Fortify Software Security Center vs Semgrep comparison

OpenText and Semgrep are both solutions in the Static Application Security Testing (SAST) category. OpenText is ranked #28 with an average rating of 8.0, while Semgrep is ranked #24 with an average rating of 8.0. OpenText holds a 0.5% mindshare in SAST, compared to Semgrep’s 3.0% mindshare. Additionally, 100% of OpenText users are willing to recommend the solution, compared to 100% of Semgrep users who would recommend it.

Fortify Software Security C...

Read 7 Fortify Software Security Center reviews

593 Views
534 Comparison Views

100% willing to recommend

Semgrep

Read 1 Semgrep review

2,469 Views
1,876 Comparison Views

100% willing to recommend

Fortify Software Security C...

Semgrep

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Fortify Software Security Center and Semgrep based on real PeerSpot user reviews.

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST).

To learn more, read our detailed Static Application Security Testing (SAST) Report (Updated: September 2025).

Buyer's Guide

Static Application Security Testing (SAST)

September 2025

Download the complete report

Helped 868,759 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Fortify Software Security C...

Ranking in Static Application Security Testing (SAST)

28th

Average Rating

7.8

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Semgrep

Ranking in Static Application Security Testing (SAST)

24th

Average Rating

8.0

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

Supply Chain Management Software (4th), Software Composition Analysis (SCA) (11th), Static Code Analysis (8th)

Mindshare comparison

As of October 2025, in the Static Application Security Testing (SAST) category, the mindshare of Fortify Software Security Center is 0.5%, up from 0.3% compared to the previous year. The mindshare of Semgrep is 3.0%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST) Market Share Distribution
Product	Market Share (%)
Semgrep	3.0%
Fortify Software Security Center	0.5%
Other	96.5%

Static Application Security Testing (SAST)

Featured Reviews

Jonathan Steyn

Principal Technical Consultant at EOH

Comprehensive vulnerability analysis and customization features with decent pricing

Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances. WebInspect supports a number of APIs and web endpoints. I find its feature of macro recording allows for testing vulnerabilities during multi-factor authentication sessions very valuable. I appreciate the ability to further analyze data with tools like Audit Workbench.

Read full review

Henry Mwawai

Security Consultant | Application Security at Jowatechs

Automated code reviews and good scalability with custom rule adaptability

We use Semgrep to check custom user pipelines and test their claims for any vulnerabilities. We process the code by passing it through the testing process for any operability issues before sending feedback to the developers and providing the final product. This is part of the static testing…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The overall rating for this tool is ten out of ten."

"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."

"You can easily download the tool's rule packs and update them."

"The reporting is very useful because you can always view an entire list of the issues that you have."

"This is a stable solution at the end of the day."

"I like the explanation of issues provided by Fortify Software Security Center."

"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."

"The most valuable feature is the ability to write our custom rules."

Cons

"Fortify Software Security Center's setup is really painful."

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."

"We are having issues with false positives that need to be resolved."

"I am not satisfied with the percentage of false positives, which is around eighteen percent."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"This solution is difficult to implement, and it should be made more comfortable for the end-users."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"There should be more information on how to acquire the system, catering to beginners in application security, to make it more user-friendly."

Pricing and Cost Advice

"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."

"The solution is priced fair."

"This is a costly solution that could be cheaper."

Information not available

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

868,759 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

19%

Financial Services Firm

14%

Computer Software Company

10%

Government

Financial Services Firm

18%

Manufacturing Company

13%

Computer Software Company

11%

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	1
Large Enterprise	3

No data available

Questions from the Community

What is your experience regarding pricing and costs for Micro Focus Software Security Center?

In the beginning, it was difficult for me to verify that our usage of Fortify Software Security Center corresponded to the license and criteria. Now, we have negotiated a number of details to respe...

See all answers

What needs improvement with Micro Focus Software Security Center?

I would like the false positive issue to diminish. I have experienced a lot of false positives, but I think this is due to using an older version. I hope the new version will resolve my problem.

See all answers

What is your primary use case for Micro Focus Software Security Center?

They use it to scan applications and fix bugs, which are my customers' main use cases for Fortify Software Security Center. As a reseller, I sell this product to provide application security becaus...

See all answers

What needs improvement with Semgrep?

There should be more information on how to acquire the system, catering to beginners in application security, to make it more user-friendly.

See all answers

What is your primary use case for Semgrep?

See all answers

What advice do you have for others considering Semgrep?

I'd rate the solution eight out of ten.

See all answers

Comparisons

OpenText Core Application Security vs Fortify Software Security Center

Compared 40% of the time

Acunetix vs Fortify Software Security Center

Compared 32% of the time

GitLab vs Fortify Software Security Center

Compared 12% of the time

More Fortify Software Security Center Competitors

SonarQube Server (formerly SonarQube) vs Semgrep

Compared 44% of the time

SonarQube Cloud (formerly SonarCloud) vs Semgrep

Compared 7% of the time

Veracode vs Semgrep

Compared 5% of the time

Coverity Static vs Semgrep

Compared 5% of the time

Snyk vs Semgrep

Compared 4% of the time

More Semgrep Competitors

Product Reports

Buyer's Guide

Static Application Security Testing (SAST)

September 2025

Download Fortify Software Security Center product report

Buyer's Guide

Static Application Security Testing (SAST)

September 2025

Download Semgrep product report

Also Known As

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect

Semgrep Code, Semgrep Supply Chain, Semgrep AppSec Platform

Overview

Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.

OpenText

Semgrep is an advanced static analysis tool designed to identify vulnerabilities and enforce coding standards, catering primarily to professionals with a focus on enhancing code security and quality.

Engineered for software development environments, Semgrep delivers efficient security feedback with minimal setup. By offering a rich collection of rule sets, it allows customization and integration into CI/CD pipelines, supporting continuous code examination. Semgrep not only uncovers hidden flaws but also enforces best practices, making it a valuable asset for development teams seeking to build secure and reliable software.

What are the most important features of Semgrep?

Customizable Rules: Allows users to define specific rules to match unique coding requirements.
Open Rule Repository: Provides access to a vast array of pre-defined rules covering common security issues.
CI/CD Integration: Seamlessly integrates into development workflows, providing immediate feedback.
Multi-language Support: Detects issues across different programming languages, enhancing its usability.

What benefits or ROI should users consider?

Enhanced Security Posture: Elevates the security standards of codebases.
Time Efficiency: Reduces time spent on manual code reviews.
Adaptability: Easily adapts to evolving coding standards and practices.
Cost-effectiveness: Minimizes the need for external security audits.

In industry applications, Semgrep is a popular choice for sectors such as finance and healthcare, where code integrity and security are paramount. Its integration capabilities allow for effective oversight of compliance and secure coding standards without disrupting existing workflows. This adaptability ensures it meets sector-specific requirements, making it a trusted tool in fields where data privacy and protection are critical.

Semgrep

Sample Customers

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon

Policygenius, Tide, Lyft, Thinkific, FloQast, Vanta, and Fareportal

Buyer's Guide

Static Application Security Testing (SAST)

September 2025

Download Free Report

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST). Updated: September 2025.

DOWNLOAD NOW

868,759 professionals have used our research since 2012.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.