Fortify Software Security Center vs Synopsys API Security Testing comparison

OpenText and Black Duck are both solutions in the Static Application Security Testing (SAST) category. OpenText is ranked #30 with an average rating of 8.0, while Black Duck is ranked #38. OpenText holds a 0.4% mindshare in SAST, compared to Black Duck’s 0.1% mindshare. Additionally, 100% of OpenText users are willing to recommend the solution, compared to 100% of Black Duck users who would recommend it.

Fortify Software Security C...

Read 6 Fortify Software Security Center reviews

550 Views
490 Comparison Views

100% willing to recommend

Synopsys API Security Testing

Read 1 Synopsys API Security Testing review

367 Views
224 Comparison Views

100% willing to recommend

Fortify Software Security C...

Synopsys API Security Testing

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Fortify Software Security Center and Synopsys API Security Testing based on real PeerSpot user reviews.

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST).

To learn more, read our detailed Static Application Security Testing (SAST) Report (Updated: July 2025).

Buyer's Guide

Static Application Security Testing (SAST)

July 2025

Download the complete report

Helped 862,543 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortify Software Security C...

Ranking in Static Application Security Testing (SAST)

30th

Average Rating

7.8

Reviews Sentiment

8.3

Number of Reviews

Ranking in other categories

No ranking in other categories

Synopsys API Security Testing

Ranking in Static Application Security Testing (SAST)

38th

Average Rating

7.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2025, in the Static Application Security Testing (SAST) category, the mindshare of Fortify Software Security Center is 0.4%, up from 0.2% compared to the previous year. The mindshare of Synopsys API Security Testing is 0.1%, down from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Featured Reviews

Jonathan Steyn

Principal Technical Consultant at EOH

Comprehensive vulnerability analysis and customization features with decent pricing

Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances. WebInspect supports a number of APIs and web endpoints. I find its feature of macro recording allows for testing vulnerabilities during multi-factor authentication sessions very valuable. I appreciate the ability to further analyze data with tools like Audit Workbench.

Read full review

UmarQureshi

Security Lead at a retailer with 10,001+ employees

Useful threat vectors, beneficial results, but implementation needed support

We are using Synopsys API Security Testing for scanning APIs for risks and vulnerabilities and to understand our posture before deployment within our business The most valuable features of Synopsys API Security Testing are the metrics, results, and threat vectors that it shares. I have been…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"You can easily download the tool's rule packs and update them."

"I like the explanation of issues provided by Fortify Software Security Center."

"This is a stable solution at the end of the day."

"The overall rating for this tool is ten out of ten."

"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."

"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."

"The reporting is very useful because you can always view an entire list of the issues that you have."

"The most valuable features of Synopsys API Security Testing are the metrics, results, and threat vectors that it shares."

Cons

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"We are having issues with false positives that need to be resolved."

"I am not satisfied with the percentage of false positives, which is around eighteen percent."

"This solution is difficult to implement, and it should be made more comfortable for the end-users."

"Fortify Software Security Center's setup is really painful."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"The solution required us to use our team and we spoke to Synopsys API Security Testing's support to do the implementation. We use two people from our team for the implementation. and one person for maintenance."

Pricing and Cost Advice

"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."

"The solution is priced fair."

"This is a costly solution that could be cheaper."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

862,543 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

16%

Financial Services Firm

15%

Computer Software Company

11%

Government

Financial Services Firm

23%

Computer Software Company

15%

Manufacturing Company

15%

Insurance Company

11%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Micro Focus Software Security Center?

You can easily download the tool's rule packs and update them.

See all answers

What is your experience regarding pricing and costs for Micro Focus Software Security Center?

In the beginning, it was difficult for me to verify that our usage of Fortify Software Security Center corresponded to the license and criteria. Now, we have negotiated a number of details to respe...

See all answers

What needs improvement with Micro Focus Software Security Center?

I would like the false positive issue to diminish. I have experienced a lot of false positives, but I think this is due to using an older version. I hope the new version will resolve my problem.

See all answers

Ask a question

Earn 20 points

Comparisons

OpenText Core Application Security vs Fortify Software Security Center

Compared 49% of the time

Acunetix vs Fortify Software Security Center

Compared 39% of the time

HCL AppScan vs Fortify Software Security Center

Compared 12% of the time

More Fortify Software Security Center Competitors

Invicti vs Synopsys API Security Testing

Compared 100% of the time

More Synopsys API Security Testing Competitors

Product Reports

Buyer's Guide

Static Application Security Testing (SAST)

July 2025

Download Fortify Software Security Center product report

Buyer's Guide

Static Application Security Testing (SAST)

July 2025

Download Synopsys API Security Testing product report

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect

No data available

Overview

Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.

OpenText

AppSec testing optimized for the needs of API developers
APIs provide open, flexible interfaces that enable applications and services to talk to each other. But these characteristics can also make it difficult to build secure software—and even more difficult for traditional AppSec tools to test it.

Black Duck

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon

Information Not Available

Buyer's Guide

Static Application Security Testing (SAST)

July 2025

Download Free Report

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST). Updated: July 2025.

DOWNLOAD NOW

862,543 professionals have used our research since 2012.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.