Try our new research platform with insights from 80,000+ expert users

GitLab vs OpenText Static Application Security Testing comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.2
GitLab boosts ROI by enhancing efficiency, reducing deployment time, and supporting DevOps with innovative, cost-effective tools for faster market delivery.
Sentiment score
6.8
OpenText Static Application Security Testing received mixed reviews, praising cost savings and partnerships, but highlighting challenges in quantifying ROI.
Regarding release frequency, previously we had one to two releases per week, but now we achieve daily or on-demand releases, resulting in a three to five-fold increase in release frequency.
Site Reliability Engineer at Granicus Inc.
Migrating to GitLab is bringing time-saving benefits, and everything is easier to automate.
IT Manager at a tech company with 5,001-10,000 employees
We have saved time significantly, reducing deployment time from four hours to five minutes per deployment.
IT Software Architect at ANAC - Autorità Nazionale Anticorruzione
 

Customer Service

Sentiment score
6.6
GitLab support receives mixed reviews, with premium users satisfied, while free-tier users experience slower response and limited support.
Sentiment score
6.7
Generally positive with dedicated teams, though some seek improvements in ticket system and responsiveness for OpenText support.
We have rarely needed to escalate issues to technical support since GitLab usually runs seamlessly.
AWS DevOps/ Site Reliability Engineer at Tata Consultancy
I have interacted with architects for some advice during the implementation, and they were prompt in their response.
Platform Engineer & Manager at a computer software company with 51-200 employees
I have had meetings where they taught me, explained things, and provided guidance for starting from scratch.
IT Manager at a tech company with 5,001-10,000 employees
The customer service and support for Fortify Static Code Analyzer are better than those for LoadRunner.
CTO at Marco Technology
The technical support has been good because we always received answers to our questions.
Manager at DTEK
 

Scalability Issues

Sentiment score
7.3
GitLab is praised for its scalability, supporting diverse workloads and environments, though smaller teams might underutilize it.
Sentiment score
7.8
OpenText SAST is scalable for various project sizes but needs improvement in speed and infrastructure management.
It has all the features required for our coding and deployment needs, which makes it scalable to our changing requirements.
Senior Application Developer at IBM
We're transitioning to OpenShift for future scalability with increased user numbers.
Platform Engineer & Manager at a computer software company with 51-200 employees
For scaling, other deployment options from GitLab's side need to be adopted.
Manager, Engineering at 7-Eleven
Fortify Static Code Analyzer integrates well and is scalable.
CTO at Marco Technology
 

Stability Issues

Sentiment score
8.2
GitLab is highly rated for stability, with users rarely experiencing performance issues, bugs, or downtime despite minor upgrade challenges.
Sentiment score
7.5
OpenText Static Application Security Testing is reliable and stable, with improvements since version 19.10, and benefits from proper training.
I have not encountered any performance or stability issues with GitLab so far.
AWS DevOps/ Site Reliability Engineer at Tata Consultancy
The updates are frequent and demanding, happening at least once a week due to security reasons.
Chief Technology Officer at Acclym
We raised a request with GitLab support, but they were unable to help because they could not find the root cause of what went wrong.
Assistant Manager at a tech vendor with 10,001+ employees
The stability of Fortify Static Code Analyzer is generally good.
CTO at Marco Technology
I would rate the product stability as an eight.
Lead Information Security Analyst at a financial services firm with 10,001+ employees
 

Room For Improvement

GitLab users face challenges with integration, documentation, pricing, and scalability, with improvements needed in security, performance, and flexibility.
OpenText SAST faces high costs, complex use, false positives, and needs better integration, language support, and feature enhancements.
It would be beneficial to have a user-friendly interface for setting up these configurations, instead of just writing YAML files.
IT Manager at a tech company with 5,001-10,000 employees
It is essential to conduct proper testing, such as unit tests and code coverage, within the SDLC pipelines.
Manager, Engineering at 7-Eleven
GitLab can improve its user interface to make conflict resolution more user-friendly.
Senior Application Developer at IBM
We would appreciate if the AI could give us more information about improvements and reduce the number of false positives, but this solution doesn't have this function yet.
Manager at DTEK
It should be easier to install, perhaps through a container-based approach where everything is combined into one image or pack of containers.
CTO at Marco Technology
It would be really helpful to include trending vulnerabilities and how to manage them.
Lead Information Security Analyst at a financial services firm with 10,001+ employees
 

Setup Cost

GitLab provides free and paid plans, with perceived reasonable pricing, though higher for small teams needing advanced features.
Enterprise users find OpenText Static Application Security Testing's pricing high but consider it economical compared to other major solutions.
Even when working in other small organizations, we opted for GitLab as it was cost-efficient.
Senior Application Developer at IBM
The pricing of GitLab is reasonable, aligning with what I consider to be average compared to competitors.
IT Manager at a tech company with 5,001-10,000 employees
The price is high, and it limits user accessibility.
IT Software Architect at ANAC - Autorità Nazionale Anticorruzione
The pricing of Fortify Static Code Analyzer is good, with a flexible model that allows customers to choose a setup that suits their needs.
CTO at Marco Technology
My experience with the pricing, setup costs, and licensing has been good.
Lead Information Security Analyst at a financial services firm with 10,001+ employees
 

Valuable Features

GitLab excels with a user-friendly interface, robust CI/CD, strong integrations, security, automation, and multi-cloud support for developers.
OpenText SAST enhances security by automating vulnerability detection, integrating across tools, and providing detailed remediation and compliance guidance.
As we implement automated testing and DevSecOps, it speeds up the process by forty to sixty percent.
Platform Engineer & Manager at a computer software company with 51-200 employees
The Ultimate version offers enhanced features for security scanning through DAST and SAST analysis, which have greatly benefitted our project workflow.
IT Software Architect at ANAC - Autorità Nazionale Anticorruzione
By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.
Manager, Engineering at 7-Eleven
Fortify Static Code Analyzer has the capability of giving fewer false positives compared to other tools.
Lead Information Security Analyst at a financial services firm with 10,001+ employees
The most valuable feature of Fortify Static Code Analyzer is its extensive language support, covering many languages from legacy ones to the newest.
CTO at Marco Technology
The most impactful feature of Fortify Static Code Analyzer in identifying vulnerabilities is the ratio of total number of vulnerabilities to false positives.
Manager at DTEK
 

Categories and Ranking

GitLab
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
91
Ranking in other categories
Application Security Tools (11th), Build Automation (1st), Release Automation (2nd), Static Application Security Testing (SAST) (9th), Rapid Application Development Software (11th), Software Composition Analysis (SCA) (4th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (1st)
OpenText Static Application...
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
19
Ranking in other categories
Static Code Analysis (4th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. GitLab is designed for Application Security Tools and holds a mindshare of 2.1%, down 3.1% compared to last year.
OpenText Static Application Security Testing, on the other hand, focuses on Static Code Analysis, holds 7.4% mindshare, down 10.9% since last year.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
GitLab2.1%
SonarQube17.9%
Checkmarx One10.2%
Other69.8%
Application Security Tools
Static Code Analysis Market Share Distribution
ProductMarket Share (%)
OpenText Static Application Security Testing7.4%
Veracode14.5%
Checkmarx One10.8%
Other67.3%
Static Code Analysis
 

Featured Reviews

BasilJiji - PeerSpot reviewer
System Engineer at a retailer with 10,001+ employees
Role-based workflows have transformed daily deployments and improve team collaboration
GitLab has role-based access control, so when a team member needs to make a code change, they cannot directly apply it to the environment but must put in a merge request. Once a senior reviews the code and approves it, then it is implemented across the environment, making it safer and allowing everyone to experience the process. The best features GitLab offers are version control and automation, which are the major things that stand out to me. When it comes to access, the login is very smooth, with just one login integrated with our Okta, allowing everyone to log in easily. Deployments become much easier, and that is how GitLab helps. The automation features make my work easier because we use a tool called AWX, which is connected to GitLab. Whenever we run a job on AWX, it directly checks the code and uses it. Since the code is not preserved locally but kept in the cloud, it is safe and nobody can tamper with it. When it comes to safety, that is a major thing. Automation features allow the code to be accessed from any tools we use, so the jobs we run are helping tremendously and doing their work perfectly. For pipeline tasks, we have created a significant amount of pipelines, which are all hosted in GitLab. Running the pipelines has become much easier, and they are doing a perfect job, helping tremendously in our day-to-day activities. GitLab has positively impacted my organization because previously we stored code locally on servers, leading to many risks. Since GitLab came into our environment, our integration and deployments became much easier, helping our work become much smoother. Improvements from GitLab have led to better team collaboration because when several people are working, they can all edit the code and submit it as a merge request, and once approved, it reflects directly to the main branch. Many can work at the same time. When it comes to deployments, deploying has become much faster since we started using GitLab, and even if errors occur, we can spot them easily and troubleshoot, which has helped tremendously.
DK
Lead Information Security Analyst at a financial services firm with 10,001+ employees
Focuses on detailed scans to find critical vulnerabilities while ensuring minimal false positives
I think Fortify Static Code Analyzer could be improved by updating the number of rule packs according to the latest vulnerabilities we find each year. We have updated to a version that is one less than the current latest version. It would be really helpful to include trending vulnerabilities and how to manage them. While it includes all the OWASP top factors, AI has come into the picture, so those updates should also be considered. I haven't thought much about additional features for improvement since I am using it daily. Most of our work revolves around scanning and providing the results, which sometimes feels like a crunch. However, I believe rule pack updates should be implemented. It feels easy to upgrade to the latest version as well.
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
881,114 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
12%
Government
11%
Manufacturing Company
11%
Financial Services Firm
28%
Computer Software Company
11%
Manufacturing Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business36
Midsize Enterprise10
Large Enterprise46
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise3
Large Enterprise11
 

Questions from the Community

What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
The setup cost was moderate and not very high. For GitLab SaaS, the initial setup cost was minimal, while self-managed GitLab involved infrastructure, VM storage backups, runner configuration, and ...
What needs improvement with GitLab?
A pain point I have encountered with GitLab is that large GitLab-ci.yml files become hard to read and maintain. YAML syntax is strict, and errors are easy to make, while debugging pipeline logic ca...
What do you like most about Fortify Static Code Analyzer?
Integrating the Fortify Static Code Analyzer into our software development lifecycle was straightforward. It highlights important information beyond just syntax errors. It identifies issues like pa...
What is your experience regarding pricing and costs for Fortify Static Code Analyzer?
My experience with the pricing, setup costs, and licensing has been good. We have the scan machines, and we are planning to request more from Micro Focus now. We have calls every month or every oth...
What needs improvement with Fortify Static Code Analyzer?
I think Fortify Static Code Analyzer could be improved by updating the number of rule packs according to the latest vulnerabilities we find each year. We have updated to a version that is one less ...
 

Also Known As

Fuzzit
Fortify Static Code Analysis SAST
 

Overview

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Information Not Available
Find out what your peers are saying about SonarSource Sàrl, Veracode, Checkmarx and others in Application Security Tools. Updated: January 2026.
881,114 professionals have used our research since 2012.