Fortify Software Security Center vs Rapid7 AppSpider comparison

OpenText and Rapid7 are both solutions in the Static Application Security Testing (SAST) category. OpenText is ranked #28 with an average rating of 8.0, while Rapid7 is ranked #32. OpenText holds a 0.4% mindshare in SAST, compared to Rapid7’s 0.5% mindshare. Additionally, 100% of OpenText users are willing to recommend the solution, compared to 100% of Rapid7 users who would recommend it.

Fortify Software Security C...

Read 7 Fortify Software Security Center reviews

576 Views
513 Comparison Views

100% willing to recommend

Rapid7 AppSpider

Read 14 Rapid7 AppSpider reviews

1,439 Views
763 Comparison Views

100% willing to recommend

Fortify Software Security C...

Rapid7 AppSpider

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

```html

Fortify Software Security Center and Rapid7 AppSpider compete in the security solutions category, focusing on effectiveness and user satisfaction. Fortify is preferred for its pricing and support, while Rapid7 stands out with comprehensive features.

Features: Fortify Software Security Center offers robust static code analysis, advanced vulnerability management, and detailed reporting tools. Rapid7 AppSpider provides dynamic application security testing, simulation of real-world attacks, and broad coverage across various programming languages and platforms.

Room for Improvement: Fortify needs better integration capabilities, improved automation, and more intuitive user interfaces. Rapid7 AppSpider requires more intuitive configurations, faster scan speeds, and enhanced usability for less technical users.

Ease of Deployment and Customer Service: Fortify users report a steep learning curve but benefit from strong support navigating deployment challenges. Rapid7 AppSpider is known for simpler deployment processes and responsive customer service, although some users express a need for additional guidance.

Pricing and ROI: Fortify users value competitive pricing but desire more transparency in ROI documentation. Rapid7 AppSpider is perceived as offering good value for its price, with effective security solutions that justify the investment.

```

To learn more, read our detailed Fortify Software Security Center vs. Rapid7 AppSpider Report (Updated: July 2025).

Buyer's Guide

Fortify Software Security Center vs. Rapid7 AppSpider

July 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortify Software Security C...

Ranking in Static Application Security Testing (SAST)

28th

Average Rating

7.8

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Rapid7 AppSpider

Ranking in Static Application Security Testing (SAST)

32nd

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of August 2025, in the Static Application Security Testing (SAST) category, the mindshare of Fortify Software Security Center is 0.4%, up from 0.3% compared to the previous year. The mindshare of Rapid7 AppSpider is 0.5%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Featured Reviews

Jonathan Steyn

Principal Technical Consultant at EOH

Comprehensive vulnerability analysis and customization features with decent pricing

Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances. WebInspect supports a number of APIs and web endpoints. I find its feature of macro recording allows for testing vulnerabilities during multi-factor authentication sessions very valuable. I appreciate the ability to further analyze data with tools like Audit Workbench.

Read full review

Rizwan-Alam

Head Information Security at Akhtar Fuiou Technologies

Easy automated web app scanning, but gives many false positives and isn't always stable

One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions. This is the main aspect that I hope to see Rapid7 improve on. Beyond reducing false positives, I would also like to see them implement better reporting features, particularly in the executive summary type of reports which need to be user-friendly and easily understood by non-technical people. The recommendations and solutions on these reports could always be improved to make them more relevant, too. Lastly, the stability isn't that great, and sometimes it becomes non-responsive. I feel like the stability of the application is very average and currently needs more work.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The reporting is very useful because you can always view an entire list of the issues that you have."

"I like the explanation of issues provided by Fortify Software Security Center."

"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."

"You can easily download the tool's rule packs and update them."

"This is a stable solution at the end of the day."

"The overall rating for this tool is ten out of ten."

"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."

"What I like most about AppSpider is that it's easy to use and its automated scan gives me all the details I need to know when it comes to vulnerabilities and their solutions."

"When it is set up properly, it can do scanning on web apps with multiple engines automatically."

"The solution is highly stable, rated at ten out of ten."

"Rapid7 AppSpider is good at managing different applications. It uses applets and generates reports to cover the PCA/GDPR compliance requirements."

"The initial deployment is very straightforward and simple. The product is stable if configured properly."

"The setup is usually straightforward."

"The entire solution is interactive and has a point-and-click user experience, which makes it easy to find items or drill down on information. You don't need specialized skills to use the product."

"It is really accurate and the rate of false positives is very low."

More Rapid7 AppSpider pros

Cons

"Improvements needed for Software Security Center include better aggregation views of datasets."

"This solution is difficult to implement, and it should be made more comfortable for the end-users."

"I am not satisfied with the percentage of false positives, which is around eighteen percent."

"Fortify Software Security Center's setup is really painful."

"We are having issues with false positives that need to be resolved."

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"There are some glitches with stability, and it is an area for improvement."

"The product should offer a GUI in Japanese and provide Japanese reports for end-users."

"The performance of the solution could improve. When I compare the speed it is slower than others on the market. There are some tricks we use to help speed up the solution."

"Integration could be better."

"AppSpider has some problems with the RAM needed while scanning."

"This price of this solution is a little bit expensive."

"For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users."

"The solution is too slow. It could take a full day to scan. Competitors are much faster."

More Rapid7 AppSpider cons

Pricing and Cost Advice

"This is a costly solution that could be cheaper."

"The solution is priced fair."

"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."

"The licensing cost depends on the number of users."

"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."

"The price is pretty fair."

"AppSpider is closed-source software and you need to acquire a license in order to use it."

"It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once."

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

16%

Financial Services Firm

14%

Computer Software Company

10%

Government

Financial Services Firm

14%

Computer Software Company

11%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Micro Focus Software Security Center?

In the beginning, it was difficult for me to verify that our usage of Fortify Software Security Center corresponded to the license and criteria. Now, we have negotiated a number of details to respe...

See all answers

What needs improvement with Micro Focus Software Security Center?

I would like the false positive issue to diminish. I have experienced a lot of false positives, but I think this is due to using an older version. I hope the new version will resolve my problem.

See all answers

What is your primary use case for Micro Focus Software Security Center?

They use it to scan applications and fix bugs, which are my customers' main use cases for Fortify Software Security Center. As a reseller, I sell this product to provide application security becaus...

See all answers

What is your experience regarding pricing and costs for Rapid7 AppSpider?

The price is not high, but for Japanese customers, localization may incur additional costs.

See all answers

What needs improvement with Rapid7 AppSpider?

For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users.

See all answers

What is your primary use case for Rapid7 AppSpider?

Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who require security assessments.

See all answers

Comparisons

OpenText Core Application Security vs Fortify Software Security Center

Compared 49% of the time

Acunetix vs Fortify Software Security Center

Compared 38% of the time

HCL AppScan vs Fortify Software Security Center

Compared 13% of the time

More Fortify Software Security Center Competitors

Rapid7 InsightAppSec vs Rapid7 AppSpider

Compared 37% of the time

SonarQube Server (formerly SonarQube) vs Rapid7 AppSpider

Compared 11% of the time

Acunetix vs Rapid7 AppSpider

Compared 10% of the time

PortSwigger Burp Suite Professional vs Rapid7 AppSpider

Compared 7% of the time

OWASP Zap vs Rapid7 AppSpider

Compared 7% of the time

More Rapid7 AppSpider Competitors

Product Reports

Buyer's Guide

Static Application Security Testing (SAST)

August 2025

Download Fortify Software Security Center product report

Buyer's Guide

Rapid7 AppSpider

August 2025

Download Rapid7 AppSpider product report

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect

AppSpider

Overview

Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.

OpenText

SPAs, APIs, mobile—the evolution of application technology is measured in months, not years. Is your web application security testing tool designed to keep up? AppSpider lets you collect all the information needed to test all the apps so that you aren’t left with gaping application risks.

Our dynamic application security testing (DAST) solution crawls to the deepest, darkest corners of even the most modern and complex apps to effectively test for risk and get you the insight you need to remediate faster. With AppSpider on your side (or, rather, all of your sides), you’ll be able to scan all the apps today and always be ready for whatever comes next.

Rapid7

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon

Microsoft

Buyer's Guide

Fortify Software Security Center vs. Rapid7 AppSpider

July 2025

Free Report: Fortify Software Security Center vs. Rapid7 AppSpider

Find out what your peers are saying about Fortify Software Security Center vs. Rapid7 AppSpider and other solutions. Updated: July 2025.

DOWNLOAD NOW

865,384 professionals have used our research since 2012.

See our Fortify Software Security Center vs. Rapid7 AppSpider report.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.