Burp Suite Professional and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,384 professionals have used our research since 2012.

See our Fortify Software Security Center vs. PortSwigger Burp Suite Professional report.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.