No more typing reviews! Try our Samantha, our new voice AI agent.

OpenText Core Application Security vs Tenable.io Web Application Scanning comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

OpenText Core Application S...
Ranking in Application Security Tools
11th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
64
Ranking in other categories
Static Application Security Testing (SAST) (9th)
Tenable.io Web Application ...
Ranking in Application Security Tools
26th
Average Rating
7.8
Reviews Sentiment
5.8
Number of Reviews
18
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Application Security Tools category, the mindshare of OpenText Core Application Security is 3.3%, down from 4.2% compared to the previous year. The mindshare of Tenable.io Web Application Scanning is 1.3%, up from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
OpenText Core Application Security3.3%
Tenable.io Web Application Scanning1.3%
Other95.4%
Application Security Tools
 

Featured Reviews

Himanshu_Tyagi - PeerSpot reviewer
Lead Cybersecurity at TBO
Supports secure development pipelines and improves issue detection but limits internal visibility and needs broader dashboard integration
If you have an internal team and you want your internal team to validate false positives, basically to determine whether it's a valid issue or an invalid issue, then I wouldn't recommend it much. That was the only reason we migrated from Fortify on Demand to another solution. Fortify has another tool which is Fortify WebInspect. On Demand is the outsourcing solution, and WebInspect you can use with your in-house team, which is basically the product developed by the Fortify team. For automated scanning, Fortify helps a lot. Regarding the visibility for the internal team, everyone is moving toward the DevSecOps side, and Fortify team has made good progress that you can integrate into your CICD pipeline. One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together. If you have one tool that works for different solutions, it helps a lot. They are doing good, but they should invest more on the AI side as well because AI security is evolving these days. On the cloud side, they have already made good progress, but I believe they should explore the new area related to AI security as well.
HL
Security Analyst at TOPNET
Web audits have identified vulnerabilities and now provide clear visibility into compliance gaps
We have experience with Tenable.io Web Application Scanning, and we use it as well; we have approximately ten licenses for web application scanning. We use it to find vulnerabilities, but Tenable.io Web Application Scanning does not include remediation; we remediate with other products. We use the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Once we have our project created with our application pipeline connected to the test scanning, it only takes two minutes. The report explaining what needs to be modified related to security and vulnerabilities in our code is very helpful. We are able to do static and dynamic code scanning."
"The process was easy to follow and we were supported 24/7 by TAM personnel to help with any fire drills, which was helpful many times when I needed a quick answer late at night or early in the morning."
"The static code analyzer provides views from a security perspective and it is easy to use compared to others."
"Audit workbench: for on-the-fly defect auditing."
"It improves future security scans."
"The UL is easy to use compared to that of other tools, and it is highly reliable. The findings provide a lower number of false positives."
"Fortify on Demand's stability is fantastic - I've never seen slowness, and it performs consistently."
"It's a stable and scalable solution."
"The product provides comprehensive details and reports to help us understand everything and handle any patches in order to keep our system safe."
"The solution is stable."
"Our customers adopt this solution because of the replication testing and the vulnerability assessment it can do. It is a multi-faceted product."
"It has good unified web application scanning and exposure management."
"Tenable provides the end analysis results covering all the published vulnerabilities and information on the market."
"If customers need a cost-efficient way to do very good ramification scanning and vulnerability management, this is the right solution."
"We can get detailed information about vulnerabilities."
"Tenable.io Web Application Scanning is very easy to use, provides very reliable results, and is easily managed by someone who lacks prior knowledge, information, or experience."
 

Cons

"The cybersecurity specialist or AppSec would need a bit of training to engage the user interface and to understand how it functions."
"Takes up a lot of resources which can slow things down."
"I would say OpenText Core Application Security is not very user-friendly in terms of price; it is quite high."
"In terms of what could be improved, we need more strategic analysis reports, not just for one specific application, but for the whole enterprise. In the next release, we need more reports and more analytic views for all the applications. There is no enterprise view in Fortify. I would like enterprise views and reports."
"New technologies and DevOps could be improved. Fortify on Demand can be slow (slower than other vendors) to support new technologies or new software versions."
"The biggest deficiency is the integration with bug tracker systems."
"It natively supports only a few languages. They can include support for more native languages. The response time from the support team can also be improved. They can maybe include video tutorials explaining the remediation process. The remediation process is sometimes not that clear. It would be helpful to have videos. Sometimes, the solution that the tool gives in the GUI is not straightforward to understand for the developer. At present, for any such issues, you have to create a ticket for the support team and request help from the support team."
"It would be useful if they could integrate secure design reviews, security user stories in Fortify on Demand Portal, and also look for possible options to get just one view of risks for given services (Covering Application, Infrastructure, Pen. Test, etc.)."
"The report customization needs to be better."
"The reporting in Tenable.io Web Application Scanning is not as good as the reporting in Tenable SC."
"The market is standard for vulnerability scanning, however, the posture can be improved through Tenable's prioritization engine."
"I would like for them to add intervening proxy, whereby you can alter the get/put requests."
"I would like for them to add proxy filtering, where you can transfer and alter the package. It is fully automated. Other web application testers programs are actually proxy software, and the proxy software gives you the flexibility of modifying the outgoing package, which will actually help you in exploiting any vulnerability in detail."
"The technical support needs improvement. Currently, it takes time, which might be due to the free version, but providing some level of support could encourage future purchase decisions."
"The dashboard could be more user-friendly."
"It isn't easy to manage vulnerabilities in Tenable."
 

Pricing and Cost Advice

"The licensing was good because the licenses have the heavy centralized server."
"We make an annual purchase of the licenses we need."
"The subscription model, on a per-scan basis, is a bit expensive. That's another reason we are not using it for all the apps."
"Their subscriptions could use a little bit of a reworking, but I am very happy with what they're able to provide."
"The solution is a little expensive."
"It is not more expensive than other solutions, but the pricing is competitive."
"I'd rate it an eight out of ten in terms of pricing."
"The price is fair compared to that of other solutions."
"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."
"The pricing is okay."
"I rate the product's pricing a four out of ten."
"It follows the same licensing scheme as Tenable.io and Tenable. sc."
"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."
"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."
"Tenable.io Web Application Scanning is expensive for small businesses."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
11%
Construction Company
7%
Outsourcing Company
6%
Financial Services Firm
13%
Manufacturing Company
10%
Computer Software Company
8%
Construction Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise8
Large Enterprise46
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?
In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...
What needs improvement with Micro Focus Fortify on Demand?
Areas for improvement should be contextualized post the OpenText acquisition, but back when I was working with Micro Focus, they focused heavily on enterprise-centric solutions. Now, after the acqu...
What is your primary use case for Micro Focus Fortify on Demand?
For OpenText Core Application Security, I currently support a couple of my clients who are using Fortify on Demand for their web application, CRM, and sales platform. Many good features of Fortify ...
What needs improvement with Tenable.io Web Application Scanning?
If there were a solution, I would like to see automation and an integrated remediation solution for vulnerability or patch management.
What advice do you have for others considering Tenable.io Web Application Scanning?
I do not understand what API approach means; I do not understand this term. I think Tenable.io Web Application Scanning is the best option on the market at the moment. My review rating for this pro...
What is your experience regarding pricing and costs for Tenable.io Web Application Scanning?
I think the price is expensive. We do not have an idea of how much we have to pay approximately, but comparing to other products, Tenable.io Web Application Scanning is expensive.
 

Also Known As

Micro Focus Fortify on Demand
No data available
 

Overview

 

Sample Customers

SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.
IMDEX
Find out what your peers are saying about OpenText Core Application Security vs. Tenable.io Web Application Scanning and other solutions. Updated: August 2026.
908,834 professionals have used our research since 2012.