We performed a comparison between Fortra Tripwire IP360 and OWASP Zap based on real PeerSpot user reviews.
Find out what your peers are saying about Tenable, Wiz, Check Point Software Technologies and others in Vulnerability Management."We could manage our entire IP range with the solution."
"Tripwire IP360 is a very stable solution."
"It's become the pinnacle point for anything that enters the network or anything that's passing through to production to first be affected by IP360, hardened, and up to standard. For our integrity management, one was deployed in the bank about two years ago and that's still going to expand the usage and the product itself. That will go hand in hand with training and expanding the product as for where it's deployed."
"The API is exceptional."
"It has evolved over the years and recently in the last year they have added, HUD (Heads Up Display)."
"Automatic updates and pull request analysis."
"Simple and easy to learn and master."
"The product discovers more vulnerabilities compared to other tools."
"The ZAP scan and code crawler are valuable features."
"The application scanning feature is the most valuable feature."
"The HUD is a good feature that provides on-site testing and saves a lot of time."
"The reporting functions can use improvement. There is room for growth because reporting functions differ a lot depending on what you're going to output. It depends on whether it's for technical or senior management and how it's interpreted. There could be growth within the reporting functionality side."
"We need to dedicate time and resources to keep it running."
"I am not very impressed by the technical support."
"Reporting format has no output, is cluttered and very long."
"There isn't too much information about it online."
"They stopped their support for a short period. They've recently started to come back again. In the early days, support was much better."
"Online documentation can be improved to utilize all features of ZAP and API methods to make use in automation."
"Too many false positives; test reports could be improved."
"Lacks resources where users can internally access a learning module from the tool."
"Zap could improve by providing better reports for security and recommendations for the vulnerabilities."
"ZAP's integration with cloud-based CICD pipelines could be better. The scan should run through the entire pipeline."
Fortra Tripwire IP360 is ranked 39th in Vulnerability Management with 6 reviews while OWASP Zap is ranked 7th in Application Security Testing (AST) with 37 reviews. Fortra Tripwire IP360 is rated 7.0, while OWASP Zap is rated 7.6. The top reviewer of Fortra Tripwire IP360 writes "The solution helps users to manage their entire IP range, but it's unreliable and very expensive to maintain". On the other hand, the top reviewer of OWASP Zap writes "Great for automating and testing and has tightened our security ". Fortra Tripwire IP360 is most compared with Tenable Nessus, whereas OWASP Zap is most compared with SonarQube, Acunetix, Qualys Web Application Scanning, PortSwigger Burp Suite Professional and Veracode.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
