

Find out what your peers are saying about Veracode, Checkmarx, Perforce and others in Static Code Analysis.
If we cannot adjust how to operate the solution, then it becomes very difficult, so hearing and initial tuning are very important.
Through the use of Tenable Security Center, my clients achieve more efficient patching and gain visibility and understanding of security operations, leading to improved resilience and infrastructure insight.
The technical support has been good because we always received answers to our questions.
The customer service and support for Fortify Static Code Analyzer are better than those for LoadRunner.
When we could not resolve an issue with the vendor, we referred to them and raised a ticket, which usually resulted in good support from their team.
Longer response times and less thorough assistance.
Fortify Static Code Analyzer integrates well and is scalable.
I can scale it extensively with the use of agents, allowing scanning in restrictive environments and loosely connected devices.
Scalability is a bit limited with Tenable Security Center.
The stability of Fortify Static Code Analyzer is generally good.
I would rate the product stability as an eight.
The stability of the solution is outstanding.
We would appreciate if the AI could give us more information about improvements and reduce the number of false positives, but this solution doesn't have this function yet.
While it includes all the OWASP top factors, AI has come into the picture, so those updates should also be considered.
It should be easier to install, perhaps through a container-based approach where everything is combined into one image or pack of containers.
It's important for Tenable to catch up on testing capabilities that are present in solutions like Qualys.
The reports and plugins for reports and scans could benefit from enhancements.
Translating reports into European languages is especially relevant in Central Eastern Europe, where clients often require reports in local languages.
My experience with the pricing, setup costs, and licensing has been good.
The pricing of Fortify Static Code Analyzer is good, with a flexible model that allows customers to choose a setup that suits their needs.
Tenable Security Center is quite expensive, particularly for the CEE region, causing us to lose cases due to its pricing.
The product is somewhat pricey, reflecting its valuable features and status as a high-quality solution in the vulnerability management market.
The price of Tenable Security Center is not so high; it's relatively a cheaper solution.
Fortify Static Code Analyzer has the capability of giving fewer false positives compared to other tools.
The most valuable feature of Fortify Static Code Analyzer is its extensive language support, covering many languages from legacy ones to the newest.
The most impactful feature of Fortify Static Code Analyzer in identifying vulnerabilities is the ratio of total number of vulnerabilities to false positives.
We obtained good reports showing when patches were closed and the details of each patch, including who executed it and everything related to the patching process until it was closed.
The most effective feature of Tenable Security Center for detecting vulnerabilities is its capability for critical mapping.
Tenable Security Center is a relatively very good solution, and I don't think it needs improvement; it's a perfect solution.
| Product | Mindshare (%) |
|---|---|
| OpenText Static Application Security Testing | 5.0% |
| Veracode | 11.3% |
| Checkmarx One | 9.1% |
| Other | 74.6% |
| Product | Mindshare (%) |
|---|---|
| Tenable Security Center | 7.5% |
| Qualys VMDR | 9.7% |
| Rapid7 InsightVM | 7.8% |
| Other | 75.0% |
| Company Size | Count |
|---|---|
| Small Business | 4 |
| Midsize Enterprise | 3 |
| Large Enterprise | 11 |
| Company Size | Count |
|---|---|
| Small Business | 22 |
| Midsize Enterprise | 12 |
| Large Enterprise | 27 |
OpenText Static Application Security Testing empowers teams with efficient vulnerability detection and streamlined secure coding practices, offering comprehensive language support and seamless integration with development tools.
OpenText Static Application Security Testing enhances software security during development by accurately identifying vulnerabilities with minimal false positives. It integrates seamlessly with IDEs and CI/CD pipelines, making it highly efficient for early detection of security issues. Users benefit from its easy setup, clear documentation, and centralized portal for managing security findings. Despite facing challenges like high costs and complex configurations for certain languages, its role in facilitating compliance and streamlining secure coding processes is indispensable. Improvements are needed in areas such as outdated design, language support, and integration capabilities to meet evolving user expectations.
What features does OpenText Static Application Security Testing offer?Organizations across diverse sectors implement OpenText Static Application Security Testing primarily to secure applications during development phases. Its integration with tools like GitLab, Jenkins, and Azure DevOps ensures a robust security pipeline. By combining with Sonatype Nexus, secure code, and library management is achieved effectively.
Tenable Security Center offers vulnerability scanning, reporting, and customizable dashboards, aiding in security posture enhancement through Asset Discovery and Vulnerability Priority Rating. Its user-friendly interface and third-party integration support provide real-time insights and risk assessment.
Tenable Security Center efficiently manages vulnerabilities, offering valuable analytics, risk prioritization, and real-time insights. It supports automated updates, false-positive reduction, and compliance reporting. Users benefit from its asset discovery capabilities and its integrations with third-party tools. However, there's room for improvement in reporting customization, integration with tools like Jira, and the accuracy and speed of vulnerability scanning. The system could enhance its dynamic data displays, language support, and offer more pricing flexibility. While valued for scanning servers, workstations, and IoT devices, the setup complexity and policy modification challenges are noted.
What are the key features?Organizations in sectors like IT, finance, and healthcare implement Tenable Security Center for vulnerability management across internal and cloud networks. It facilitates compliance with industry standards and aids IT teams in conducting network-wide assessments, streamlining patch management, and strengthening overall security.
We monitor all Static Code Analysis reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.