Try our new research platform with insights from 80,000+ expert users

GitLab vs OpenText Dynamic Application Security Testing comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 19, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitLab
Ranking in DevSecOps
1st
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
86
Ranking in other categories
Application Security Tools (11th), Build Automation (1st), Release Automation (2nd), Static Application Security Testing (SAST) (7th), Rapid Application Development Software (11th), Software Composition Analysis (SCA) (5th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd)
OpenText Dynamic Applicatio...
Ranking in DevSecOps
8th
Average Rating
7.2
Reviews Sentiment
6.1
Number of Reviews
22
Ranking in other categories
Dynamic Application Security Testing (DAST) (2nd)
 

Mindshare comparison

As of September 2025, in the DevSecOps category, the mindshare of GitLab is 11.7%, up from 10.8% compared to the previous year. The mindshare of OpenText Dynamic Application Security Testing is 6.0%, down from 10.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
DevSecOps Market Share Distribution
ProductMarket Share (%)
GitLab11.7%
OpenText Dynamic Application Security Testing6.0%
Other82.3%
DevSecOps
 

Featured Reviews

Rohit Kesharwani - PeerSpot reviewer
Improved agility and time to market with CI/CD enhancements
The CI/CD pipelines in GitLab are highly valuable. Another important feature is the single source of repository, allowing efficient repository management and source code management. GitLab provides manageability by allowing us to manage source code effectively through separate repositories. Additionally, GitLab enables the creation of individual CI/CD pipelines for each repository, making software more agile. By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.
Navin N - PeerSpot reviewer
Effective scanning of diverse file extensions with fast reporting and issue resolution
We develop software packages for clients, and these clients are mostly in the BFSI sector. The packages need to be scanned, and we engage Fortify WebInspect for this.  Customers typically perform their own application pen tests, but in some cases, we have engagements where customers want us to scan…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is very useful for reviews. We are using branch merging operations and full reset operations. It is also very useful for merging our code and tracking another branch. The graph diagrams of Git are very useful. Its interface is straightforward and not too complex for us."
"The most valuable feature of GitLab is the automatic merging of code."
"The solution's service delivery model is fantastic."
"I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently."
"The solution is stable."
"We like that we can create branches and then the branches can be reviewed and you can mesh those branches back. You can independently work with your own branch, you don't need to really control the core of other people."
"GitLab's best features are continuous integration and fast deployment."
"Key features allow creation of well-presented Wiki that includes ideas, development, and domains."
"The accuracy of its scans is great."
"Good at scanning and finding vulnerabilities."
"It is easy to use, and its reporting is fairly simple."
"The most valuable feature of this solution is the ability to make our customers more secure."
"The solution is easy to use."
"The transaction recorder within WebInspect is easy to use, which is valuable for our team."
"Guided Scan option allows us to easily scan and share reports."
"I've found the centralized dashboard the most valuable. For the management, it helps a lot to have abilities at the central level."
 

Cons

"I'm new to GitLab, so I would appreciate more documentation about the code and commands."
"We are having a few problems integrating with Jira at the moment, which is something that our IT department is investigating."
"While GitLab is a great tool for developers, it lacks project planner features. Roadmaps and Gantt charts in GitLab are not as advanced as in Jira, and changing start and end dates is more laborious in GitLab."
"There is room for improvement in GitLab Agents."
"The initial setup was quite challenging because it takes some time to understand how to pull out or push the code."
"I don't really like the new Kubernetes integration because it is pretty focused on the on-premise environment, but we're in a hybrid environment."
"It could have more security integrations and the ability to check the vulnerability of the code. I don't think it is a responsibility of Gitlab, but it would be nice to have more options to integrate with."
"I would like to see static analysis also embedded in GitLab. That would also help us. If there's something that it does internally by GitLab and then that is already tied up with your pipeline and then it can tell you that you're coding is good or your code is not great. Based on that, it would pass or fail. That should be streamlined. I would think that would help to a greater extent, in terms of having one solution rather than depending on multiple vendors."
"The solution needs better integration with Microsoft's Azure Cloud or an extension of Azure DevOps. In fact, it should better integrate with any cloud provider. Right now, it's quite difficult to integrate with that solution, from the cloud perspective."
"I want to enhance automation. Currently, Fortify WebInspect can scan and find vulnerabilities, but users with specific skills need to interpret the results and understand how to address them."
"It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application."
"The main area for improvement in Fortify WebInspect is the price, as it is too high compared to the market rate."
"Lately, we've seen more false negatives."
"We have had a problem with authentification."
"Fortify WebInspect could improve user-friendliness. Additionally, it is very bulky to use."
"Fortify WebInspect's shortcoming stems from the fact that it is a very expensive product in Korea, which makes it difficult for its potential customers to introduce the product in their IT environment."
 

Pricing and Cost Advice

"There are different licensing options available, including a free limited-user license."
"In total, I believe we have more than 300 licenses spread over about 100 users, though I can't comment on the costs involved."
"We are currently using the open-source version."
"The solution is free."
"GitLab is cheap."
"This product is not very expensive but the price can be better."
"GitLab is a free solution to use."
"This is an open-source solution."
"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."
"It’s a fair price for the solution."
"This solution is very expensive."
"The pricing is not clear and while it is not high, it is difficult to understand."
"Fortify WebInspect is a very expensive product."
"The price is okay."
"Our licensing is such that you can only run one scan at a time, which is inconvenient."
report
Use our free recommendation engine to learn which DevSecOps solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
13%
Government
11%
Manufacturing Company
10%
Financial Services Firm
15%
Government
15%
Manufacturing Company
13%
Computer Software Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise9
Large Enterprise42
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise1
Large Enterprise15
 

Questions from the Community

What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
The pricing and cost are on par with other tools and are neither too expensive nor cheap.
What needs improvement with GitLab?
Regarding improvements, making task management is something that GitLab can potentially make easier, similar to what DevOps or Jira does.
What is your experience regarding pricing and costs for Fortify WebInspect?
While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs between $15,000 to $19,000. In comparison, Burp Suite costs approximately $500 to ...
What needs improvement with Fortify WebInspect?
WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produ...
What is your primary use case for Fortify WebInspect?
I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite from PortSwigger. For API testing, I use Postman with Burp Suite or WebInspect fo...
 

Also Known As

Fuzzit
Micro Focus WebInspect, WebInspect
 

Overview

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Aaron's
Find out what your peers are saying about GitLab vs. OpenText Dynamic Application Security Testing and other solutions. Updated: July 2025.
867,370 professionals have used our research since 2012.