Try our new research platform with insights from 80,000+ expert users

GitLab vs OpenText Static Application Security Testing comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.9
GitLab boosts ROI by enhancing DevOps efficiency, time-saving automation, software security, and user satisfaction through broad project adoption.
Sentiment score
6.8
OpenText Static Application Security Testing received mixed reviews, praising cost savings and partnerships, but highlighting challenges in quantifying ROI.
Migrating to GitLab is bringing time-saving benefits, and everything is easier to automate.
IT Manager at a tech company with 5,001-10,000 employees
We have saved time significantly, reducing deployment time from four hours to five minutes per deployment.
IT Software Architect at ANAC - Autorità Nazionale Anticorruzione
 

Customer Service

Sentiment score
6.5
GitLab support varies by subscription, with paid users satisfied, while free users often use forums or internal resources.
Sentiment score
6.7
Generally positive with dedicated teams, though some seek improvements in ticket system and responsiveness for OpenText support.
We have rarely needed to escalate issues to technical support since GitLab usually runs seamlessly.
AWS DevOps/ Site Reliability Engineer at Tata Consultancy
I have interacted with architects for some advice during the implementation, and they were prompt in their response.
Platform Engineer & Manager at a computer software company with 51-200 employees
I have had meetings where they taught me, explained things, and provided guidance for starting from scratch.
IT Manager at a tech company with 5,001-10,000 employees
The customer service and support for Fortify Static Code Analyzer are better than those for LoadRunner.
CTO at Marco Technology
The technical support has been good because we always received answers to our questions.
Manager at DTEK
 

Scalability Issues

Sentiment score
7.3
GitLab is praised for adaptability, handling diverse workloads and large architectures smoothly, though some on-premises scalability issues remain.
Sentiment score
7.8
OpenText SAST is scalable for various project sizes but needs improvement in speed and infrastructure management.
It has all the features required for our coding and deployment needs, which makes it scalable to our changing requirements.
Senior Application Developer at IBM
We're transitioning to OpenShift for future scalability with increased user numbers.
Platform Engineer & Manager at a computer software company with 51-200 employees
For scaling, other deployment options from GitLab's side need to be adopted.
Manager, Engineering at 7-Eleven
Fortify Static Code Analyzer integrates well and is scalable.
CTO at Marco Technology
 

Stability Issues

Sentiment score
8.1
Users praise GitLab for stability and reliability with minimal downtime, highlighting its strong performance and high stability ratings.
Sentiment score
7.5
OpenText Static Application Security Testing is reliable and stable, with improvements since version 19.10, and benefits from proper training.
I have not encountered any performance or stability issues with GitLab so far.
AWS DevOps/ Site Reliability Engineer at Tata Consultancy
The updates are frequent and demanding, happening at least once a week due to security reasons.
Chief Technology Officer at Acclym
We raised a request with GitLab support, but they were unable to help because they could not find the root cause of what went wrong.
Assistant Manager at a tech vendor with 10,001+ employees
The stability of Fortify Static Code Analyzer is generally good.
CTO at Marco Technology
I would rate the product stability as an eight.
Lead Information Security Analyst at a financial services firm with 10,001+ employees
 

Room For Improvement

GitLab users want better integrations, documentation, project management, intuitive pipelines, enhanced security, user-friendly interface, and simplified pricing.
OpenText SAST faces high costs, complex use, false positives, and needs better integration, language support, and feature enhancements.
It would be beneficial to have a user-friendly interface for setting up these configurations, instead of just writing YAML files.
IT Manager at a tech company with 5,001-10,000 employees
It is essential to conduct proper testing, such as unit tests and code coverage, within the SDLC pipelines.
Manager, Engineering at 7-Eleven
GitLab can improve its user interface to make conflict resolution more user-friendly.
Senior Application Developer at IBM
We would appreciate if the AI could give us more information about improvements and reduce the number of false positives, but this solution doesn't have this function yet.
Manager at DTEK
It should be easier to install, perhaps through a container-based approach where everything is combined into one image or pack of containers.
CTO at Marco Technology
It would be really helpful to include trending vulnerabilities and how to manage them.
Lead Information Security Analyst at a financial services firm with 10,001+ employees
 

Setup Cost

GitLab offers a free tier, with Premium at $19 and Ultimate at $99 per user monthly, plus optional CI/CD costs.
Enterprise users find OpenText Static Application Security Testing's pricing high but consider it economical compared to other major solutions.
Even when working in other small organizations, we opted for GitLab as it was cost-efficient.
Senior Application Developer at IBM
The pricing of GitLab is reasonable, aligning with what I consider to be average compared to competitors.
IT Manager at a tech company with 5,001-10,000 employees
The price is high, and it limits user accessibility.
IT Software Architect at ANAC - Autorità Nazionale Anticorruzione
The pricing of Fortify Static Code Analyzer is good, with a flexible model that allows customers to choose a setup that suits their needs.
CTO at Marco Technology
My experience with the pricing, setup costs, and licensing has been good.
Lead Information Security Analyst at a financial services firm with 10,001+ employees
 

Valuable Features

GitLab excels in CI/CD pipelines, usability, integration, and automation, enhancing collaboration, productivity, and efficient DevOps workflows.
OpenText SAST enhances security by automating vulnerability detection, integrating across tools, and providing detailed remediation and compliance guidance.
As we implement automated testing and DevSecOps, it speeds up the process by forty to sixty percent.
Platform Engineer & Manager at a computer software company with 51-200 employees
The Ultimate version offers enhanced features for security scanning through DAST and SAST analysis, which have greatly benefitted our project workflow.
IT Software Architect at ANAC - Autorità Nazionale Anticorruzione
By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.
Manager, Engineering at 7-Eleven
Fortify Static Code Analyzer has the capability of giving fewer false positives compared to other tools.
Lead Information Security Analyst at a financial services firm with 10,001+ employees
The most valuable feature of Fortify Static Code Analyzer is its extensive language support, covering many languages from legacy ones to the newest.
CTO at Marco Technology
The most impactful feature of Fortify Static Code Analyzer in identifying vulnerabilities is the ratio of total number of vulnerabilities to false positives.
Manager at DTEK
 

Categories and Ranking

GitLab
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
88
Ranking in other categories
Application Security Tools (12th), Build Automation (1st), Release Automation (2nd), Static Application Security Testing (SAST) (8th), Rapid Application Development Software (10th), Software Composition Analysis (SCA) (5th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (1st)
OpenText Static Application...
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
19
Ranking in other categories
Static Code Analysis (3rd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. GitLab is designed for Application Security Tools and holds a mindshare of 2.3%, down 3.1% compared to last year.
OpenText Static Application Security Testing, on the other hand, focuses on Static Code Analysis, holds 8.3% mindshare, down 10.9% since last year.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
GitLab2.3%
SonarQube19.2%
Checkmarx One10.2%
Other68.3%
Application Security Tools
Static Code Analysis Market Share Distribution
ProductMarket Share (%)
OpenText Static Application Security Testing8.3%
Veracode16.5%
Checkmarx One11.6%
Other63.6%
Static Code Analysis
 

Featured Reviews

Rohit Kesharwani - PeerSpot reviewer
Manager, Engineering at 7-Eleven
Improved agility and time to market with CI/CD enhancements
The CI/CD pipelines in GitLab are highly valuable. Another important feature is the single source of repository, allowing efficient repository management and source code management. GitLab provides manageability by allowing us to manage source code effectively through separate repositories. Additionally, GitLab enables the creation of individual CI/CD pipelines for each repository, making software more agile. By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.
DK
Lead Information Security Analyst at a financial services firm with 10,001+ employees
Focuses on detailed scans to find critical vulnerabilities while ensuring minimal false positives
I think Fortify Static Code Analyzer could be improved by updating the number of rule packs according to the latest vulnerabilities we find each year. We have updated to a version that is one less than the current latest version. It would be really helpful to include trending vulnerabilities and how to manage them. While it includes all the OWASP top factors, AI has come into the picture, so those updates should also be considered. I haven't thought much about additional features for improvement since I am using it daily. Most of our work revolves around scanning and providing the results, which sometimes feels like a crunch. However, I believe rule pack updates should be implemented. It feels easy to upgrade to the latest version as well.
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
879,310 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
13%
Government
11%
Manufacturing Company
11%
Financial Services Firm
28%
Computer Software Company
11%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business36
Midsize Enterprise10
Large Enterprise43
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise3
Large Enterprise11
 

Questions from the Community

What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
We are currently using general GitLab, not GitLab Premium.
What needs improvement with GitLab?
GitLab can be improved by being more responsive in the UI and offering better pricing for premium features, which would be useful for small startups. While GitLab's CI/CD is powerful, it is somewha...
What do you like most about Fortify Static Code Analyzer?
Integrating the Fortify Static Code Analyzer into our software development lifecycle was straightforward. It highlights important information beyond just syntax errors. It identifies issues like pa...
What is your experience regarding pricing and costs for Fortify Static Code Analyzer?
My experience with the pricing, setup costs, and licensing has been good. We have the scan machines, and we are planning to request more from Micro Focus now. We have calls every month or every oth...
What needs improvement with Fortify Static Code Analyzer?
I think Fortify Static Code Analyzer could be improved by updating the number of rule packs according to the latest vulnerabilities we find each year. We have updated to a version that is one less ...
 

Also Known As

Fuzzit
Fortify Static Code Analysis SAST
 

Overview

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Information Not Available
Find out what your peers are saying about SonarSource Sàrl, Veracode, Checkmarx and others in Application Security Tools. Updated: November 2025.
879,310 professionals have used our research since 2012.