

OpenText Core Application Security and Fortify Application Defender are competitors in the application security market. Fortify Application Defender appears to have the upper hand due to its comprehensive application monitoring features and superior source code scanning capabilities.
Features: Fortify Application Defender offers detailed static and dynamic code scanning, real-time insights, and a unified platform for vulnerability management. It also supports various application security features and reduces operational costs by minimizing incidents. OpenText Core features easy setup, cloud-based deployment, and rapid integration, appealing to organizations with minimal infrastructure.
Room for Improvement: OpenText Core could enhance support, integration with CICD pipelines, and reporting capabilities. Fortify Application Defender needs to address false positives, support more languages, and improve scan times. Both products could benefit from better integration with popular development tools.
Ease of Deployment and Customer Service: OpenText Core supports on-premises, public, private, and hybrid clouds, offering more flexibility than Fortify. Fortify's customer service is generally rated higher, though it has mixed technical support experiences. OpenText Core has received criticism for long support wait times.
Pricing and ROI: OpenText Core's affordable, cloud-based pricing model attracts cost-conscious users with flexible licensing. Fortify Application Defender, considered expensive, offers robust security features and integration, justifying its ROI by reducing bug densities and security incidents. OpenText's pricing strategy promotes broad adoption, especially among smaller organizations.
| Product | Market Share (%) |
|---|---|
| OpenText Core Application Security | 3.2% |
| Fortify Application Defender | 1.1% |
| Other | 95.7% |

| Company Size | Count |
|---|---|
| Small Business | 3 |
| Midsize Enterprise | 1 |
| Large Enterprise | 8 |
| Company Size | Count |
|---|---|
| Small Business | 17 |
| Midsize Enterprise | 8 |
| Large Enterprise | 44 |
Micro Focus Security Fortify Application Defender is a runtime application self-protection (RASP) solution that helps you manage and mitigate risk from homegrown or third-party applications. It provides centralized visibility into application use and abuse while protecting from software vulnerability exploits and other violations in real time.
OpenText Core Application Security offers robust features like static and dynamic scanning, real-time vulnerability tracking, and seamless integration with development platforms, designed to enhance code security and reduce operational costs.
OpenText Core Application Security is a cloud-based, on-demand service providing accurate and deep scanning capabilities with detailed reporting. Its integrations with development platforms ensure an enhanced security layer in the development lifecycle, benefiting users by lowering operational costs and facilitating efficient remediation. The platform addresses needs for intuitive interfaces, API support, and comprehensive vulnerability assessments, helping improve code security and accelerate time-to-market. Despite its strengths, challenges exist around false positives, report clarity, and language support, alongside confusing pricing and package options. Enhancements are sought in areas like CI/CD pipeline configuration, report visualization, scan times, and integration with third-party tools such as GitLab, container scanning, and software composition analysis.
What features define OpenText Core Application Security?Industries like mobile applications, e-commerce, and banking leverage OpenText Core Application Security for its ability to identify vulnerabilities such as SQL injections. Integrating seamlessly with DevSecOps and security auditing processes, this tool supports developers in writing safer code, ensuring secure application deployment and enhancing software assurance.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.