OpenText Core Application Security vs ReversingLabs comparison

OpenText Core Application S...

Read 4 ReversingLabs reviews

5,200 Views
1,300 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 29, 2026

OpenText Core Application Security and ReversingLabs compete in the application security category. OpenText Core Application Security holds an advantage in cost-effectiveness and customer support, whereas ReversingLabs has advanced features, making it appealing for robust functionality needs.

Features: OpenText Core Application Security includes vulnerability assessment capabilities, seamless workflow integration, and strong customer support. ReversingLabs provides advanced threat intelligence, detailed malware analysis, and comprehensive security solutions, which are suitable for organizations needing in-depth insights.

Room for Improvement: OpenText Core Application Security could improve in analytics depth, advanced threat detection tools, and more expansive integration capabilities. ReversingLabs could enhance pricing flexibility, simplify user interface elements, and broaden their customer support accessibility.

Ease of Deployment and Customer Service: OpenText Core Application Security is praised for straightforward deployment and superior customer service. ReversingLabs also offers a smooth deployment process with specialized support for complex threat scenarios, making it ideal for technically demanding environments.

Pricing and ROI: OpenText Core Application Security is favored for competitive setup costs and strong ROI, which appeals to budget-conscious buyers. ReversingLabs, while more costly, delivers significant long-term security benefits through its rich features, justifying higher initial costs for enhanced security returns.

To learn more, read our detailed OpenText Core Application Security vs. ReversingLabs Report (Updated: August 2026).

OpenText Core Application Security vs. ReversingLabs

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

OpenText Core Application S...

Ranking in Application Security Tools

10th

Average Rating

8.0

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (9th)

ReversingLabs

Ranking in Application Security Tools

41st

Average Rating

9.2

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Anti-Malware Tools (43rd), Container Security (52nd), Software Composition Analysis (SCA) (25th), Threat Intelligence Platforms (TIP) (29th), Software Supply Chain Security (19th)

Mindshare comparison

As of August 2026, in the Application Security Tools category, the mindshare of OpenText Core Application Security is 3.3%, down from 4.2% compared to the previous year. The mindshare of ReversingLabs is 0.9%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools Mindshare Distribution
Product	Mindshare (%)
OpenText Core Application Security	3.3%
ReversingLabs	0.9%
Other	95.8%

Application Security Tools

Featured Reviews

Himanshu_Tyagi

Lead Cybersecurity at TBO

Supports secure development pipelines and improves issue detection but limits internal visibility and needs broader dashboard integration

If you have an internal team and you want your internal team to validate false positives, basically to determine whether it's a valid issue or an invalid issue, then I wouldn't recommend it much. That was the only reason we migrated from Fortify on Demand to another solution. Fortify has another tool which is Fortify WebInspect. On Demand is the outsourcing solution, and WebInspect you can use with your in-house team, which is basically the product developed by the Fortify team. For automated scanning, Fortify helps a lot. Regarding the visibility for the internal team, everyone is moving toward the DevSecOps side, and Fortify team has made good progress that you can integrate into your CICD pipeline. One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together. If you have one tool that works for different solutions, it helps a lot. They are doing good, but they should invest more on the AI side as well because AI security is evolving these days. On the cloud side, they have already made good progress, but I believe they should explore the new area related to AI security as well.

Read full review

Tim Craig

Forensic Lead, Global Security Fusion Center at a insurance company with 10,001+ employees

Very good malware and goodware repository and enables us to look more deeply at indicators of compromise

The automated static analysis of malware is the most valuable feature. Its detection abilities are very good. It hits all of the different platforms out there, platforms that see the items in the wild. Also, the solution’s object and file analysis provide us with actionable insights. Its malware and goodware repository is very good. It's very robust. It gets all of the different repositories that are out there that do analysis and brings them under one roof where we can statically analyze for those indicators of compromise and look at them more deeply. If we need to go deeper into things, we can do that.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Fortify on Demand's stability is fantastic - I've never seen slowness, and it performs consistently."

"One of the valuable features is the ability to submit your code and have it run in the background. Then, if something comes up that is more specific, you have the security analyst who can jump in and help, if needed."

"I use the solution in my company for security code scans."

"The scanning capabilities, particularly for our repositories, have been invaluable."

"It enforces source-code scanning, finding vulnerabilities in source code."

"The most valuable feature is the capacity to be able to check vulnerabilities during the development process. The development team can check whether the code they are using is vulnerable to some type of attack or there is some type of vulnerability so that they can mitigate it. It helps us in achieving a more secure approach towards internal applications. It is an intuitive solution. It gives all the information that a developer needs to remediate a vulnerability in the coding process. It also gives you some examples of how to remediate a vulnerability in different programming languages. This solution is pretty much what we were searching for."

"HP Fortify on Demand provides an independent review of third-party applications, allowing organizations to test software before purchasing, and also allowing software vendors to demonstrate the security of their software."

"Fortify on Demand is a very good service which can be used by any organization when they are building a team because it identifies security vulnerabilities early in the software development life cycle and provides good visibility into issues in cloud-hosted applications."

More OpenText Core Application Security pros

"The automated static analysis of malware is the most valuable feature. Its detection abilities are very good. It hits all of the different platforms out there, platforms that see the items in the wild."

"As far as the malware repository is concerned, it's extensive. It's a good source for finding samples, where we are unable to find them on other channels or by leveraging other sources."

"ReversingLabs has a large sample size."

"As far as static analysis information is concerned, we use most of the information that is available in order to determine whether or not we might be dealing with a malware variant. This includes information that is related to Java rules. This is also related to malware families indicated or specific malicious software variants that are labeled by name."

"It offers reports on a great many more file types than the other analysis solutions we have. It can give us a more in-depth analysis and better reporting on a larger number of file types. It also gives us a more comprehensive score on a number of things as well, and that's why we're using it as a front-end filter. It gives us more information... It's valuable because of its depth of information, as well as the breadth it gives us. There aren't a lot of tools that cover all of the different file types."

"We had nothing in the environment to do such analysis, so it's been a savior in many ways."

"As far as the availability of the content is generally concerned and the number of malicious programs that can be looked up in the repository, these are very extensive."

"We have complete faith that it can do that for us, and can do it at scale."

Cons

"It would be useful if they could integrate secure design reviews, security user stories in Fortify on Demand Portal, and also look for possible options to get just one view of risks for given services (Covering Application, Infrastructure, Pen. Test, etc.)."

"The technical support is actually a problem that needs to be addressed. Since the acquisition and merger with Hewlett Packard, it has been really hard to know who the technical or salesperson to talk to."

"They could provide features for artificial intelligence similar to other vendors."

"The reporting capabilities need improvement, as there are some features that we would like to have but are not available at the moment."

"If you have a continuous integration in place, for example, and you want it to run along with your build and you want it to be fast, you're not going to get it. It adds to your development time."

"It would be highly beneficial if Fortify on Demand incorporated runtime analysis, similar to how Contrast Security utilizes agents for proactive application security."

"The products must provide better integration with build tools."

"I would say OpenText Core Application Security is not very user-friendly in terms of price; it is quite high."

More OpenText Core Application Security cons

"The product support could be better at times. Sometimes, the resources that they provide could be of higher quality."

"The solution needs to improve integrations."

"While the company is very helpful, it would be very much appreciated to have extensive proof of concept scripts for the different APIs available, though not for all the APIs that we have purchased. Respective scripts are available, but those scripts which are available are typically not of very high quality."

"I would like to see if we could do a little bit more of bulk uploading of hash sets. Right now, I can only do them individually."

"We would really like further integration with our threat intelligence platform, which is called ThreatConnect. We would also really like further integrations with an endpoint protection product we use called Tanium. The reason I mentioned both of these is that ReversingLabs claims to have extensive integrations with both of them, but they did not work for us."

Pricing and Cost Advice

"The subscription model, on a per-scan basis, is a bit expensive. That's another reason we are not using it for all the apps."

"It's a yearly contract, but I don't remember the dollar amount."

"Micro Focus Fortify on Demand licenses are managed by our IT team and the license model is user-based."

"If I exceed one million lines of code, there might be an extra cost or a change in the pricing bracket."

"The pricing can be improved because it is complex when compared to the competition."

"Buying a license would be feasible for regular use. For intermittent use, the cloud-based option can be used (Fortify on Demand)."

"The solution is a little expensive."

"I believe the rental license is not too expensive, but it provides a lot of information about the vulnerabilities."

More OpenText Core Application Security pricing and cost advice

"Currently, the license number of lookups that we purchased has not been reached yet, because the integration has only recently been completed. However, our usage is expected and planned to increase over the next couple of months."

"We have a yearly contract based on the number of queries and malicious programs which can be processed."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Manufacturing Company

11%

Construction Company

Outsourcing Company

Construction Company

16%

Financial Services Firm

11%

University

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	8
Large Enterprise	46

No data available

Questions from the Community

What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?

In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...

See all answers

What needs improvement with Micro Focus Fortify on Demand?

Areas for improvement should be contextualized post the OpenText acquisition, but back when I was working with Micro Focus, they focused heavily on enterprise-centric solutions. Now, after the acqu...

See all answers

What is your primary use case for Micro Focus Fortify on Demand?

For OpenText Core Application Security, I currently support a couple of my clients who are using Fortify on Demand for their web application, CRM, and sales platform. Many good features of Fortify ...

See all answers

Ask a question

Earn 20 points

Comparisons

SonarQube vs OpenText Core Application Security

Compared 26% of the time

Checkmarx One vs OpenText Core Application Security

Compared 5% of the time

GitHub vs OpenText Core Application Security

Compared 5% of the time

PortSwigger Burp Suite Professional vs OpenText Core Application Security

Compared 4% of the time

Veracode vs OpenText Core Application Security

Compared 4% of the time

More OpenText Core Application Security Competitors

JFrog Xray vs ReversingLabs

Compared 8% of the time

VirusTotal vs ReversingLabs

Compared 7% of the time

MetaDefender vs ReversingLabs

Compared 7% of the time

Black Duck SCA vs ReversingLabs

Compared 6% of the time

Wiz vs ReversingLabs

Compared 5% of the time

More ReversingLabs Competitors

Product Reports

OpenText Core Application Security

Download OpenText Core Application Security product report

OpenText Core Application Security report

Download ReversingLabs product report

Also Known As

Micro Focus Fortify on Demand

ReversingLabs Titanium, ReversingLabs secure.software

Overview

OpenText Core Application Security offers robust features like static and dynamic scanning, real-time vulnerability tracking, and seamless integration with development platforms, designed to enhance code security and reduce operational costs.

OpenText Core Application Security is a cloud-based, on-demand service providing accurate and deep scanning capabilities with detailed reporting. Its integrations with development platforms ensure an enhanced security layer in the development lifecycle, benefiting users by lowering operational costs and facilitating efficient remediation. The platform addresses needs for intuitive interfaces, API support, and comprehensive vulnerability assessments, helping improve code security and accelerate time-to-market. Despite its strengths, challenges exist around false positives, report clarity, and language support, alongside confusing pricing and package options. Enhancements are sought in areas like CI/CD pipeline configuration, report visualization, scan times, and integration with third-party tools such as GitLab, container scanning, and software composition analysis.

What features define OpenText Core Application Security?

Static and Dynamic Scanning: Offers thorough analysis to identify vulnerabilities during development.
Real-time Vulnerability Tracking: Continuously updates and monitors potential security threats.
Seamless Development Platform Integration: Enhances security processes without disrupting workflows.
Cloud-Based Service: Provides flexible, on-demand security capabilities with accurate results.
API Support: Allows smooth integration and automation within existing systems.

What benefits should users look for in reviews?

Reduced Operational Costs: Optimizes resources by lowering costs associated with security management.
Efficient Remediation: Speeds up the process of identifying and resolving vulnerabilities.
Enhanced Code Security: Strengthens overall application security during the development lifecycle.
Accelerated Time-to-Market: Streamlines development stages by integrating essential security tools.

Industries like mobile applications, e-commerce, and banking leverage OpenText Core Application Security for its ability to identify vulnerabilities such as SQL injections. Integrating seamlessly with DevSecOps and security auditing processes, this tool supports developers in writing safer code, ensuring secure application deployment and enhancing software assurance.

OpenText

ReversingLabs delivers a cutting-edge solution for cybersecurity experts, specializing in advanced threat detection and response. It is trusted by industries focused on maintaining high security standards with its innovative use of technology.

ReversingLabs provides comprehensive support for identifying and mitigating threats using a robust intelligence platform. Its unique approach integrates threat detection with automated analysis tools, enhancing organizations' security frameworks. The transparency and depth in tracking files and binaries ensure that users have a clear understanding of potential issues in software and files. With an emphasis on speed and accuracy, it ensures threats are managed before they escalate.

What are the key features of ReversingLabs?

Threat Intelligence Platform: Integrates detailed malware analysis for proactive security measures.
Automated Analysis Tools: Speeds up threat detection and provides in-depth insights.
Comprehensive Data Management: Simplifies complex datasets for enhanced threat recognition.
Open Integration: Smoothly integrates with existing security infrastructures.

What benefits or ROI can users find in ReversingLabs?

Enhanced Security Capabilities: Strengthens defenses against emerging threats before damage occurs.
Efficiency in Detection: Reduces response time through rapid analysis and identification.
Cost Reduction: Minimizes resource allocation by automating the threat management process.
Scalability: Easily expands with growing security needs without added complexity.

ReversingLabs is widely implemented in industries such as finance and healthcare, where data protection is critical. Financial institutions utilize its threat detection to safeguard against data breaches, while healthcare providers rely on it to maintain patient confidentiality and protect sensitive information from cyber threats.

Sample Customers

SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.

Financial services, healthcare, government, manufacturing, oil & gas, telecommunications, information technology

OpenText Core Application Security vs. ReversingLabs