No more typing reviews! Try our Samantha, our new voice AI agent.

Nucleus Security vs OpenText Core Application Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 23, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.3
Nucleus Security enhances time savings and workflow efficiency through task automation, improving resource allocation and engineering productivity.
Sentiment score
3.7
OpenText Core Application Security automates scans, enhances security, reduces costs, and is essential for minimizing risks and data leaks.
With security, it is always hard to quantify, and we did not really save money, but we used time more effectively and changed our way of working.
Cyber Security Architect at a retailer with 10,001+ employees
We have seen an absolutely clear return on investment in Nucleus Security, and it primarily shows up in massive time savings and vastly improved resource utilization.
Manager at a computer software company with 201-500 employees
Automation handles reporting on a scheduled basis and alerts system owners about their posture each week.
Vulnerability And Compliance Manager at a insurance company with 5,001-10,000 employees
There is definitive ROI if OpenText Core Application Security is deployed properly; it substantially reduces efforts in securing the solution while averting various application-related risks.
Co-Founder at Insecsys Technologies Private Limited
 

Customer Service

Sentiment score
8.2
Nucleus Security's customer service is highly praised for being reliable, effective, and offering helpful, timely responses, ensuring strong satisfaction.
Sentiment score
7.0
Customer service is praised for responsiveness, but technical support experiences vary, with both effective assistance and unresolved issues.
I would describe Nucleus Security's customer support as absolutely fantastic.
Manager at a computer software company with 201-500 employees
Customer support is great; I have always had communication with executive leaders, been able to have roadmap calls, and talk with support.
Vulnerability And Compliance Manager at a insurance company with 5,001-10,000 employees
Support tickets often stay open for one month to three months, which leads to customer frustration.
Chief Innovation Officer at SAGGA
I had direct interaction with them, which facilitated how we onboarded Fortify.
Lead Cybersecurity at TBO
The technical support from OpenText is very good.
Co-Founder at Insecsys Technologies Private Limited
 

Scalability Issues

Sentiment score
8.5
Nucleus Security offers seamless scalability, enhancing performance, supporting growth, and managing extensive assets with an efficient centralized interface.
Sentiment score
7.2
OpenText Core Application Security scales effectively in the cloud but faces pricing and scan-related challenges across industries.
The platform has done a great job of handling both stability and scalability excellently.
Manager at a computer software company with 201-500 employees
The scalability of Nucleus Security is fairly impressive; even when ingesting multiple assets, there is no noticeable impact.
Vulnerability And Compliance Manager at a insurance company with 5,001-10,000 employees
If a customer wants to know the tools and the technology used for their application to scan their application, they provide less information on that.
Lead Cybersecurity at TBO
OpenText Core Application Security is highly scalable; it is running on the cloud, and elasticity is one of the best points of a cloud environment.
Cloud Security Manager at T-Systems International GmbH
Fortify is superior to many solutions because of its scalability and that it does not require massive compute capabilities for its SAST and sandboxing features.
Co-Founder at Insecsys Technologies Private Limited
 

Stability Issues

Sentiment score
8.4
Nucleus Security is praised for stability and reliability, performing well under heavy loads and large automation tasks.
Sentiment score
8.7
OpenText Core Application Security is reliable with minor resource concerns, consistent updates, and occasional JavaScript-related performance issues.
We rarely, if ever, encounter downtime or performance degradation, even when the platform is running massive automation rules and background synchronization tasks during peak operational hours.
Manager at a computer software company with 201-500 employees
OpenText Core Application Security is stable and has minimal downtime, benefitting from AWS cloud availability.
Co-Founder at Insecsys Technologies Private Limited
 

Room For Improvement

Nucleus Security requires intuitive UI, enhanced reporting, streamlined integration, and better onboarding with customizable dashboards and exposure management.
OpenText Core Application Security faces efficiency, integration, and usability challenges, prompting calls for improvements in AI, interfaces, and pricing.
Nucleus Security needs a better view into exposure management, as exposure management and attack path management are missing.
Cyber Security Architect at a retailer with 10,001+ employees
Having more intuitive step-by-step visualized wizards or guided templates for building complex triage workflows would make the onboarding process much smoother for new team members.
Manager at a computer software company with 201-500 employees
It could be integrated with SentinelOne, but it was not showing any SentinelOne alerts.
Head of Security at a consultancy with 51-200 employees
It would be beneficial if Fortify could check for CVEs (Common Vulnerabilities and Exposures) in third-party libraries, which I currently use a separate dependency checker tool for.
Lead Developer at a legal firm with 1,001-5,000 employees
One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together.
Lead Cybersecurity at TBO
I would say OpenText Core Application Security is not very user-friendly in terms of price; it is quite high.
Co-Founder at Insecsys Technologies Private Limited
 

Setup Cost

Enterprise users appreciate Nucleus Security's competitive pricing, straightforward licensing, and value-driven features despite initial costs.
OpenText Core Application Security is considered costly, but features and integration often justify the price for users.
The licensing model is straightforward, with one license across multiple assets for multiple connectors.
Vulnerability And Compliance Manager at a insurance company with 5,001-10,000 employees
 

Valuable Features

Nucleus Security enhances safety and efficiency by streamlining risk management, integrating tools, and prioritizing risks for faster remediation.
OpenText Core Application Security is valued for vulnerability detection, DevOps integration, comprehensive scanning, customization, and enterprise scalability.
By centralizing everything, Nucleus Security has completely eliminated that friction and dramatically cut down on alert fatigue across our infrastructure and support teams because the platform prioritizes risk based on real-world threat intelligence.
Manager at a computer software company with 201-500 employees
The risk-based prioritization has helped my team focus on the most critical vulnerabilities by considering severity, asset context, and the remediation priorities.
Head of Security at a consultancy with 51-200 employees
The best features that Nucleus Security offers in my experience are the unified integrations with all of the different vulnerability management platforms.
Cyber Security Architect at a retailer with 10,001+ employees
Fortify helps me find serious issues, such as developers inadvertently leaving access tokens, including API access tokens, in the source code.
Lead Developer at a legal firm with 1,001-5,000 employees
On demand you have two levels of reports: the first from the tool, which is the same as we can get from Fortify on-premises, and a next level reporting made by experts from OpenText, leading to a more condensed and precise report as level three.
Chief Innovation Officer at SAGGA
Additionally, you can integrate Fortify in CICD pipeline, so you get real-time updates about the security issues in your pipeline.
Lead Cybersecurity at TBO
 

Categories and Ranking

Nucleus Security
Ranking in Application Security Tools
29th
Average Rating
7.2
Reviews Sentiment
7.3
Number of Reviews
4
Ranking in other categories
Vulnerability Management (43rd), Risk-Based Vulnerability Management (14th), Continuous Threat Exposure Management (CTEM) (13th)
OpenText Core Application S...
Ranking in Application Security Tools
11th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
64
Ranking in other categories
Static Application Security Testing (SAST) (9th)
 

Mindshare comparison

As of August 2026, in the Application Security Tools category, the mindshare of Nucleus Security is 0.7%, up from 0.4% compared to the previous year. The mindshare of OpenText Core Application Security is 3.3%, down from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
OpenText Core Application Security3.3%
Nucleus Security0.7%
Other96.0%
Application Security Tools
 

Featured Reviews

reviewer2872923 - PeerSpot reviewer
Vulnerability And Compliance Manager at a insurance company with 5,001-10,000 employees
Unified vulnerability view has improved risk-based decisions but reporting still needs work
One of the main issues with Nucleus Security is its lack of reporting capability. The user interface resembles an early 2000s application style, and although its speed is decent, it could be improved as more data is ingested. The overall appearance and feel need work, especially compared to modern applications from Rapid7, Qualys, and Tenable, which have more engaging user interfaces. The reporting capability is severely lacking; not being able to filter to granularity or have custom built queries is an annoyance that needs an overhaul. Additionally, there are bugs that have not been resolved, such as when you create a report and remove an asset, the asset still appears in the report despite not being present in the system anymore, leading to issues that need to be addressed quickly. Nucleus Security can become a difficult investment because I already have a vulnerability management solution, and I question where Nucleus Security fits with its licensing model. While I acknowledge automation has been described, it would be amazing to control the entire vulnerability management workflow from Nucleus Security without needing to log onto other systems. Having controls or actions that can be sent from the console down to the scanner for rescans would be beneficial. If Nucleus Security is going down this path, it should ensure that it becomes a one-stop shop for vulnerability management across multiple applications.
Himanshu_Tyagi - PeerSpot reviewer
Lead Cybersecurity at TBO
Supports secure development pipelines and improves issue detection but limits internal visibility and needs broader dashboard integration
If you have an internal team and you want your internal team to validate false positives, basically to determine whether it's a valid issue or an invalid issue, then I wouldn't recommend it much. That was the only reason we migrated from Fortify on Demand to another solution. Fortify has another tool which is Fortify WebInspect. On Demand is the outsourcing solution, and WebInspect you can use with your in-house team, which is basically the product developed by the Fortify team. For automated scanning, Fortify helps a lot. Regarding the visibility for the internal team, everyone is moving toward the DevSecOps side, and Fortify team has made good progress that you can integrate into your CICD pipeline. One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together. If you have one tool that works for different solutions, it helps a lot. They are doing good, but they should invest more on the AI side as well because AI security is evolving these days. On the cloud side, they have already made good progress, but I believe they should explore the new area related to AI security as well.
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
909,153 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Computer Software Company
11%
Construction Company
8%
Manufacturing Company
8%
Financial Services Firm
13%
Manufacturing Company
11%
Construction Company
7%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise1
Large Enterprise4
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise8
Large Enterprise46
 

Questions from the Community

What is your experience regarding pricing and costs for Nucleus Security?
The licensing model is straightforward, with one license across multiple assets for multiple connectors. It is always a tough ask regarding budgeting for additional security tools, but in terms of ...
What needs improvement with Nucleus Security?
While the platform is incredibly powerful, the initial configuration curve of Nucleus Security can be a bit steep. When first setting up complex, multi-layered automation rules and asset groupings,...
What is your primary use case for Nucleus Security?
In the initial phase when we first brought Nucleus Security into our environment, instead of immediately pushing it into full production, I spent some time exploring the interface, connecting a few...
What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?
In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...
What needs improvement with Micro Focus Fortify on Demand?
Areas for improvement should be contextualized post the OpenText acquisition, but back when I was working with Micro Focus, they focused heavily on enterprise-centric solutions. Now, after the acqu...
What is your primary use case for Micro Focus Fortify on Demand?
For OpenText Core Application Security, I currently support a couple of my clients who are using Fortify on Demand for their web application, CRM, and sales platform. Many good features of Fortify ...
 

Also Known As

No data available
Micro Focus Fortify on Demand
 

Overview

 

Sample Customers

Information Not Available
SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.
Find out what your peers are saying about Nucleus Security vs. OpenText Core Application Security and other solutions. Updated: August 2026.
909,153 professionals have used our research since 2012.