Try our new research platform with insights from 80,000+ expert users
Fortify Application Defender Logo

Fortify Application Defender pros and cons

Vendor: OpenText
3.9 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the category report

Prominent pros & cons

PROS

Fortify Application Defender effectively identifies security defects, enhancing overall application safety.
It improves code quality, ensuring organizations develop more robust software.
The real-time data analysis feature provides immediate insights into application performance and security concerns.
Its integration with WebInspect allows for dynamic application scanning and efficient rule automation.
The software composition analysis feature is particularly beneficial for .NET applications, helping to pinpoint and address library vulnerabilities.

CONS

Support for older compilers/IDEs is lacking.
Fortify Application Defender is quite expensive.
The time it takes to scan could be improved, as it can take hours compared to minutes in SonarQube.
Fortify Application Defender could benefit from supporting more code languages, such as GRAAS and Groovy.
Fortify Application Defender gives a lot of false positives, particularly for Python applications.
 

Fortify Application Defender Pros review quotes

BD
Principle Engineer at MTSI
Apr 9, 2018
Its ability to find security defects is valuable.
GM
Assistant Consultant at a logistics company with 10,001+ employees
Aug 22, 2019
The solution helped us to improve the code quality of our organization.
DP
DevOps Engineer at a energy/utilities company with 10,001+ employees
Mar 5, 2020
The most valuable feature is that it analyzes data in real-time.
Find out what your peers are saying about OpenText, SonarSource Sàrl, Checkmarx and others in Application Security Tools. Updated: January 2026.
881,082 professionals have used our research since 2012.
TH
Director of Security at Merito
Sep 21, 2020
The most valuable feature is the ability to automatically feed it rules what it's coupled with the WebInspect dynamic application scanning technology.
WW
System Quality Assurance Manager at AIS - Advanced Info Services Plc.
Sep 7, 2021
The information from Fortify Application Defender on how to fix and solve issues is very good compared to other solutions.
reviewer1142943 - PeerSpot reviewer
Business Development Specialist at a computer software company with 11-50 employees
Jan 4, 2022
We are able to provide out customers with a secure application after development. They are no longer left wondering if they are vulnerable to different threats within the market following deployment.
KP
Senior Manager Technical Operations at NeuStar
Jun 26, 2022
The most valuable features of Fortify Application Defender are the code packages that are default.
Saroj-Patnaik - PeerSpot reviewer
Software Development Engineer 3 at a consultancy with 10,001+ employees
Feb 13, 2023
Fortify Application Defender's most valuable features are machine learning algorithms, real-time remediation, and automatic vulnerability notifications.
HisaoOgata - PeerSpot reviewer
Department Manger at Hitachi Channel
May 24, 2023
The product saves us cost and time.
AS
Senior Security Analyst (AppSec) at ELETROBRAS
Apr 1, 2024
The tool's most valuable feature is software composition analysis. This feature works well with my .NET applications, providing a better understanding of library vulnerabilities.
 

Fortify Application Defender Cons review quotes

BD
Principle Engineer at MTSI
Apr 9, 2018
Support for older compilers/IDEs is lacking.
GM
Assistant Consultant at a logistics company with 10,001+ employees
Aug 22, 2019
The solution is quite expensive.
DP
DevOps Engineer at a energy/utilities company with 10,001+ employees
Mar 5, 2020
The workbench is a little bit complex when you first start using it.
Find out what your peers are saying about OpenText, SonarSource Sàrl, Checkmarx and others in Application Security Tools. Updated: January 2026.
881,082 professionals have used our research since 2012.
TH
Director of Security at Merito
Sep 21, 2020
The biggest complaint that I have heard concerns additional platform support because right now, it only supports applications that are written in .NET and Java.
WW
System Quality Assurance Manager at AIS - Advanced Info Services Plc.
Sep 7, 2021
The solution could improve the time it takes to scan. When comparing it to SonarQube it does it in minutes while in Fortify Application Defender it can take hours.
reviewer1142943 - PeerSpot reviewer
Business Development Specialist at a computer software company with 11-50 employees
Jan 4, 2022
The licensing can be a little complex.
KP
Senior Manager Technical Operations at NeuStar
Jun 26, 2022
Fortify Application Defender could improve by supporting more code languages, such as GRAAS and Groovy.
Saroj-Patnaik - PeerSpot reviewer
Software Development Engineer 3 at a consultancy with 10,001+ employees
Feb 13, 2023
Fortify Application Defender gives a lot of false positives.
HisaoOgata - PeerSpot reviewer
Department Manger at Hitachi Channel
May 24, 2023
The false positive rate should be lower.
AS
Senior Security Analyst (AppSec) at ELETROBRAS
Apr 1, 2024
I encountered many false positives for Python applications.