OpenText Dynamic Application Security Testing vs Snyk comparison

OpenText Dynamic Applicatio...

Read 53 Snyk reviews

40,763 Views
4,484 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 11, 2026

OpenText Dynamic Application Security Testing and Snyk are competitive solutions in the application security domain. OpenText DAST has advantages in pricing and support, while Snyk is preferred for its robust feature set and perceived value.

Features: OpenText DAST offers comprehensive scanning capabilities, detailed vulnerability reports, and strong support for enterprise environments. Snyk provides advanced integration options, a robust open-source vulnerability scanning tool, and seamless integration into DevSecOps workflows.

Room for Improvement: OpenText DAST could enhance its integration with modern development tools, improve performance speed, and expand the customization of its reporting features. Snyk can improve by expanding its vulnerability database, adding more detailed reporting functionalities, and lowering on-premise deployment costs.

Ease of Deployment and Customer Service: OpenText DAST provides a straightforward deployment process with excellent customer support. Snyk is praised for its flexible and easy-to-use deployment, with extensive integration options and outstanding customer service, offering quick resolutions.

Pricing and ROI: OpenText DAST is noted for its competitive pricing and tangible ROI, making it a cost-effective choice for budget-conscious organizations. Snyk, while having a higher initial cost, offers faster time-to-value through deep integrations and higher overall satisfaction.

To learn more, read our detailed OpenText Dynamic Application Security Testing vs. Snyk Report (Updated: September 2026).

OpenText Dynamic Application Security Testing vs. Snyk

September 2026

Download the complete report

Helped 920,939 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

OpenText Dynamic Applicatio...

Ranking in DevSecOps

9th

Average Rating

7.2

Reviews Sentiment

6.1

Number of Reviews

Ranking in other categories

Dynamic Application Security Testing (DAST) (4th)

Snyk

Ranking in DevSecOps

4th

Average Rating

8.2

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Application Performance Monitoring (APM) and Observability (19th), Application Security Tools (7th), Static Application Security Testing (SAST) (5th), Container Security (7th), Software Composition Analysis (SCA) (1st), Cloud Security Posture Management (CSPM) (14th), Application Security Posture Management (ASPM) (1st), AI Security (10th)

Mindshare comparison

As of November 2026, in the DevSecOps category, the mindshare of OpenText Dynamic Application Security Testing is 6.6%, up from 5.8% compared to the previous year. The mindshare of Snyk is 17.0%, down from 22.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

DevSecOps Mindshare Distribution
Product	Mindshare (%)
Snyk	17.0%
OpenText Dynamic Application Security Testing	6.6%
Other	76.4%

DevSecOps

Featured Reviews

ArnabPaul

Cyber Security Consultant at a tech vendor with 10,001+ employees

Enhancements in manual testing align with reporting and integration features

WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produces minimal findings, necessitating manual verification. The solution offers customization features for crawling and vulnerability detection. It includes various security frameworks and allows selection of specific vulnerability types to audit, such as OWASP Top 10 or JavaScript-based vulnerabilities. When working with APIs, we can select OWASP API Top 10. The tool also supports custom audit features by combining different security frameworks. For on-premises deployment, the setup is complex, particularly regarding SQL server configuration. Unlike Burp Suite or OpenText Dynamic Application Security Testing, which have simpler setup processes, WebInspect requires SQL server setup to function.

Read full review

Abhishek-Goyal

Software Engineer at a computer software company with 11-50 employees

Improves security posture by actively reducing critical vulnerabilities and guiding remediation

Snyk's main features include open-source vulnerability scanning, code security, container security, infrastructure as code security, risk-based prioritization, development-first integration, continuous monitoring and alerting, automation, and remediation. The best features I appreciate are the vulnerability checking, vulnerability scanning, and code security capabilities, as Snyk scans all open-source dependencies for known vulnerabilities and helps with license compliance for open-source components. Snyk integrates into IDEs, allowing issues to be caught as they appear in the code dynamically and prioritizes risk while providing remediation advice. Snyk provides actionable remediation advice on where vulnerabilities can exist and where code security is compromised, automatically scanning everything and providing timely alerts. Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients. Snyk has helped reduce vulnerabilities significantly. Initially, the repository had 17 to 31 critical and high vulnerabilities, but Snyk has helped manage them down to just five vulnerabilities, which are now lower and not high or critical.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"My experience with technical support has been good."

"Reporting, centralized dashboard, and bird's eye view of all vulnerabilities are the most valuable features."

"The transaction recorder within WebInspect is easy to use, which is valuable for our team."

"It's a well-known platform for doing dynamic application scanning."

"I'm sorry, but there is no review content provided to extract a quote from."

"The tool provides comprehensive vulnerability assessments which help ensure our deliverables are as free from vulnerabilities as possible. It has also streamlined our web application vulnerability assessments, assisting us in delivering secure applications to our clients."

"The solution's technical support was very helpful."

"It is scalable and very easy to use."

More OpenText Dynamic Application Security Testing pros

"We use Snyk to check vulnerabilities and rectify potential leaks in GitHub."

"The CLI feature is quite useful because it gives us a lot of flexibility in what we want to do. If you use the UI, all the information is there and you can see what Snyk is showing you, but there is nothing else that you can change. However, when you use the CLI, then you can use commands and can get the output or response back from Snyk. You can also take advantage of that output in a different way. For the same reason, we have been using the CLI for the hard gate in the pipeline: Obtain a particular CDSS score for vulnerability. Based on that information, we can then decide if we want to block or allow the build. We have more flexibility if we use the CLI."

"We have hundreds of source code repositories, and Snyk scans them in minutes (it just looks at package management files to identify the dependency tree), Snyk uses the same infrastructure to scan for all customers on the cloud which gives it lots of scalability opportunities compared to some other vendors where the software is installed on-prem or on a dedicated instance which makes the software pricy and limited."

"Snyk categorizes the level of vulnerability into high, medium, and low, which helps organizations prioritize which issues to tackle first."

"From the software composition analysis perspective, it first makes sure that we understand what is happening from a third-party perspective for the particular product that we use. This is very difficult when you are building software and incorporating dependencies from other libraries, because those dependencies have dependencies and that chain of dependencies can go pretty deep. There could be a vulnerability in something that is seven layers deep, and it would be very difficult to understand that is even affecting us. Therefore, Snyk provides fantastic visibility to know, "Yes, we have a problem. Here is where it ultimately comes from." It may not be with what we're incorporating, but something much deeper than that."

"We went from 15 vulnerabilities in it to four or five, and those four or five were un-upgradable and we were not affected by them."

"The most valuable feature is that they add a lot of their own information to the vulnerabilities. They describe vulnerabilities and suggest their own mitigations or version upgrades. The information was the winning factor when we compared Snyk to others. This is what gave it more impact."

"The solution's vulnerability database, in terms of comprehensiveness and accuracy, is very high-level. As far as I know, it's the best among their competitors."

More Snyk pros

Cons

"This solution is very expensive."

"The initial setup was complex."

"We have often encountered scanning errors."

"Our biggest complaint about this product is that it freezes up, and literally doesn't work for us."

"The solution needs better integration with Microsoft's Azure Cloud or an extension of Azure DevOps. In fact, it should better integrate with any cloud provider. Right now, it's quite difficult to integrate with that solution, from the cloud perspective."

"There are some file extensions, like .SER, that Fortify WebInspect doesn't scan."

"I would like WebInspect's scanning capability to be quicker."

"A localized version, for example, in Korean would be a big improvement to this solution."

More OpenText Dynamic Application Security Testing cons

"We would like to have upfront knowledge on how easy it should be to just pull in an upgraded dependency, e.g., even introduce full automation for dependencies supposed to have no impact on the business side of things. Therefore, we would like some output when you get the report with the dependencies. We want to get additional information on the expected impact of the business code that is using the dependency with the newer version. This probably won't be easy to add, but it would be helpful."

"Snyk is a premium-priced product, so it's kind of expensive. The big con that I find frustrating is when a company charges extra for single sign-on (SSO) into their SaaS app."

"You need to go to the tool, export it as a CSV, and then find it, which is ridiculous."

"All such tools should definitely improve the signatures in their database. Snyk is pretty new to the industry."

"Snyk has several limitations, including issues with Gradle, NPM, and Xcode, and trouble with AutoPR."

"The solution could improve the reports. They have been working on improving the reports but more work could be done."

"Then there's the issue of their support. It's not very good, to be honest, and it hasn't been the best experience to deal with them."

"Snyk can be improved on the reporting aspect regarding the traceability of SCA."

More Snyk cons

Pricing and Cost Advice

"Fortify WebInspect is a very expensive product."

"This solution is very expensive."

"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."

"It’s a fair price for the solution."

"The price is okay."

"The pricing is not clear and while it is not high, it is difficult to understand."

"Our licensing is such that you can only run one scan at a time, which is inconvenient."

"Pricing-wise, it is not expensive as compared to other tools. If you have a couple of licenses, you can scan a certain number of projects. It just needs to be attached to them."

"The price is good. Snyk had a good price compared to the competition, who had higher pricing than them. Also, their licensing and billing are clear."

"It is pretty expensive. It is not a cheap product."

"The price of the solution is expensive compared to other solutions."

"The solution is less expensive than Black Duck."

"The license model is based on the number of contributing developers. Snyk is expensive, for a startup company will most likely use the community edition, while larger companies will buy the licensed version. The price of Snyk is more than other SLA tools."

"We do have some missing licenses issues, especially with non-SPDX compliant one, but we expect this to be fixed soon"

"The product has good pricing."

More Snyk pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which DevSecOps solutions are best for your needs.

See recommendations

920,939 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Government

10%

Outsourcing Company

10%

Healthcare Company

Financial Services Firm

12%

Manufacturing Company

11%

Comms Service Provider

10%

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	20
Midsize Enterprise	11
Large Enterprise	24

Questions from the Community

What is your experience regarding pricing and costs for Fortify WebInspect?

While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs between $15,000 to $19,000. In comparison, Burp Suite costs approximately $500 to ...

What needs improvement with Fortify WebInspect?

What is your primary use case for Fortify WebInspect?

I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite from PortSwigger. For API testing, I use Postman with Burp Suite or WebInspect fo...

How does Snyk compare with SonarQube?

Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...

What needs improvement with Snyk?

There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...

What is your primary use case for Snyk?

I use Snyk ( /products/snyk-reviews ) in the DevOps pipeline to identify vulnerabilities before deploying the application. It integrates with Jenkins ( /products/jenkins-reviews ).

PortSwigger Burp Suite Professional vs OpenText Dynamic Application Security Testing

Comparisons

Compared 36% of the time

Invicti Web + API vs OpenText Dynamic Application Security Testing

Compared 7% of the time

Checkmarx One vs OpenText Dynamic Application Security Testing

Compared 6% of the time

Check Point WAF (formerly CloudGuard WAF) vs OpenText Dynamic Application Security Testing

Compared 4% of the time

Invicti vs OpenText Dynamic Application Security Testing

Compared 4% of the time

More OpenText Dynamic Application Security Testing Competitors

SonarQube vs Snyk

Compared 3% of the time

Black Duck SCA vs Snyk

Compared 1% of the time

Checkmarx One vs Snyk

Compared 1% of the time

JFrog Xray vs Snyk

Compared 1% of the time

Datadog vs Snyk

Compared 1% of the time

More Snyk Competitors

Product Reports

OpenText Dynamic Application Security Testing

October 2026

OpenText Dynamic Application Security Testing report

Download OpenText Dynamic Application Security Testing product report

Download Snyk product report

October 2026

Also Known As

Micro Focus WebInspect, WebInspect

Fugue, Snyk AppRisk

Overview

OpenText Dynamic Application Security Testing offers scalable, easy-to-use solutions for detecting vulnerabilities across web applications. Its features support user authentication, extensive reporting, and seamless integration with code scanners, making it a comprehensive tool for security analysis.

OpenText Dynamic Application Security Testing is a robust tool tailored for web application security. It features accurate vulnerability detection, a centralized dashboard, and capabilities for API testing and session management. Integration with Fortify enhances its performance, while support for web security testing includes crawling and auditing. However, some users find it resource-heavy with slow scanning processes and issues with authentication and Salesforce applications. The tool's high cost and licensing complexities have limited its reach in markets like Korea. Despite this, it remains a useful option for security and QA teams focused on identifying vulnerabilities in a range of environments, including Salesforce and Java-based applications.

What are the key features?

Scalability and ease of use: Supports a wide range of environments.
Accurate vulnerability detection: Offers comprehensive scans.
User authentication support: Enhances security procedures.
Comprehensive reporting: Provides detailed insights.
Centralized dashboard: Facilitates streamlined management.
API testing capabilities: Conducts thorough reviews of API security.
Session management: Offers advanced session tracking.
Integration with Fortify: Boosts scanning efficiency.
Support for web application security testing: Includes effective crawling and auditing.

What benefits should users look for?

Enhanced security: Identifies a broad spectrum of vulnerabilities.
Time-saving: Simplifies complex security testing processes.
Improved compliance: Aids in meeting industry standards.
Performance boost: Integration minimizes scanning time and errors.

OpenText Dynamic Application Security Testing is implemented in environments requiring robust security measures, especially in sectors using web, Salesforce, Java-based, and .NET applications. It aids teams in secure form processing and verification on designated portals, utilizing code scanning and API testing for thorough analysis.

OpenText

Snyk excels in integrating security within the development lifecycle, providing teams with an AI Trust Platform that combines speed with security efficiency, ensuring robust AI application development.

Snyk empowers developers with AI-ready engines offering broad coverage, accuracy, and speed essential for modern development. With AI-powered visibility and security, Snyk allows proactive threat prevention and swift threat remediation. The platform supports shifts toward LLM engineering and AI code analysis, enhancing security and development productivity. Snyk collaborates with GenAI coding assistants for improved productivity and AI application threat management. Platform extensibility supports evolving standards with API access and native integrations, ensuring comprehensive and seamless security embedding in development tools.

What are Snyk's standout features?

Simplicity and Integration: Easy to integrate across platforms like GitLab, GitHub, and Jira.
Comprehensive Vulnerability Database: Offers accurate reporting for effective vulnerability management.
Developer-Friendly Design: Supports multiple programming languages, appealing to developers.
Automation and Flexibility: Enhances workflow efficiency with automated capabilities.

What benefits can users expect?

Efficiency in Vulnerability Detection: Streamlines prioritization and remediation processes.
Cost-Effectiveness: Offers a competitive pricing model compared to alternatives.
Enhanced Workflow: Integration with DevOps tools improves development processes.

Industries leverage Snyk for security in CI/CD pipelines by automating checks for dependency vulnerabilities and managing open-source licenses. Its Docker and Kubernetes scanning capabilities enhance container security, supporting a proactive security approach. Integrations with platforms like GitHub and Azure DevOps optimize implementation across diverse software environments.

Sample Customers

Aaron's

StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief