No more typing reviews! Try our Samantha, our new voice AI agent.

GitHub vs OpenText Core Application Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.2
GitHub enhances productivity and reduces costs by streamlining branch management, improving code quality, and facilitating efficient releases.
Sentiment score
3.7
OpenText Core Application Security automates scans, enhances security, reduces costs, and is essential for minimizing risks and data leaks.
Using GitHub reduces, on average, one to two hours of time daily for making things ready, so it has very good metrics.
Senior Software Engineer at a consultancy with 10,001+ employees
There is definitive ROI if OpenText Core Application Security is deployed properly; it substantially reduces efforts in securing the solution while averting various application-related risks.
Co-Founder at Insecsys Technologies Private Limited
 

Customer Service

Sentiment score
5.1
GitHub support varies; community resources and documentation often suffice, but direct support experiences differ in speed and consistency.
Sentiment score
7.0
Customer service is praised for responsiveness, but technical support experiences vary, with both effective assistance and unresolved issues.
The technical support from GitHub is generally good, and they communicate effectively.
Senior DevOps Engineer at Simplify3x Software Private Limited
Some forums help you get answers faster since you just type in your concern and see resolutions from other engineers.
Quality Assurance Analyst at a tech services company with 51-200 employees
I have not used GitHub's technical support extensively because there are many resources and a robust knowledge base available due to the large user community.
Platform Engineer at a recreational facilities/services company with 1,001-5,000 employees
Support tickets often stay open for one month to three months, which leads to customer frustration.
Chief Innovation Officer at SAGGA
I had direct interaction with them, which facilitated how we onboarded Fortify.
Lead Cybersecurity at TBO
The technical support from OpenText is very good.
Co-Founder at Insecsys Technologies Private Limited
 

Scalability Issues

Sentiment score
7.0
GitHub effortlessly scales for organizations of all sizes, handling large projects and users without performance concerns.
Sentiment score
7.2
OpenText Core Application Security scales effectively in the cloud but faces pricing and scan-related challenges across industries.
We have never had a problem with scalability, so I would rate it at least eight to nine.
Consultant at a comms service provider with 10,001+ employees
GitHub is more scalable than on-prem solutions, allowing for cloud-based scaling which is beneficial for processing large workloads efficiently.
Platform Engineer at a recreational facilities/services company with 1,001-5,000 employees
I can easily give updates from VS Code and commit messages directly to the GitHub repository by just using Git commands.
Full Stack Developer at Sri Krishna Arts and Science
If a customer wants to know the tools and the technology used for their application to scan their application, they provide less information on that.
Lead Cybersecurity at TBO
OpenText Core Application Security is highly scalable; it is running on the cloud, and elasticity is one of the best points of a cloud environment.
Cloud Security Manager at T-Systems International GmbH
Fortify is superior to many solutions because of its scalability and that it does not require massive compute capabilities for its SAST and sandboxing features.
Co-Founder at Insecsys Technologies Private Limited
 

Stability Issues

Sentiment score
8.2
GitHub is stable, reliable, and highly rated, with minimal performance issues and quick resolution of occasional connectivity problems.
Sentiment score
8.7
OpenText Core Application Security is reliable with minor resource concerns, consistent updates, and occasional JavaScript-related performance issues.
If a skilled developer uses it, it is ten out of ten for stability.
Lead Software Engineer at The 5 Chairs
It provides a reliable environment for code management.
Senior DevOps Engineer at Simplify3x Software Private Limited
GitHub is mostly stable, but there can be occasional hiccups.
Platform Engineer at a recreational facilities/services company with 1,001-5,000 employees
OpenText Core Application Security is stable and has minimal downtime, benefitting from AWS cloud availability.
Co-Founder at Insecsys Technologies Private Limited
 

Room For Improvement

GitHub requires better usability, tool integration, project management, speed, security, documentation, merging, automation, storage, stability, and user interface.
OpenText Core Application Security faces efficiency, integration, and usability challenges, prompting calls for improvements in AI, interfaces, and pricing.
When working with the CI/CD pipeline and somebody is writing the workflow file, it would be best to include the AI feature so if they write incorrect code, it will notify me about it in the same dashboard, eliminating the need to use third-party tools to review the file.
AWS & Azure Engineer at a media company with 11-50 employees
I am providing this feedback for Copilot because it seems more widespread and more companies allow it rather than Amp, and it would be beneficial if they catch up with Amp on this capability.
Senior Software Engineer at a tech services company with 501-1,000 employees
Security could make GitHub better. OWASP Top Ten security advisors could be integrated on GitHub, and it could provide checks and advice.
Software Development Manager at ANADOLU AGENCY
It would be beneficial if Fortify could check for CVEs (Common Vulnerabilities and Exposures) in third-party libraries, which I currently use a separate dependency checker tool for.
Lead Developer at a legal firm with 1,001-5,000 employees
One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together.
Lead Cybersecurity at TBO
I would say OpenText Core Application Security is not very user-friendly in terms of price; it is quite high.
Co-Founder at Insecsys Technologies Private Limited
 

Setup Cost

GitHub provides reasonable pricing and flexibility for enterprises, though improvements are needed for international markets and licensing complexities.
OpenText Core Application Security is considered costly, but features and integration often justify the price for users.
I have not encountered any initial setup cost for that.
Full Stack Developer at Sri Krishna Arts and Science
Normally, GitHub is not expensive, but it would be welcome if it reduces costs for developing countries.
Lead Software Engineer at The 5 Chairs
The pricing of GitHub is reasonable, with the cost being around seven dollars per user per month for private repositories.
QA Manager at Next Solutions
 

Valuable Features

GitHub excels in version control, collaboration, integration, and automation, offering a user-friendly, secure, and efficient development environment.
OpenText Core Application Security is valued for vulnerability detection, DevOps integration, comprehensive scanning, customization, and enterprise scalability.
The pull request facility for code review.
QA Manager at Next Solutions
GitHub Actions allow for creating multiple jobs that run in different stages such as build, test, and deploy, which enable better visibility and control over the deployment pipeline.
Senior DevOps Engineer at Simplify3x Software Private Limited
For branching, it works well, especially in an agile environment.
Quality Assurance Analyst at a tech services company with 51-200 employees
Fortify helps me find serious issues, such as developers inadvertently leaving access tokens, including API access tokens, in the source code.
Lead Developer at a legal firm with 1,001-5,000 employees
On demand you have two levels of reports: the first from the tool, which is the same as we can get from Fortify on-premises, and a next level reporting made by experts from OpenText, leading to a more condensed and precise report as level three.
Chief Innovation Officer at SAGGA
Additionally, you can integrate Fortify in CICD pipeline, so you get real-time updates about the security issues in your pipeline.
Lead Cybersecurity at TBO
 

Categories and Ranking

GitHub
Ranking in Application Security Tools
4th
Average Rating
8.8
Reviews Sentiment
6.5
Number of Reviews
102
Ranking in other categories
Version Control (2nd), Agile and DevOps Services (2nd)
OpenText Core Application S...
Ranking in Application Security Tools
11th
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
64
Ranking in other categories
Static Application Security Testing (SAST) (9th)
 

Mindshare comparison

As of August 2026, in the Application Security Tools category, the mindshare of GitHub is 2.7%, up from 0.9% compared to the previous year. The mindshare of OpenText Core Application Security is 3.3%, down from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
GitHub2.7%
OpenText Core Application Security3.3%
Other94.0%
Application Security Tools
 

Featured Reviews

Abdulmunafz Mct - PeerSpot reviewer
Full Stack Developer at Sri Krishna Arts and Science
Daily workflows have become streamlined as I manage projects, learn from clones, and host sites
The thing that has frustrated me is sometimes when I push using a Git command, I need to force the push, which is the main thing. The setup is frustrating because GitHub could add a repository with pre-installed packages or something since I need to install packages in VS Code before pushing and maintain it in the codebase. Git packages need to be installed manually, and if that was already in a GitHub repository, that would be much better. GitHub packages can be installed previously for the project upon the project requirement, and that is the thing I wanted to add here. That would be good. According to governance and security, I recently heard about some security issues in GitHub. I think that could be centralized and should consider those security issues and clear them. The AI capabilities there include Copilot or something else. I recently heard about security issues, but I do not know about it clearly. However, if security has been more tightened, it will be better.
Himanshu_Tyagi - PeerSpot reviewer
Lead Cybersecurity at TBO
Supports secure development pipelines and improves issue detection but limits internal visibility and needs broader dashboard integration
If you have an internal team and you want your internal team to validate false positives, basically to determine whether it's a valid issue or an invalid issue, then I wouldn't recommend it much. That was the only reason we migrated from Fortify on Demand to another solution. Fortify has another tool which is Fortify WebInspect. On Demand is the outsourcing solution, and WebInspect you can use with your in-house team, which is basically the product developed by the Fortify team. For automated scanning, Fortify helps a lot. Regarding the visibility for the internal team, everyone is moving toward the DevSecOps side, and Fortify team has made good progress that you can integrate into your CICD pipeline. One thing I would highlight is if Fortify can focus more on the centralized dashboard of the tools because nowadays, tools such as SentinelOne also exist for identifying security issues, but they have a centralized dashboard that merges their cloud solution and application security side solution together. If you have one tool that works for different solutions, it helps a lot. They are doing good, but they should invest more on the AI side as well because AI security is evolving these days. On the cloud side, they have already made good progress, but I believe they should explore the new area related to AI security as well.
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Outsourcing Company
9%
Marketing Services Firm
8%
Manufacturing Company
7%
Financial Services Firm
14%
Manufacturing Company
11%
Construction Company
7%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business43
Midsize Enterprise14
Large Enterprise55
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise8
Large Enterprise46
 

Questions from the Community

What is your experience regarding pricing and costs for GitHub?
I have been using GitHub for free, and recently I got a free education offer, such as educational resources. I believe it is GitHub Pro or something similar. I have been using the educational offer...
What needs improvement with GitHub?
The thing that has frustrated me is sometimes when I push using a Git command, I need to force the push, which is the main thing. The setup is frustrating because GitHub could add a repository with...
What is your primary use case for GitHub?
I use GitHub for maintaining repositories, as it is easy to maintain freelance projects and to store college projects. I will be using it for hosting by providing a GitHub link. For one of my freel...
What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?
In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...
What needs improvement with Micro Focus Fortify on Demand?
Areas for improvement should be contextualized post the OpenText acquisition, but back when I was working with Micro Focus, they focused heavily on enterprise-centric solutions. Now, after the acqu...
What is your primary use case for Micro Focus Fortify on Demand?
For OpenText Core Application Security, I currently support a couple of my clients who are using Fortify on Demand for their web application, CRM, and sales platform. Many good features of Fortify ...
 

Also Known As

No data available
Micro Focus Fortify on Demand
 

Overview

 

Sample Customers

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent
SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.
Find out what your peers are saying about GitHub vs. OpenText Core Application Security and other solutions. Updated: August 2026.
908,800 professionals have used our research since 2012.