GitGuardian Platform vs OpenText Dynamic Application Security Testing comparison

GitGuardian Platform vs. OpenText Dynamic Application Security Testing

Download the complete report

Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

GitGuardian Platform

Ranking in DevSecOps

5th

Average Rating

8.8

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Application Security Tools (13th), Static Application Security Testing (SAST) (9th), Data Loss Prevention (DLP) (9th), Software Supply Chain Security (6th)

OpenText Dynamic Applicatio...

Ranking in DevSecOps

10th

Average Rating

7.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Dynamic Application Security Testing (DAST) (3rd)

Mindshare comparison

As of June 2025, in the DevSecOps category, the mindshare of GitGuardian Platform is 2.8%, up from 1.1% compared to the previous year. The mindshare of OpenText Dynamic Application Security Testing is 6.8%, down from 11.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

DevSecOps

Featured Reviews

Joan Ging

Head of Development at Inhabit

It dramatically improved our ability to detect secrets, saved us time, and reduced our mean time to remediation

While they do offer some basic reporting, more comprehensive reporting would be beneficial in the long run. This would allow me to demonstrate the value of the product over time to continue to effectively budget for this subscription, especially as they add features that may come at an additional cost. I appreciate the improvements made to reporting over the past year, but continued development in this area will be appreciated. We have encountered occasional difficulties with the Single Sign-On process. There is room for improvement in its current implementation. It works, but was not quite as smooth as the rest of the GitGuardian experience.

Read full review

Navin N

Global ISO 27001 Program Lead at DXC Technology

Effective scanning of diverse file extensions with fast reporting and issue resolution

We develop software packages for clients, and these clients are mostly in the BFSI sector. The packages need to be scanned, and we engage Fortify WebInspect for this. Customers typically perform their own application pen tests, but in some cases, we have engagements where customers want us to scan…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"GitGuardian has many features that fit our use cases. We have our internal policies on secret exposure, and our code is hosted on GitLab, so we need to prevent secrets from reaching GitLab because our customers worry that GitLab is exposed. One of the great features is the pre-receive hook. It prevents commits from being pushed to the repository by activating the hook on the remotes, which stops the developers from pushing to the remote. The secrets don't reach GitLab, and it isn't exposed."

"The most valuable feature is the alerts when secrets are leaked and we can look at particular repositories to see if there are any outstanding problems. In addition, the solution's detection capabilities seem very broad. We have no concerns there."

"GitGuardian has pretty broad detection capabilities. It covers all of the types of secrets that we've been interested in... [Yet] The "detector" concept, which identifies particular categories or types of secrets, allows an organization to tweak and tailor the configuration for things that are specific to its environment. This is highly useful if you're particularly worried about a certain type of secret and it can help focus attention, as part of early remediation efforts."

"GitGuardian has also helped us develop a security-minded culture. We're serious about shift left and getting better about code security. I think a lot of people are getting more mindful about what a secret is."

"It enables us to identify leaks that happened in the past and remediate current leaks as they happen in near real-time. When I say "near real-time," I mean within minutes. These are industry-leading remediation timelines for credential leaks. Previously, it might have taken companies years to get credentials detected or remediated. We can do it in minutes."

"GitGuardian Internal Monitoring has helped increase our secrets detection rate by several orders of magnitude. This is a hard metric to get. For example, if we knew what our secrets were and where they were, we wouldn't need GitGuardian or these types of solutions. There could be a million more secrets that GitGuardian doesn't detect, but it is basically impossible to find them by searching for them."

"Some of our teams have hundreds of repositories, so filtering by team saves a lot of time and effort."

"You can also assign tasks to specific teams or people to complete, such as assigning something to the "blue team" or saying that this person needs to do this, and that person needs to do that. That is a great feature because you can actually manage your team internally in GitGuardian."

More GitGuardian Platform pros

"The user interface is ok and it is very simple to use."

"The most valuable feature is the static analysis."

"Technical support has been good."

"Fortify WebInspect is a scalable solution, it is good for a lot of applications."

"I've found the centralized dashboard the most valuable. For the management, it helps a lot to have abilities at the central level."

"The tool provides comprehensive vulnerability assessments which help ensure our deliverables are as free from vulnerabilities as possible. It has also streamlined our web application vulnerability assessments, assisting us in delivering secure applications to our clients."

"The most valuable feature of this solution is the ability to make our customers more secure."

"The solution is easy to use."

More OpenText Dynamic Application Security Testing pros

Cons

"It took us a while to get new patterns introduced into the pattern reporting process."

"The analytics in GitGuardian Platform have a significant opportunity to better reflect the value provided to security teams and demonstrate actual activity occurring."

"There are some features that are lacking in GitGuardian. The more we grow and the more engineers we have, the more it will become difficult to assign an incident because the assignment is not automatic. I know they are working on that and we are waiting for it."

"GitGuardian Platform does what it is designed to do, but it still generates many false positives."

"We have been somewhat confused by the dashboard at times."

"They could give a developer access to a dashboard for their team's repositories that just shows their repository secrets. I think more could be exposed to developers."

"If a developer commits code into their repo, it generates an alert. The alert comes into Slack, but by the time someone looks at it through the Slack alerting channel, the developer might have gone and already fixed or closed the issue. There's no sort of feedback loop to come back into the notification channel to show that it's been addressed."

"The analytics in GitGuardian Platform have a significant opportunity to better reflect the value provided to security teams and demonstrate actual activity occurring."

More GitGuardian Platform cons

"Creating reports is very slow and it is something that should be improved."

"Lately, we've seen more false negatives."

"The installation could be a bit easier. Usually it's simple to use, but the installation is painful and a bit laborious and complex."

"A localized version, for example, in Korean would be a big improvement to this solution."

"I would like WebInspect's scanning capability to be quicker."

"There are some file extensions, like .SER, that Fortify WebInspect doesn't scan."

"Fortify WebInspect's shortcoming stems from the fact that it is a very expensive product in Korea, which makes it difficult for its potential customers to introduce the product in their IT environment."

"Fortify WebInspect could improve user-friendliness. Additionally, it is very bulky to use."

More OpenText Dynamic Application Security Testing cons

Pricing and Cost Advice

"I am only aware of the base price. I do not know what happened with our purchasing team in discussions with GitGuardian. I was not privy to the overall contract, but in terms of the base MSRP price, I found it reasonable."

"I compared the solution to a couple of other solutions, and I think it is very competitively priced."

"It's competitively priced compared to others. Overall, the secret detection sector is expensive, but we are very happy with the value we get."

"It's a little bit expensive."

"You get what you pay for. It's one of the more expensive solutions, but it is very good, and the low false positive rate is a really appealing factor."

"With GitGuardian, we didn't need any middlemen."

"It's fairly priced, as it performs a lot of analysis and is a valuable tool."

"The pricing and licensing are fair. It isn't very expensive and it's good value."

More GitGuardian Platform pricing and cost advice

"Fortify WebInspect is a very expensive product."

"The pricing is not clear and while it is not high, it is difficult to understand."

"Our licensing is such that you can only run one scan at a time, which is inconvenient."

"This solution is very expensive."

"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."

"It’s a fair price for the solution."

"The price is okay."

See which vendors are best for you

Use our free recommendation engine to learn which DevSecOps solutions are best for your needs.

See recommendations

859,129 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

22%

Government

16%

Media Company

Financial Services Firm

16%

Government

14%

Manufacturing Company

12%

Computer Software Company

12%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about GitGuardian Internal Monitoring ?

It's also worth mentioning that GitGuardian is unique because they have a free tier that we've been using for the first twelve months. It provides full functionality for smaller teams. We're a smal...

What is your experience regarding pricing and costs for GitGuardian Internal Monitoring ?

It's fairly priced, as it performs a lot of analysis and is a valuable tool.

What needs improvement with GitGuardian Internal Monitoring ?

We'd love to see notification updates in Slack, as the system does not provide feedback on updates to incidents, which can be problematic when developers resolve issues. ie. if a developer commits ...

What do you like most about Fortify WebInspect?

The solution's technical support was very helpful.

What is your experience regarding pricing and costs for Fortify WebInspect?

The price of Fortify WebInspect is high, with the cost depending on the number of virtual users. It is approximately 25% higher than other solutions.

What needs improvement with Fortify WebInspect?

The main area for improvement in Fortify WebInspect is the price, as it is too high compared to the market rate. The cost of the license depends on the number of virtual users and, in comparison to...

SonarQube Server (formerly SonarQube) vs GitGuardian Platform

Comparisons

Compared 27% of the time

Snyk vs GitGuardian Platform

Compared 17% of the time

GitGuardian Public Monitoring vs GitGuardian Platform

Compared 15% of the time

GitHub Advanced Security vs GitGuardian Platform

Compared 14% of the time

Cycode vs GitGuardian Platform

Compared 8% of the time

More GitGuardian Platform Competitors

PortSwigger Burp Suite Professional vs OpenText Dynamic Application Security Testing

Compared 20% of the time

OWASP Zap vs OpenText Dynamic Application Security Testing

Compared 13% of the time

Acunetix vs OpenText Dynamic Application Security Testing

Compared 10% of the time

Qualys Web Application Scanning vs OpenText Dynamic Application Security Testing

Compared 9% of the time

OpenText Core Application Security vs OpenText Dynamic Application Security Testing

Compared 8% of the time

More OpenText Dynamic Application Security Testing Competitors

Product Reports

GitGuardian Platform

Download GitGuardian Platform product report

OpenText Dynamic Application Security Testing

Download OpenText Dynamic Application Security Testing product report

OpenText Dynamic Application Security Testing report

Also Known As

GitGuardian Internal Monitoring

Micro Focus WebInspect, WebInspect

Overview

GitGuardian helps organizations detect and fix vulnerabilities in source code at every step of the software development lifecycle. With GitGuardian’s policy engine, security teams can monitor and enforce rules across their VCS, DevOps tools, and infrastructure-as-code configurations.

Widely adopted by developer communities, GitGuardian is used by more than 500,000 developers and is the #1 app in the security category on the GitHub Marketplace. GitGuardian is also trusted by leading companies, including Instacart, Genesys, Orange, Iress, Beyond Identity, NOW: Pensions, and Stedi.

GitGuardian Platform includes automated secrets detection and remediation. By reducing the risks of secrets exposure across the SDLC, GitGuardian helps software-driven organizations strengthen their security posture and comply with frameworks and standards.

Its detection engine is trained against more than a billion public GitHub commits every year, and it covers 350+ types of secrets such as API keys, database connection strings, private keys, certificates, and more.

GitGuardian brings security and development teams together with automated remediation playbooks and collaboration features to resolve incidents fast and in full. By pulling developers closer to the remediation process, organizations can achieve higher incident closing rates and shorter fix times.

The platform integrates across the DevOps toolchain, including native support for continuously scanning VCS platforms like GitHub, Gitlab, Azure DevOps and Bitbucket or CI/CD tools like Jenkins, CircleCI, Travis CI, GitLab pipelines, and many more. It also integrates with ticketing and messaging systems like Splunk, PagerDuty, Jira and Slack to support teams with their incident remediation workflows. GitGuardian is offered as a SaaS platform but can also be hosted on-premise for organizations operating in highly regulated industries or with strict data privacy requirements.

GitGuardian

OpenText Dynamic Application Security Testing offers robust scalability, ease of use, and high accuracy in scanning, making it a valuable tool for enterprises.

This security testing platform is known for its centralized dashboard, guided scans, and comprehensive reporting. It integrates seamlessly with tools like Fortify code scanner and supports extensive vulnerability detection and analysis, enhancing efficiency in security management. Despite its strengths, users suggest improvements in cloud integration, cost-effectiveness, and installation processes. Faster scans, reduced false positives, and improved mobile testing features are also desired.

What are the key features of OpenText Dynamic Application Security Testing?

Scalability: Easily adapts to changing enterprise needs.
Ease of Use: User-friendly interface with guided scans.
Comprehensive Reporting: Detailed vulnerability analysis and reporting.
Integration Capabilities: Works with Fortify code scanner and user authentication scanning.
Wide Vulnerability Detection: Identifies extensive security vulnerabilities.

What benefits should users expect from reviews?

Efficient Vulnerability Management: Streamlines security management in development environments.
Detailed Analysis: Provides in-depth insights into security issues.
Quick Setup: Easy to deploy within existing systems.
Enterprise Preference: Supports enterprise environments efficiently.

In industries like BFSI, OpenText Dynamic Application Security Testing is employed for performance network application testing, dynamic and static application security testing, and code checks. Security and QA teams use it in development processes to ensure application security prior to release, proving integral in both enterprise and testing environments.

OpenText

Sample Customers

Automox, 66degrees (ex Cloudbakers), Iress, Now:Pensions, Payfit, Orange, BouyguesTelecom, Seequent, Stedi, Talend, Snowflake...

Aaron's

GitGuardian Platform vs. OpenText Dynamic Application Security Testing