Fortify Software Security Center vs Invicti comparison

Fortify Software Security C...

Read 31 Invicti reviews

4,405 Views
2,687 Comparison Views

96% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Fortify Software Security Center and Invicti are prominent tools in the software security domain, each offering unique capabilities. Invicti appears to have the upper hand with its superior features, which users find justify its price.

Features: Fortify Software Security Center features comprehensive vulnerability detection across various programming languages and strong integration capabilities with existing systems. Invicti provides user-friendly automation, accurate vulnerability identification, and faster scanning speeds that enhance reliability in reports. Invicti is modern and efficient, appealing to users who value these attributes.

Room for Improvement: Fortify Software Security Center could improve its scanning speed and reduce false positives. Scalability for large enterprise environments is a necessary development area for Invicti. Fortify users point to a need for refining result precision, while Invicti users suggest enhancements in scaling functionalities.

Ease of Deployment and Customer Service: Fortify Software Security Center receives mixed reviews for its deployment process, finding it complex yet supported by reliable customer service. Invicti offers a straightforward deployment process and efficient customer service that quickly addresses queries, making the overall experience smoother.

Pricing and ROI: Fortify Software Security Center is considered cost-effective, with a reasonable initial setup cost offering satisfactory ROI due to its detailed analysis capabilities. Invicti, while costing more initially, provides significant ROI by reducing manual testing time and enhancing detection accuracy. Users find Invicti offers better value despite its higher pricing.

To learn more, read our detailed Fortify Software Security Center vs. Invicti Report (Updated: April 2026).

Fortify Software Security Center vs. Invicti

Download the complete report

Helped 889,855 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortify Software Security C...

Ranking in Static Application Security Testing (SAST)

19th

Average Rating

8.0

Reviews Sentiment

4.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Invicti

Ranking in Static Application Security Testing (SAST)

10th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Container Security (24th), Software Composition Analysis (SCA) (8th), API Security (8th), Dynamic Application Security Testing (DAST) (4th), Application Security Posture Management (ASPM) (5th)

Mindshare comparison

As of April 2026, in the Static Application Security Testing (SAST) category, the mindshare of Fortify Software Security Center is 1.4%, up from 0.4% compared to the previous year. The mindshare of Invicti is 1.7%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST) Mindshare Distribution
Product	Mindshare (%)
Invicti	1.7%
Fortify Software Security Center	1.4%
Other	96.9%

Static Application Security Testing (SAST)

Featured Reviews

Diego Caicedo Lescano

Chief Innovation Officer at SAGGA

Enables centralized analysis and improves governance through seamless tool integration

The main use case for Fortify Software Security Center is exceptional because we have governance and control through that console. You can centralize both static analysis and dynamic analysis, and correlate both analyses in one tool to get better results by combining those independent results from each solution. That is outstanding, and there is no tool I have seen on the market that offers these capabilities. I appreciate the interoperability with other solutions from Fortify Software Security Center. Because we are using Kiuwan, you can run Kiuwan analyses and integrate them with Fortify Software Security Center to get those results in a single console. That is a good console for centralizing things in one point. That is one of the best features of the on-premises Fortify.

Read full review

Valavan Sivgalingam

Senior Manager, Security Engineering at ESS

Dynamic testing regularly identifies web vulnerabilities and has strong false positive confirmations

It has good false positive confirmations, confirmed issues identification, and proof of exploit-related features as part of it. We use Invicti for these things in our portfolios. The solution includes Proof-Based Scanning technology. Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios. For both the API endpoints and web applications, we do regular testing on a monthly basis for all our releases. Invicti does a good job. The only concern is on the performance side, but other than that, we find it really helpful in identifying web vulnerabilities. A full scan takes more time based on your website and other factors, but for us, it takes more than two to three days. The scan performance can be improved upon. When we check with them, they discuss proof-based scanning and related aspects. However, there could be intermittent results that could help us.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's very important because they want to scan their source code every day, so we provide CICD integration to our customers so they can auto build and auto test every day, get reports, and fix issues."

"The reporting is very useful because you can always view an entire list of the issues that you have."

"The main use case for Fortify Software Security Center is exceptional because we have governance and control through that console."

"The overall rating for this tool is ten out of ten."

"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."

"The reporting is very useful because you can always view an entire list of the issues that you have."

"I like the explanation of issues provided by Fortify Software Security Center."

More Fortify Software Security Center pros

"Netsparker offers some pretty features: Crawling feature: Netsparker has very detail crawling steps and mechanisms, this feature expands the attack surface, Attacking feature: Actually, attacking is not a solo feature, it contains many attack engines, Hawk, and many properties, but Netsparker's attacking mechanism is very flexible, this increases the vulnerability detection rate, also, Netsparker made the Hawk for real-time interactive command-line-based exploit testing, it's very valuable for a vulnerability scanner, and a very useful API for automating the scans."

"It is a very good tool."

"Attacking feature: Actually, attacking is not a solo feature. It contains many attack engines, Hawk, and many properties. But Netsparker's attacking mechanism is very flexible. This increases the vulnerability detection rate. Also, Netsparker made the Hawk for real-time interactive command-line-based exploit testing. It's very valuable for a vulnerability scanner."

"Invicti has done a commendable job with respect to ROI, and with respect to being a cost-effective solution and one of the market leaders as an effective solution for SAST and DAST, Invicti has performed very well."

"The most valuable feature of Invicti is getting baseline scanning and incremental scan."

"I like that it's stable and technical support is great."

"The solution generates reports automatically and quickly."

"OWASP Zap is free and it has live updates, so that's a big plus."

More Invicti pros

Cons

"The support for Fortify on-premises is the same as for the other products. I would say the support is not good and I would rate it a three out of ten."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"This solution is difficult to implement, and it should be made more comfortable for the end-users."

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"I am not satisfied with the percentage of false positives, which is around eighteen percent."

"We are having issues with false positives that need to be resolved."

"Fortify Software Security Center's setup is really painful."

More Fortify Software Security Center cons

"I think that it freezes without any specific reason at times."

"It would be better for listing and attacking Java-based web applications to exploit vulnerabilities."

"The license could be better. It would help if they could allow us to scan multiple URLs on the same license. It's a major hindrance that we are facing while scanning applications, and we have to be sure that the URLs are the same and not different so that we do not end up consuming another license for it. Netsparker is one of the costliest products in the market. The licensing is tied to the URL, and it's restricted. If you have a URL that you scanned once, like a website, you cannot retry that same license. If you are scanning the same website but in a different domain or different URL, you might end up paying for a second license. It would also be better if they provided proper support for multi-factor authentications. In the next release, I would like them to include good multi-factor authentication support."

"Perhaps the custom attack preparation screen might be improved."

"Right now, they are missing the static application security part, especially web application security."

"Invicti's reporting capabilities need enhancement."

"The proxy review, the use report views, the current use tool and the subset requests need some improvement. It was hard to understand how to use them."

"Asset scanning could be better. Once, it couldn't scan assets, and the issue was strange. The price doesn't fit the budget of small and medium-sized businesses."

More Invicti cons

Pricing and Cost Advice

"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."

"The solution is priced fair."

"This is a costly solution that could be cheaper."

"It is competitive in the security market."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."

"The price should be 20% lower"

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"OWASP Zap is free and it has live updates, so that's a big plus."

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

More Invicti pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

889,855 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

15%

Financial Services Firm

11%

Government

Construction Company

Financial Services Firm

15%

Manufacturing Company

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	1
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	4
Large Enterprise	13

Questions from the Community

What is your experience regarding pricing and costs for Micro Focus Software Security Center?

The pricing for the on-premises Fortify is expensive.

What needs improvement with Micro Focus Software Security Center?

In my opinion, there are no areas that could be improved with Fortify Software Security Center. I would say it is a good product and a mature product. However, the SAST has many improvement areas. ...

What is your primary use case for Micro Focus Software Security Center?

We have installed Fortify Static Code Analysis, SAST, in Ecuador in two customers. The Fortify ScanCentral includes three components: SAST, Fortify Software Security Center, and the WebInspect.

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?

The setup cost is pretty competitive. For example, if you want to talk about the SAST license, it comes to about $150 or sometimes less than $100, depending on the conversion or the number of licen...

What needs improvement with Invicti?

At this time, there is nothing that comes to mind. However, most of the products in the market are pretty much neck-to-neck competitors. Speaking about it, there are a couple of factors which they ...

What is your primary use case for Invicti?

I have worked on a couple of products, specifically in web application security. I have worked on Invicti, and with respect to PAM, I have worked with BeyondTrust. I have not worked specifically fo...

Checkmarx One vs Fortify Software Security Center

Comparisons

Compared 23% of the time

Checkmarx IaC Security / KICS vs Fortify Software Security Center

Compared 13% of the time

SonarQube vs Fortify Software Security Center

Compared 7% of the time

OpenText Core Application Security vs Fortify Software Security Center

Compared 7% of the time

Coverity Static vs Fortify Software Security Center

Compared 7% of the time

More Fortify Software Security Center Competitors

Veracode vs Invicti

Compared 9% of the time

Acunetix vs Invicti

Compared 8% of the time

OpenText Dynamic Application Security Testing vs Invicti

Compared 5% of the time

SonarQube vs Invicti

Compared 5% of the time

Snyk vs Invicti

Compared 4% of the time

More Invicti Competitors

Product Reports

Static Application Security Testing (SAST)

Download Fortify Software Security Center product report

Download Invicti product report

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect

Netsparker

Overview

Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.

OpenText

Invicti helps DevSecOps teams automate security tasks and save hundreds of hours each month by identifying web vulnerabilities that matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss with 99.98% accuracy, delivering on the promise of Zero Noise AppSec. Invicti helps discover all web assets — even ones that are lost, forgotten, or created by rogue departments. With an array of out-of-the-box integrations, DevSecOps teams can get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively while reducing risk and hitting the ROI goals.

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon

Samsung, The Walt Disney Company, T-Systems, ING Bank

Fortify Software Security Center vs. Invicti