

OpenText Core Application Security and GitHub compete in the application security and code management category. Despite OpenText's pricing and support benefits, GitHub appears to have the upper hand due to its robust features and functionalities, making it a preferred choice among users.
Features: OpenText Core Application Security is designed to identify vulnerabilities early in development, offering comprehensive security scans, dashboards, and vulnerability insights. Key features include static code analyzers, integration with the DevOps lifecycle, and detailed reporting. GitHub is known for its collaboration features, version control, and seamless integration with CI/CD tools that simplify software development processes.
Room for Improvement: OpenText Core Application Security needs improvement in scan duration, support for additional programming languages, and a reduction in false positives. Users also suggest enhancements in build tool integration and configuration flexibility. GitHub could benefit from a better interface, improved conflict resolution, and more advanced security features with enhanced integration and management capabilities.
Ease of Deployment and Customer Service: OpenText Core Application Security offers on-premises and hybrid cloud deployment, with mixed reviews on technical support. Some users find it reliable, while others report delays. GitHub primarily offers public cloud deployment, praised for its free-tier access, although some users experience synchronization and automation tool integration challenges.
Pricing and ROI: OpenText Core Application Security is valued for its cost-effectiveness and specific security licenses, contributing to reduced security incidents and consistent e-commerce uptime. GitHub offers a free open-source platform with optional paid features, characterized as affordable for small businesses, and supports open-source initiatives that enhance its overall value.
There is definitive ROI if OpenText Core Application Security is deployed properly; it substantially reduces efforts in securing the solution while averting various application-related risks.
The technical support from GitHub is generally good, and they communicate effectively.
Some forums help you get answers faster since you just type in your concern and see resolutions from other engineers.
I have not used GitHub's technical support extensively because there are many resources and a robust knowledge base available due to the large user community.
Support tickets often stay open for one month to three months, which leads to customer frustration.
I had direct interaction with them, which facilitated how we onboarded Fortify.
The technical support from OpenText is very good.
We have never had a problem with scalability, so I would rate it at least eight to nine.
GitHub is more scalable than on-prem solutions, allowing for cloud-based scaling which is beneficial for processing large workloads efficiently.
If a customer wants to know the tools and the technology used for their application to scan their application, they provide less information on that.
OpenText Core Application Security is highly scalable; it is running on the cloud, and elasticity is one of the best points of a cloud environment.
Fortify is superior to many solutions because of its scalability and that it does not require massive compute capabilities for its SAST and sandboxing features.
If a skilled developer uses it, it is ten out of ten for stability.
It provides a reliable environment for code management.
GitHub is mostly stable, but there can be occasional hiccups.
OpenText Core Application Security is stable and has minimal downtime, benefitting from AWS cloud availability.
When working with the CI/CD pipeline and somebody is writing the workflow file, it would be best to include the AI feature so if they write incorrect code, it will notify me about it in the same dashboard, eliminating the need to use third-party tools to review the file.
I am providing this feedback for Copilot because it seems more widespread and more companies allow it rather than Amp, and it would be beneficial if they catch up with Amp on this capability.
Security could make GitHub better. OWASP Top Ten security advisors could be integrated on GitHub, and it could provide checks and advice.
It would be beneficial if Fortify could check for CVEs (Common Vulnerabilities and Exposures) in third-party libraries, which I currently use a separate dependency checker tool for.
One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together.
I would say OpenText Core Application Security is not very user-friendly in terms of price; it is quite high.
Normally, GitHub is not expensive, but it would be welcome if it reduces costs for developing countries.
The pricing of GitHub is reasonable, with the cost being around seven dollars per user per month for private repositories.
The pricing of GitHub depends on the choice of solutions, such as building one's own GitHub Runners to save money or using GitHub's Runners with extra costs.
The pull request facility for code review.
GitHub Actions allow for creating multiple jobs that run in different stages such as build, test, and deploy, which enable better visibility and control over the deployment pipeline.
For branching, it works well, especially in an agile environment.
Fortify helps me find serious issues, such as developers inadvertently leaving access tokens, including API access tokens, in the source code.
On demand you have two levels of reports: the first from the tool, which is the same as we can get from Fortify on-premises, and a next level reporting made by experts from OpenText, leading to a more condensed and precise report as level three.
Additionally, you can integrate Fortify in CICD pipeline, so you get real-time updates about the security issues in your pipeline.
| Product | Mindshare (%) |
|---|---|
| GitHub | 1.9% |
| OpenText Core Application Security | 3.1% |
| Other | 95.0% |


| Company Size | Count |
|---|---|
| Small Business | 42 |
| Midsize Enterprise | 15 |
| Large Enterprise | 52 |
| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 8 |
| Large Enterprise | 45 |
GitHub is a platform that enhances collaboration and version control among developers, utilizing robust integration tools and features suitable for distributed teams. Its capabilities cater to diverse coding and project workflows, supporting effective team contributions and project deployments.
GitHub efficiently manages code repositories, facilitating seamless collaboration in distributed environments. It incorporates features beneficial for continuous integration and continuous deployment with tools like Jenkins and GitHub Actions. Recognized for its code-sharing, security, and branch management capabilities, GitHub serves as a versatile development hub. However, there's room for enhancement in project management, testing, and AI integration, with users expressing a need for better documentation, reporting, and enhanced user experience through improved automation and interface simplification.
What features make GitHub essential?GitHub is implemented widely in software development industries, supporting teams that require centralized platforms for code management. It is crucial for maintaining code integrity and facilitating developer communication. Industries rely on it for integrating tools essential for their CI/CD pipelines, accelerating project timelines, and organizing development tasks through collaborative workflows.
OpenText Core Application Security offers robust features like static and dynamic scanning, real-time vulnerability tracking, and seamless integration with development platforms, designed to enhance code security and reduce operational costs.
OpenText Core Application Security is a cloud-based, on-demand service providing accurate and deep scanning capabilities with detailed reporting. Its integrations with development platforms ensure an enhanced security layer in the development lifecycle, benefiting users by lowering operational costs and facilitating efficient remediation. The platform addresses needs for intuitive interfaces, API support, and comprehensive vulnerability assessments, helping improve code security and accelerate time-to-market. Despite its strengths, challenges exist around false positives, report clarity, and language support, alongside confusing pricing and package options. Enhancements are sought in areas like CI/CD pipeline configuration, report visualization, scan times, and integration with third-party tools such as GitLab, container scanning, and software composition analysis.
What features define OpenText Core Application Security?Industries like mobile applications, e-commerce, and banking leverage OpenText Core Application Security for its ability to identify vulnerabilities such as SQL injections. Integrating seamlessly with DevSecOps and security auditing processes, this tool supports developers in writing safer code, ensuring secure application deployment and enhancing software assurance.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.