No more typing reviews! Try our Samantha, our new voice AI agent.

GitLab Premium vs OpenText Core Application Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitLab Premium
Ranking in Application Security Tools
28th
Average Rating
8.2
Reviews Sentiment
5.4
Number of Reviews
5
Ranking in other categories
No ranking in other categories
OpenText Core Application S...
Ranking in Application Security Tools
10th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
64
Ranking in other categories
Static Application Security Testing (SAST) (9th)
 

Mindshare comparison

As of August 2026, in the Application Security Tools category, the mindshare of GitLab Premium is 0.3%. The mindshare of OpenText Core Application Security is 3.3%, down from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
OpenText Core Application Security3.3%
GitLab Premium0.3%
Other96.4%
Application Security Tools
 

Featured Reviews

Bharadwaj Deepak Mohapatra - PeerSpot reviewer
DevOps Engineer at ENTERPRISE SYSTEM SOLUTIONS LIMITED
Have managed internal projects efficiently but face challenges with user interface and navigation
When discussing improvements for GitLab Premium, the main area is the GUI. GitHub's GUI is very good, offering many collaboration options and the ability to customize dashboards. GitHub's look and feel is superior, but GitLab Premium's dashboard is very simple. Regarding capabilities lacking in GitLab Premium, the main concern is the GUI. For example, in GitHub, there is a right side profile where settings can be directly accessed, and there is a direct section for developer mode with clear segregation. In GitLab Premium, when accessing users, confusion sometimes arises between root user and main user. There is an option for groups, but it is not direct. When clicking on groups, it goes to another section where groups must be found. This hierarchy could be more straightforward and direct. The biggest drawbacks of GitLab Premium are GUI and configuration. GUI is the primary concern, but other aspects are good.
Himanshu_Tyagi - PeerSpot reviewer
Lead Cybersecurity at TBO
Supports secure development pipelines and improves issue detection but limits internal visibility and needs broader dashboard integration
If you have an internal team and you want your internal team to validate false positives, basically to determine whether it's a valid issue or an invalid issue, then I wouldn't recommend it much. That was the only reason we migrated from Fortify on Demand to another solution. Fortify has another tool which is Fortify WebInspect. On Demand is the outsourcing solution, and WebInspect you can use with your in-house team, which is basically the product developed by the Fortify team. For automated scanning, Fortify helps a lot. Regarding the visibility for the internal team, everyone is moving toward the DevSecOps side, and Fortify team has made good progress that you can integrate into your CICD pipeline. One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together. If you have one tool that works for different solutions, it helps a lot. They are doing good, but they should invest more on the AI side as well because AI security is evolving these days. On the cloud side, they have already made good progress, but I believe they should explore the new area related to AI security as well.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The main benefits from advanced CI/CD capabilities in GitLab Premium include automation to pull and merge the codes together, and it's all done automatically."
"The biggest benefit from GitLab Premium is that both repository management systems are good, as both GitHub and GitLab are valuable, and the main advantage is that GitLab Premium has community support, making it good in all aspects for small organizations."
"GitLab Premium is much more reliable, quicker, faster, and basically easier to operate compared to GitHub."
"The main benefits I received from GitLab Premium are that I save money and streamline my management process of applications."
"I would give a rating of eleven in that case, because we never had a downtime with GitLab Premium."
"The SAST feature is the most valuable."
"It enforces source-code scanning, finding vulnerabilities in source code."
"Fortify on Demand is affordable, and its licensing comes with a year of support."
"I think the most valuable feature is its ability to address the source code scanning and dynamic scanning in a known, correlated way."
"The static code analyzers are the most valuable features of this solution."
"I don’t know of any other On-Demand enterprise solution like this one where we can load the details and within a few days, receive the results of intrusion attacks, and work with HP Security Experts when needed for clarification"
"Fortify on Demand is easy to use and the reporting is good."
"It is a very easy tool for developers to use in parallel while they're doing the coding. It does auto scanning as we are progressing with the CI/CD pipeline. It has got very simple and efficient API support."
 

Cons

"The automation part could be improved. Nowadays AI is being actively used, and if we could integrate something like ChatGPT with GitLab Premium, it would be easier for us to check logs and debug faster."
"In terms of improvement for GitLab Premium, not necessarily GitLab Premium specifically but GitLab as a whole could enhance features on the project management side."
"The biggest drawbacks of GitLab Premium are GUI and configuration. GUI is the primary concern, but other aspects are good."
"It is complex. It takes a good amount of time."
"There's a bit of a learning curve. Our development team is struggling with following the rules and following the new processes."
"If you have an internal team and you want your internal team to validate false positives, basically to determine whether it's a valid issue or an invalid issue, then I wouldn't recommend it much."
"Stability could use a little improvement as we've had some issues. It runs out of memory sometimes and uses a lot of resources."
"There were some regulated compliances, which were not there, but these were the factors because of which we had to use some instances of other tools as well."
"It natively supports only a few languages. They can include support for more native languages. The response time from the support team can also be improved. They can maybe include video tutorials explaining the remediation process. The remediation process is sometimes not that clear. It would be helpful to have videos. Sometimes, the solution that the tool gives in the GUI is not straightforward to understand for the developer. At present, for any such issues, you have to create a ticket for the support team and request help from the support team."
"This solution would be improved if the code-quality perspective were added to it, on top of the security aspect."
"There are many false positives identified by the solution."
"The technical support is actually a problem that needs to be addressed. Since the acquisition and merger with Hewlett Packard, it has been really hard to know who the technical or salesperson to talk to."
 

Pricing and Cost Advice

Information not available
"It is quite expensive. Pricing and the licensing model could be improved."
"We used the one-time application, Security Scan Dynamic. I believe the original fee was $8,000."
"We are still using the trial version at this point but I can already see from the trial version alone that it is a good product. For others, I would say that Fortify on Demand might look expensive at the beginning, but it is very powerful and so you shouldn't be put off by the price."
"If I exceed one million lines of code, there might be an extra cost or a change in the pricing bracket."
"The pricing model it's based on how many applications you wish to scan."
"The price is fair compared to that of other solutions."
"The subscription model, on a per-scan basis, is a bit expensive. That's another reason we are not using it for all the apps."
"We make an annual purchase of the licenses we need."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
44%
Transportation Company
11%
Comms Service Provider
8%
Manufacturing Company
6%
Financial Services Firm
13%
Manufacturing Company
11%
Construction Company
7%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise8
Large Enterprise46
 

Questions from the Community

What needs improvement with GitLab Premium?
It could be better, but now that we have migrated to Siemens Energy, GitLab Premium is being actively looked after by another team. We are just making sure that GitLab Premium administration is bei...
What advice do you have for others considering GitLab Premium?
We were on the desktop, and now GitLab Premium is on cloud. I am not really sure about the purchase process for GitLab Premium. I am a GitLab Premium end-user. I give this product a rating of eight...
What is your experience regarding pricing and costs for GitLab Premium?
GitLab Premium is affordable in terms of pricing, while GitHub is a bit pricier. If working with a much more complex and vast organization at the enterprise level, GitHub would be the choice. If op...
What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?
In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...
What needs improvement with Micro Focus Fortify on Demand?
Areas for improvement should be contextualized post the OpenText acquisition, but back when I was working with Micro Focus, they focused heavily on enterprise-centric solutions. Now, after the acqu...
What is your primary use case for Micro Focus Fortify on Demand?
For OpenText Core Application Security, I currently support a couple of my clients who are using Fortify on Demand for their web application, CRM, and sales platform. Many good features of Fortify ...
 

Also Known As

No data available
Micro Focus Fortify on Demand
 

Overview

 

Sample Customers

Information Not Available
SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.
Find out what your peers are saying about GitLab Premium vs. OpenText Core Application Security and other solutions. Updated: August 2026.
909,725 professionals have used our research since 2012.