Try our new research platform with insights from 80,000+ expert users
OpenText Core Application Security Logo

OpenText Core Application Security pros and cons

Vendor: OpenText
4.0 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

OpenText Core Application Security offers comprehensive support for various programming languages and easily integrates with development tools through API support, facilitating seamless integration in diverse environments.
Its detailed reporting and ability to perform deep and efficient scanning allow users to efficiently identify and address security vulnerabilities within applications.
The automated scanning feature and CI/CD integration streamline the process of detecting vulnerabilities in code, enhancing the development process while maintaining security standards.
The IT operations and non-coders can utilize OpenText Core Application Security, as it provides comprehensive information pinpointing exactly where issues are located, promoting ease of use for all users.
Speed, scalability, and cloud-based accessibility make OpenText Core Application Security an effective tool for detecting vulnerabilities early in the software development lifecycle and offering valuable insights into application security.

CONS

Reporting capabilities need improvement, including visually pleasing features and more analytic views for enterprise applications.
Integration with bug tracking systems and CI/CD pipelines lacks flexibility and effectiveness, especially with platforms like GitLab and Jenkins.
There are frequent issues with false positives, causing disruptions and requiring manual inspection to verify vulnerability reports.
Technical support is inadequate, with slow responses and difficulty in resolving issues post-acquisition by Hewlett Packard.
Scanning processes are time-consuming and often inefficient with dependencies on specific environments like Windows Agents over Linux.
 

OpenText Core Application Security Pros review quotes

JL
Sr. Manager 5G & MEC (Edge) Strategy at Verizon
Aug 25, 2017
I don’t know of any other On-Demand enterprise solution like this one where we can load the details and within a few days, receive the results of intrusion attacks, and work with HP Security Experts when needed for clarification
it_user506661 - PeerSpot reviewer
Senior Lead at a computer software company with 1,001-5,000 employees
Aug 21, 2016
We identified a lot of security vulnerability much earlier in the development and could fix this well before the product was rolled out to a huge number of clients.
it_user512112 - PeerSpot reviewer
Technical Lead at a tech services company with 10,001+ employees
Sep 14, 2016
Audit workbench: for on-the-fly defect auditing.
Learn what your peers think about OpenText Core Application Security. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,082 professionals have used our research since 2012.
it_user692322 - PeerSpot reviewer
Digital Security Integration Lead at a non-tech company with 10,001+ employees
Jun 27, 2017
The quality of application security testing reduces risk and gives very few false positives.
MK
Application Security Specialist at a tech services company with 5,001-10,000 employees
Jan 11, 2018
The most important feature of the product is to follow today's technology fast, updated rules and algorithms (of the product).
EP
Professor at BitBrainery University
Apr 18, 2018
It has saved us a lot of time as we focus primarily on programming rather than tool operational work.
JM
Enterprise Systems Analyst at a manufacturing company with 10,001+ employees
Aug 14, 2018
One of the valuable features is the ability to submit your code and have it run in the background. Then, if something comes up that is more specific, you have the security analyst who can jump in and help, if needed.
NB
Senior Cyber Security Analyst at a financial services firm with 1,001-5,000 employees
Aug 16, 2018
It improves future security scans.
it_user625875 - PeerSpot reviewer
Director Consulting at a tech services company with 10,001+ employees
Oct 28, 2018
I do not remember any issues with stability.
reviewer1050960 - PeerSpot reviewer
CISO at a retailer with 1,001-5,000 employees
May 15, 2019
The solution scans our code and provides us with a dashboard of all the vulnerabilities and the criticality of the vulnerabilities. It is very useful that they provide right then and there all the information about the vulnerability, including possible fixes, as well as some additional documentation and links to the authoritative sources of why this is an issue and what's the correct way to deal with it.
 

OpenText Core Application Security Cons review quotes

JL
Sr. Manager 5G & MEC (Edge) Strategy at Verizon
Aug 25, 2017
With Rapid7 I utilized its reporting capabilities to deliver Client Reports within just a few minutes of checking the data. I believe that HP’s FoD Clients could sell more services to clients if HP put more effort into delivering visually pleasing reporting capabilities.
it_user506661 - PeerSpot reviewer
Senior Lead at a computer software company with 1,001-5,000 employees
Aug 21, 2016
The Visual Studio plugin seems to hang when a scan is run on big projects. I would expect some improvements there.
it_user512112 - PeerSpot reviewer
Technical Lead at a tech services company with 10,001+ employees
Sep 14, 2016
.NET code scanning is still dependent on building the code base before running any scan. Also, it's dependent on an IDE such as Visual Studio.
Learn what your peers think about OpenText Core Application Security. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,082 professionals have used our research since 2012.
it_user692322 - PeerSpot reviewer
Digital Security Integration Lead at a non-tech company with 10,001+ employees
Jun 27, 2017
New technologies and DevOps could be improved. Fortify on Demand can be slow (slower than other vendors) to support new technologies or new software versions.
MK
Application Security Specialist at a tech services company with 5,001-10,000 employees
Jan 11, 2018
The biggest deficiency is the integration with bug tracker systems. It might be better if the configuration screen presented for accessing the bug tracking systems could provide some flexibility.
EP
Professor at BitBrainery University
Apr 18, 2018
It lacks of some important features that the competitors have, such as Software Composition Analysis, full dead code detection, and Agile Alliance's Best Practices and Technical Debt.
JM
Enterprise Systems Analyst at a manufacturing company with 10,001+ employees
Aug 14, 2018
It's still a little bit too complex for regular developers. It takes a little bit more time than usual. I know static code scan is not the main focus of the tool, but the overall time span to scan the code, and even to set up the code scanning, is a bit overwhelming for regular developers.
NB
Senior Cyber Security Analyst at a financial services firm with 1,001-5,000 employees
Aug 16, 2018
Sometimes when we run a full scan, we have a bunch of issues in the code. We should not have any issues.
it_user625875 - PeerSpot reviewer
Director Consulting at a tech services company with 10,001+ employees
Oct 28, 2018
There were some regulated compliances, which were not there.
reviewer1050960 - PeerSpot reviewer
CISO at a retailer with 1,001-5,000 employees
May 15, 2019
Primarily for a complex, advanced website, they don't really understand some of the functionalities. So for instance, they could tell us that there is a vulnerability because somebody could possibly do something, but they don't really understand the code to realize that we actually negate that vulnerability through some other mechanism in the program. In addition, the technical support is just not there. We have open tickets. They don't respond. Even if they respond, we're not seeing eye to eye. As the company got sold and bought, the support got worse.