Klocwork vs OpenText Dynamic Application Security Testing comparison

The compared Perforce and OpenText solutions aren't in the same category. Perforce is ranked #19 in AS , with an average rating of 8.1, and holds a 1.4% mindshare in the category. OpenText is ranked #2 in DAST , with an average rating of 8.0, and holds a 17.9% mindshare. Additionally, 93% of Perforce users are willing to recommend the solution, compared to 83% of OpenText users who would recommend it.

Klocwork

Read 25 Klocwork reviews

3,558 Views
1,992 Comparison Views

93% willing to recommend

OpenText Dynamic Applicatio...

Read 22 OpenText Dynamic Application Security Testing reviews

3,330 Views
866 Comparison Views

83% willing to recommend

Klocwork

OpenText Dynamic Applicatio...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Klocwork and OpenText Dynamic Application Security Testing based on real PeerSpot user reviews.

Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Klocwork vs. OpenText Dynamic Application Security Testing Report (Updated: May 2022).

Buyer's Guide

Klocwork vs. OpenText Dynamic Application Security Testing

May 2022

Download the complete report

Helped 867,370 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Klocwork

Average Rating

8.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Application Security Tools (19th), Static Application Security Testing (SAST) (17th), Static Code Analysis (5th)

OpenText Dynamic Applicatio...

Average Rating

7.2

Reviews Sentiment

6.1

Number of Reviews

Ranking in other categories

Dynamic Application Security Testing (DAST) (2nd), DevSecOps (8th)

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. Klocwork is designed for Application Security Tools and holds a mindshare of 1.4%, down 1.4% compared to last year.
OpenText Dynamic Application Security Testing, on the other hand, focuses on Dynamic Application Security Testing (DAST), holds 17.9% mindshare, down 22.0% since last year.

Application Security Tools Market Share Distribution
Product	Market Share (%)
Klocwork	1.4%
SonarQube Server (formerly SonarQube)	20.8%
Checkmarx One	10.2%
Other	67.6%

Application Security Tools

Dynamic Application Security Testing (DAST) Market Share Distribution
Product	Market Share (%)
OpenText Dynamic Application Security Testing	17.9%
HCL AppScan	14.3%
Checkmarx One	13.5%
Other	54.3%

Dynamic Application Security Testing (DAST)

Featured Reviews

AnirbanSarkar

Head - Solution Management Group at Meteonic Innovation Pvt. Ltd.

Lets you find defects during the development phase, so you don't have to wait till the development is over to find and address flaws

What needs improvement in Klocwork, compared to other products in the market, is the dashboard or reporting mechanisms that need to be a bit more flexible. The Klocwork dashboard could be improved. Though it's good, it's not as good as some of the other products in the market, which is a problem. The reporting could be more detailed and easier to sort out because sorting in Klocwork could be a bit more time-consuming, mainly when sorting defects based on filters, compared to how it's done on other tools such as Coverity. What I'd like added in the next release of Klocwork is the peer code review Cahoots which used to be a part of Klocwork, and the architecture analysis and both have been taken out of Klocwork. I found the two critical for specific deployments, so if those can be brought back to Klocwork, that would be very good.

Read full review

Navin N

Global ISO 27001 Program Lead at DXC Technology

Effective scanning of diverse file extensions with fast reporting and issue resolution

We develop software packages for clients, and these clients are mostly in the BFSI sector. The packages need to be scanned, and we engage Fortify WebInspect for this. Customers typically perform their own application pen tests, but in some cases, we have engagements where customers want us to scan…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"There is a central Klocwork server at our headquarter in France so we connect the client directly to the server on-premises remotely."

"It's integrated into our CI, continuous integration."

"Klocwork's most valuable feature is the static code analysis feature. It detects the potential problem earlier to allow the developer to receive feedback quickly and then address it before it becomes a problem."

"The best advantage of Klocwork is the reduced setup time."

"The tool helps the team to think beforehand about corner cases or potential bugs that might arise in real-time."

"The most valuable feature is the Incremental analysis."

"Klocwork is user-friendly, with a client-server architecture that provides all needed compliance."

"On-the-fly analysis and incremental analysis are the best parts of Klocwork. Currently, we are using both of these features very effectively."

More Klocwork pros

"Guided Scan option allows us to easily scan and share reports."

"The tool provides comprehensive vulnerability assessments which help ensure our deliverables are as free from vulnerabilities as possible. It has also streamlined our web application vulnerability assessments, assisting us in delivering secure applications to our clients."

"Reporting, centralized dashboard, and bird's eye view of all vulnerabilities are the most valuable features."

"The feature that has been most influential in identifying vulnerabilities is its ability to crawl the website, understand the structure, and analyze the network packets sent and received."

"The most valuable feature of this solution is the ability to make our customers more secure."

"The solution is able to detect a wide range of vulnerabilities. It's better at it than other products."

"It is scalable and very easy to use."

"The transaction recorder within WebInspect is easy to use, which is valuable for our team."

More OpenText Dynamic Application Security Testing pros

Cons

"Klocwork has to improve its features to stay ahead of other free solutions."

"Modern languages, such as Angular and .NET, should be included as a part of Klocwork. They have recently added Kotlin as a part of their project, but we would like to see more languages in Klocwork. That's the reason we are using Coverity as a backup for some of the other languages."

"Customers using different static analysis tools report more issues than with Klocwork, indicating that Klocwork's engine is not as superior."

"Even though it does the job, there's room for feature enhancements, such as integrations with Git for better tracking and notifications."

"I hope that in each new release they add new features relating to the addition of checkers, improving their analysis engines etc."

"There are too many warnings, and it requires expertise to determine the correct category for them."

"What needs improvement in Klocwork, compared to other products in the market, is the dashboard or reporting mechanisms that need to be a bit more flexible. The Klocwork dashboard could be improved. Though it's good, it's not as good as some of the other products in the market, which is a problem. The reporting could be more detailed and easier to sort out because sorting in Klocwork could be a bit more time-consuming, mainly when sorting defects based on filters, compared to how it's done on other tools such as Coverity."

"We bought Klocwork, but it was limited to one little program, but the program is now sort of failing. So, we have a license for usage on a program that is sort of failing, and we really can't use the license on anything else."

More Klocwork cons

"Fortify WebInspect's shortcoming stems from the fact that it is a very expensive product in Korea, which makes it difficult for its potential customers to introduce the product in their IT environment."

"Not sufficiently compatible with some of our systems."

"It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application."

"It took us between eight and ten hours to scan an entire site, which is somewhat slow and something that I think can be improved."

"I want to enhance automation. Currently, Fortify WebInspect can scan and find vulnerabilities, but users with specific skills need to interpret the results and understand how to address them."

"One thing I would like to see them introduce is a cloud-based platform."

"We have had a problem with authentification."

"Our biggest complaint about this product is that it freezes up, and literally doesn't work for us."

More OpenText Dynamic Application Security Testing cons

Pricing and Cost Advice

"When it comes to licensing, the solution has two packages, one for a fixed and the other for a floating server, with the former being more cost effective than the latter."

"Licensing fees are paid annually, but they also have a perpetual license."

"There are other solutions on the market such as Microsoft Visual Studio. They have been adding more static code analysis features that come for free. It is getting better all the time. That is one of the possibilities is that we've been considering that we may stop using the Klocwork because it doesn't give us any added value."

"Klocwork should not to be quite so heavy handed on the licensing for very specific programs."

"Klocwork is still tight on their licensing. If Klocwork would loosen up on the licensing, and where the license could be used, and how many different programs could be run on it, then we have several development programs that I would love to be able to use it for going forward."

"This solution offers competitive pricing."

"The pricing for Klocwork is very competitive if you compare it from apple to apple. It has competitive pricing regarding the licensing model and the per-license cost. Klocwork isn't a high-end investment for anyone deploying it; even SMBs can afford it. The Klocwork cost per user would depend on the license type, so I'm unable to mention a ballpark figure because it would depend on the type of installation and how the deployment will be, and the nodes to give an accurate calculation or figure. The total price depends on the package, so my company could never publish pricing for Klocwork on the website. My team first collects information from potential clients on the deployment scenario, project environment, etc., before suggesting a package for Klocwork. My rating for Klocwork in terms of pricing is a five because of its flexible license models. There's a license model for every type of organization, whether small, midsize, or enterprise, so it's a five out of five for me."

"The limitation that we have is that Klocwork is licensed to certain programs, and if you want to license them to other programs, you have to pay more money."

"Our licensing is such that you can only run one scan at a time, which is inconvenient."

"The price is okay."

"Fortify WebInspect is a very expensive product."

"The pricing is not clear and while it is not high, it is difficult to understand."

"This solution is very expensive."

"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."

"It’s a fair price for the solution."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

867,370 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

26%

Computer Software Company

13%

Comms Service Provider

Transportation Company

Financial Services Firm

15%

Government

15%

Manufacturing Company

13%

Computer Software Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	2
Large Enterprise	12

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	15

Questions from the Community

What do you like most about Klocwork?

It's integrated into our CI, continuous integration.

See all answers

What is your experience regarding pricing and costs for Klocwork?

Klocwork's pricing seems attractive, as it uses a per-user license model that does not have a lot of overhead.

See all answers

What needs improvement with Klocwork?

One area for improvement is that when customers use different static analysis tools, they report more issues compared to Klocwork. The static analysis engine of Klocwork has areas that need improve...

See all answers

What is your experience regarding pricing and costs for Fortify WebInspect?

While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs between $15,000 to $19,000. In comparison, Burp Suite costs approximately $500 to ...

See all answers

What needs improvement with Fortify WebInspect?

WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produ...

See all answers

What is your primary use case for Fortify WebInspect?

I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite from PortSwigger. For API testing, I use Postman with Burp Suite or WebInspect fo...

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs Klocwork

Compared 28% of the time

Coverity Static vs Klocwork

Compared 28% of the time

Polyspace Code Prover vs Klocwork

Compared 14% of the time

Helix QAC vs Klocwork

Compared 6% of the time

Axivion Static Code Analysis vs Klocwork

Compared 5% of the time

More Klocwork Competitors

PortSwigger Burp Suite Professional vs OpenText Dynamic Application Security Testing

Compared 17% of the time

OWASP Zap vs OpenText Dynamic Application Security Testing

Compared 11% of the time

Veracode vs OpenText Dynamic Application Security Testing

Compared 8% of the time

Qualys Web Application Scanning vs OpenText Dynamic Application Security Testing

Compared 8% of the time

PortSwigger Burp Suite Enterprise Edition vs OpenText Dynamic Application Security Testing

Compared 8% of the time

More OpenText Dynamic Application Security Testing Competitors

Product Reports

Buyer's Guide

Klocwork

September 2025

Download Klocwork product report

Buyer's Guide

OpenText Dynamic Application Security Testing

August 2025

OpenText Dynamic Application Security Testing report

Download OpenText Dynamic Application Security Testing product report

Also Known As

No data available

Micro Focus WebInspect, WebInspect

Overview

Klocwork detects security, safety, and reliability issues in real-time by using this static code analysis toolkit that works alongside developers, finding issues as early as possible, and integrates with teams, supporting continuous integration and actionable reporting.

Perforce

OpenText Dynamic Application Security Testing offers robust scalability, ease of use, and high accuracy in scanning, making it a valuable tool for enterprises.

This security testing platform is known for its centralized dashboard, guided scans, and comprehensive reporting. It integrates seamlessly with tools like Fortify code scanner and supports extensive vulnerability detection and analysis, enhancing efficiency in security management. Despite its strengths, users suggest improvements in cloud integration, cost-effectiveness, and installation processes. Faster scans, reduced false positives, and improved mobile testing features are also desired.

What are the key features of OpenText Dynamic Application Security Testing?

Scalability: Easily adapts to changing enterprise needs.
Ease of Use: User-friendly interface with guided scans.
Comprehensive Reporting: Detailed vulnerability analysis and reporting.
Integration Capabilities: Works with Fortify code scanner and user authentication scanning.
Wide Vulnerability Detection: Identifies extensive security vulnerabilities.

What benefits should users expect from reviews?

Efficient Vulnerability Management: Streamlines security management in development environments.
Detailed Analysis: Provides in-depth insights into security issues.
Quick Setup: Easy to deploy within existing systems.
Enterprise Preference: Supports enterprise environments efficiently.

In industries like BFSI, OpenText Dynamic Application Security Testing is employed for performance network application testing, dynamic and static application security testing, and code checks. Security and QA teams use it in development processes to ensure application security prior to release, proving integral in both enterprise and testing environments.

OpenText

Sample Customers

ACCESS Co Ltd, Risk-AI, Winbond Electronics, Bristol-Myers Squibb Pharmaceutical Research Institute, University of Southern California, Alebra Technologies, SIMULIA, Risk Management Solutions, Brigham Young University, SRD, HRL

Aaron's

Buyer's Guide

Klocwork vs. OpenText Dynamic Application Security Testing

May 2022

Free Report: Klocwork vs. OpenText Dynamic Application Security Testing

Find out what your peers are saying about Klocwork vs. OpenText Dynamic Application Security Testing and other solutions. Updated: May 2022.

DOWNLOAD NOW

867,370 professionals have used our research since 2012.

See our Klocwork vs. OpenText Dynamic Application Security Testing report.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.