OpenText Dynamic Application Security Testing vs PortSwigger Burp Suite Enterprise Edition comparison

OpenText Dynamic Application Security Testing vs. PortSwigger Burp Suite Enterprise Edition

Download the complete report

Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

OpenText Dynamic Applicatio...

Ranking in Dynamic Application Security Testing (DAST)

3rd

Average Rating

7.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

DevSecOps (10th)

PortSwigger Burp Suite Ente...

Ranking in Dynamic Application Security Testing (DAST)

5th

Average Rating

8.0

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Vulnerability Management (23rd)

Mindshare comparison

As of June 2025, in the Dynamic Application Security Testing (DAST) category, the mindshare of OpenText Dynamic Application Security Testing is 22.8%, down from 31.3% compared to the previous year. The mindshare of PortSwigger Burp Suite Enterprise Edition is 13.1%, up from 3.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Dynamic Application Security Testing (DAST)

Featured Reviews

Navin N

Global ISO 27001 Program Lead at DXC Technology

Effective scanning of diverse file extensions with fast reporting and issue resolution

We develop software packages for clients, and these clients are mostly in the BFSI sector. The packages need to be scanned, and we engage Fortify WebInspect for this. Customers typically perform their own application pen tests, but in some cases, we have engagements where customers want us to scan…

Read full review

Mustufa Bhavnagarwala

CyberRisk Solution Advisor at Deloitte

With a super easy initial setup phase, the tool also offers regular updates

PortSwigger Burp Suite Enterprise Edition's new features released in the last two years are really good, so I won't say that I am not looking at any new features. The product's latest feature, which was really good, but had an issue since it allowed us in our company to put the proxy in the browser and then connect it with PortSwigger Burp Suite Enterprise Edition to get the calls resolved with the help of setup allowing for browser features inside PortSwigger Burp Suite Enterprise Edition. I want PortSwigger Burp Suite Enterprise Edition to be available on the cloud, though my concerns stem from the fact that I don't know how an application hosted on the cloud can do a proxy for an application. I can't recall what needs to be added to the solution to make it better, but I have seen that when I use the product, I feel that the tool needs to have a few elements added to it. The cost per license per user could be cheaper, specifically for individual licensing.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The user interface is ok and it is very simple to use."

"The feature that has been most influential in identifying vulnerabilities is its ability to crawl the website, understand the structure, and analyze the network packets sent and received."

"The most valuable feature of this solution is the ability to make our customers more secure."

"The solution's technical support was very helpful."

"The solution is easy to use."

"Good at scanning and finding vulnerabilities."

"Reporting, centralized dashboard, and bird's eye view of all vulnerabilities are the most valuable features."

"Fortify WebInspect is a scalable solution, it is good for a lot of applications."

More OpenText Dynamic Application Security Testing pros

"The solution's extensions really expand the capabilities and features offered by the installation."

"Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition."

"The most appreciated functionality of PortSwigger Burp Suite is its ability to perform brute force attacks automatically."

"The most valuable part of it was probably the ability to intercept and modify calls."

"The product is easy to use."

"The tool is loaded with many features that give us ROI."

"We are in the early stage of using the solution making it difficult to fully determine the best features. However, we have noticed the CMDB and device discovery features look valuable at this time."

"This tool helps identify vulnerabilities. We then provide the report to the developers, who address the issues identified automatically. Its most valuable feature is CI/CD integration."

More PortSwigger Burp Suite Enterprise Edition pros

Cons

"There are some file extensions, like .SER, that Fortify WebInspect doesn't scan."

"It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application."

"The scanner could be better."

"It took us between eight and ten hours to scan an entire site, which is somewhat slow and something that I think can be improved."

"The solution needs better integration with Microsoft's Azure Cloud or an extension of Azure DevOps. In fact, it should better integrate with any cloud provider. Right now, it's quite difficult to integrate with that solution, from the cloud perspective."

"Fortify WebInspect could improve user-friendliness. Additionally, it is very bulky to use."

"Fortify WebInspect's shortcoming stems from the fact that it is a very expensive product in Korea, which makes it difficult for its potential customers to introduce the product in their IT environment."

"Lately, we've seen more false negatives."

More OpenText Dynamic Application Security Testing cons

"It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively."

"PortSwigger Burp Suite Enterprise Edition should incorporate a static code analysis feature. One main issue we encounter is false positives. False positives can be challenging for developers."

"From my personal experience, the solution's performance could be improved."

"Scalability could be better."

"There's definitely room for improvement. There are lots of false positives. Once I do the manual assessment, it comes as a false positive. They need to improve the Enterprise Edition, especially the part that gives false positives."

"The stability of the scans could be improved."

"There are features or functionality missing, but PortSwigger Burp Suite Enterprise Edition does try to update frequently to alleviate the shortcomings."

"The solution is a bit expensive."

More PortSwigger Burp Suite Enterprise Edition cons

Pricing and Cost Advice

"Fortify WebInspect is a very expensive product."

"This solution is very expensive."

"The price is okay."

"Our licensing is such that you can only run one scan at a time, which is inconvenient."

"It’s a fair price for the solution."

"The pricing is not clear and while it is not high, it is difficult to understand."

"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."

"The tool's pricing is reasonable and costs around 400 dollars per year."

"For Professional, it's about $400 per year."

"PortSwigger Burp Suite Enterprise Edition is neither a cheap nor an expensive product. PortSwigger Burp Suite Enterprise Edition is a good tool for companies."

"PortSwigger Burp Suite Enterprise Edition is expensive compared to other solutions."

"Although the solution can be a bit expensive for small companies, its pricing is fairly reasonable for its capabilities."

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

859,129 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Government

14%

Manufacturing Company

12%

Computer Software Company

12%

Financial Services Firm

21%

Computer Software Company

12%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Fortify WebInspect?

The solution's technical support was very helpful.

What is your experience regarding pricing and costs for Fortify WebInspect?

The price of Fortify WebInspect is high, with the cost depending on the number of virtual users. It is approximately 25% higher than other solutions.

What needs improvement with Fortify WebInspect?

The main area for improvement in Fortify WebInspect is the price, as it is too high compared to the market rate. The cost of the license depends on the number of virtual users and, in comparison to...

What do you like most about PortSwigger Burp Suite Enterprise Edition?

Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition.

What is your experience regarding pricing and costs for PortSwigger Burp Suite Enterprise Edition?

I am using the Community Edition, which is free, however, I understand there might be extra expenses for additional features or services.

What needs improvement with PortSwigger Burp Suite Enterprise Edition?

It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively.

PortSwigger Burp Suite Professional vs OpenText Dynamic Application Security Testing

Comparisons

Compared 20% of the time

OWASP Zap vs OpenText Dynamic Application Security Testing

Compared 13% of the time

Acunetix vs OpenText Dynamic Application Security Testing

Compared 10% of the time

Qualys Web Application Scanning vs OpenText Dynamic Application Security Testing

Compared 9% of the time

Veracode vs OpenText Dynamic Application Security Testing

Compared 7% of the time

More OpenText Dynamic Application Security Testing Competitors

Acunetix vs PortSwigger Burp Suite Enterprise Edition

Compared 30% of the time

Tenable Vulnerability Management vs PortSwigger Burp Suite Enterprise Edition

Compared 8% of the time

Tenable Nessus vs PortSwigger Burp Suite Enterprise Edition

Compared 8% of the time

Rapid7 Metasploit vs PortSwigger Burp Suite Enterprise Edition

Compared 7% of the time

Rapid7 InsightAppSec vs PortSwigger Burp Suite Enterprise Edition

Compared 6% of the time

More PortSwigger Burp Suite Enterprise Edition Competitors

Product Reports

OpenText Dynamic Application Security Testing

Download OpenText Dynamic Application Security Testing product report

OpenText Dynamic Application Security Testing report

PortSwigger Burp Suite Enterprise Edition

Download PortSwigger Burp Suite Enterprise Edition product report

PortSwigger Burp Suite Enterprise Edition report

Also Known As

Micro Focus WebInspect, WebInspect

No data available

Overview

OpenText Dynamic Application Security Testing offers robust scalability, ease of use, and high accuracy in scanning, making it a valuable tool for enterprises.

This security testing platform is known for its centralized dashboard, guided scans, and comprehensive reporting. It integrates seamlessly with tools like Fortify code scanner and supports extensive vulnerability detection and analysis, enhancing efficiency in security management. Despite its strengths, users suggest improvements in cloud integration, cost-effectiveness, and installation processes. Faster scans, reduced false positives, and improved mobile testing features are also desired.

What are the key features of OpenText Dynamic Application Security Testing?

Scalability: Easily adapts to changing enterprise needs.
Ease of Use: User-friendly interface with guided scans.
Comprehensive Reporting: Detailed vulnerability analysis and reporting.
Integration Capabilities: Works with Fortify code scanner and user authentication scanning.
Wide Vulnerability Detection: Identifies extensive security vulnerabilities.

What benefits should users expect from reviews?

Efficient Vulnerability Management: Streamlines security management in development environments.
Detailed Analysis: Provides in-depth insights into security issues.
Quick Setup: Easy to deploy within existing systems.
Enterprise Preference: Supports enterprise environments efficiently.

In industries like BFSI, OpenText Dynamic Application Security Testing is employed for performance network application testing, dynamic and static application security testing, and code checks. Security and QA teams use it in development processes to ensure application security prior to release, proving integral in both enterprise and testing environments.

OpenText

Burp Suite Enterprise Edition is an automated web vulnerability scanner, designed to enable enterprises to scale security across their web portfolios and achieve DevSecOps. Automate trusted Burp scans, integrate web security testing with development, and free your application security to support software development.

PortSwigger

Sample Customers

Aaron's

Nasa, Disney, Dow Jones, Iberia Bank, IBM, Ernest and Young, Apple, Ryanair, Thyssenkrupp, Delivery Hero

OpenText Dynamic Application Security Testing vs. PortSwigger Burp Suite Enterprise Edition