No more typing reviews! Try our Samantha, our new voice AI agent.

Check Point WAF (formerly CloudGuard WAF) vs OpenText Dynamic Application Security Testing comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 13, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Check Point WAF (formerly C...
Ranking in DevSecOps
2nd
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
Application Security Tools (5th), Data Loss Prevention (DLP) (8th), Web Application Firewall (WAF) (5th)
OpenText Dynamic Applicatio...
Ranking in DevSecOps
11th
Average Rating
7.2
Reviews Sentiment
6.1
Number of Reviews
22
Ranking in other categories
Dynamic Application Security Testing (DAST) (3rd)
 

Mindshare comparison

As of August 2026, in the DevSecOps category, the mindshare of Check Point WAF (formerly CloudGuard WAF) is 4.4%, up from 2.0% compared to the previous year. The mindshare of OpenText Dynamic Application Security Testing is 6.6%, down from 6.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
DevSecOps Mindshare Distribution
ProductMindshare (%)
Check Point WAF (formerly CloudGuard WAF)4.4%
OpenText Dynamic Application Security Testing6.6%
Other89.0%
DevSecOps
 

Featured Reviews

Krishnakumar Mahadevan - PeerSpot reviewer
CISO at Spink Solutions Private Limited
Cloud security has strengthened risk posture and improved advanced threat visibility
There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.
AP
Cyber Security Consultant at a tech vendor with 10,001+ employees
Enhancements in manual testing align with reporting and integration features
WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produces minimal findings, necessitating manual verification. The solution offers customization features for crawling and vulnerability detection. It includes various security frameworks and allows selection of specific vulnerability types to audit, such as OWASP Top 10 or JavaScript-based vulnerabilities. When working with APIs, we can select OWASP API Top 10. The tool also supports custom audit features by combining different security frameworks. For on-premises deployment, the setup is complex, particularly regarding SQL server configuration. Unlike Burp Suite or OpenText Dynamic Application Security Testing, which have simpler setup processes, WebInspect requires SQL server setup to function.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively."
"Check Point CloudGuard WAF has really reduced the headache of IT engineers and has helped me in security through machine learning."
"The price of Check Point CloudGuard WAF is not expensive, as it was the cheapest solution we found."
"Its main value and what we liked the most is its powerful AI."
"Check Point CloudGuard WAF works well for preemptively blocking Zero Day attacks and detecting hidden anomalies."
"Check Point CloudGuard WAF delivers clear efficiency gains over traditional WAFs in three main areas: operations, accuracy, and cost optimization."
"By using a cloud application security solution, our company can save costs by reducing the need for additional security hardware and software and improving operational efficiency."
"Having a cloud detection response helps to very quickly identify security threats in our environment."
"My experience with technical support has been good."
"The FPA and Audit Workbench are very helpful for me, and when we are integrating it with SSC, we're able to scan and trace and see all of the vulnerabilities, with very detailed examples for each vulnerability, so it is very good for users and beginners and doesn't take a lot of time to understand the tool."
"The solution is easy to use."
"It is easy to use, and its reporting is fairly simple."
"The most valuable feature is the performance."
"The tool provides comprehensive vulnerability assessments which help ensure our deliverables are as free from vulnerabilities as possible. It has also streamlined our web application vulnerability assessments, assisting us in delivering secure applications to our clients."
"Fortify WebInspect is a scalable solution, it is good for a lot of applications."
"It is scalable and very easy to use."
 

Cons

"I would like this solution to be extended to cellular devices or tablets."
"It doesn't detect user activity like some of its competitors. It's not a vulnerability, but it's a legitimate activity that it doesn't detect. It only detects vulnerabilities or misconfigurations."
"Check Point WAF (formerly CloudGuard WAF) could improve by addressing the new day-to-day attacks and issues that arise in the environment and globally dealing with attacks."
"The learning curve was a challenge due to initially incorrect configurations. It took approximately a month and a half to understand how the solution works because of inadequate documentation."
"If the price could come down, I would be very happy with the product."
"Check Point CloudGuard Application Security needs to improve updates on integrations. It also needs to incorporate real-time monitoring features."
"The User interface can be improved, especially for 1st time user."
"At present, we require a lot of customization and additional features to make it usable in our system."
"Fortify WebInspect could improve user-friendliness. Additionally, it is very bulky to use."
"My advice to others using Fortify WebInspect is not to use it, there are better solutions in the market."
"The solution is on the expensive side. It's something that clients comment on."
"This solution is very expensive."
"I'm not sure licensing, but on the pricing, it's a bit costly. It's a bit overpriced. Though it is an enterprise tool, there are other tools also with similar functionalities."
"The installation could be a bit easier. Usually it's simple to use, but the installation is painful and a bit laborious and complex."
"We have often encountered scanning errors."
"The main area for improvement in Fortify WebInspect is the price, as it is too high compared to the market rate."
 

Pricing and Cost Advice

"If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"
"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
"Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
"It is extremely affordable and high value for cost."
"I find the pricing to be reasonable."
"I work for an Indian banking client. In India, companies are on a budget. The company liked Check Point very much, but it was a little bit costly compared to FortiWeb. However, it had more features compared to FortiWeb."
"The tool's licensing costs are yearly and competitive."
"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."
"It’s a fair price for the solution."
"Fortify WebInspect is a very expensive product."
"This solution is very expensive."
"The pricing is not clear and while it is not high, it is difficult to understand."
"The price is okay."
"Our licensing is such that you can only run one scan at a time, which is inconvenient."
report
Use our free recommendation engine to learn which DevSecOps solutions are best for your needs.
909,647 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Outsourcing Company
13%
Financial Services Firm
9%
Construction Company
9%
Financial Services Firm
12%
Government
12%
Manufacturing Company
7%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business53
Midsize Enterprise23
Large Enterprise34
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise1
Large Enterprise15
 

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard for Application Security?
It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.
What needs improvement with CloudGuard for Application Security?
The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better. This all depends on how the rules are customized and configured, and it c...
What is your primary use case for CloudGuard for Application Security?
The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security. I am looking fo...
What is your experience regarding pricing and costs for Fortify WebInspect?
While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs between $15,000 to $19,000. In comparison, Burp Suite costs approximately $500 to ...
What needs improvement with Fortify WebInspect?
WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produ...
What is your primary use case for Fortify WebInspect?
I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite from PortSwigger. For API testing, I use Postman with Burp Suite or WebInspect fo...
 

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec, Check Point CloudGuard Code Security
Micro Focus WebInspect, WebInspect
 

Overview

 

Sample Customers

Orange España, Paschoalotto
Aaron's
Find out what your peers are saying about GitLab, Check Point Software Technologies, Checkmarx and others in DevSecOps. Updated: August 2026.
909,647 professionals have used our research since 2012.