Try our new research platform with insights from 80,000+ expert users
OpenText Core Application Security Logo

OpenText Core Application Security pros and cons

Vendor: OpenText
4.0 out of 5

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

OpenText Core Application Security facilitates faster remediation cycles by enabling developers to quickly identify and address vulnerabilities.
It identifies security vulnerabilities early in the development process, allowing issues to be resolved before reaching the client stage.
The static code analysis features provide accurate results, minimizing false positives and enhancing risk reduction.
OpenText Core Application Security seamlessly integrates with various development platforms such as Microsoft Information Server and Jira, streamlining the developer's workflow.
Being cloud-based, OpenText Core Application Security requires no installation and is easily scalable, supporting a wide range of programming languages.

CONS

OpenText Core Application Security lacks some important features that competitors have, such as Software Composition Analysis and full dead code detection.
There are complaints about frequent false positives, complicating vulnerability assessments.
Scans are time-consuming, taking up to three to five days, and improvements are needed to reduce this timeframe.
Technical support is inadequate, with slow response times and issues connecting with technical or sales representatives.
The integration process in CI/CD pipelines and with GitHub or GitLab is underdeveloped and could be improved.
 

OpenText Core Application Security Pros review quotes

JL
Sr. Manager 5G & MEC (Edge) Strategy at Verizon
Aug 25, 2017
I don’t know of any other On-Demand enterprise solution like this one where we can load the details and within a few days, receive the results of intrusion attacks, and work with HP Security Experts when needed for clarification
it_user326421 - PeerSpot reviewer
Solution Security Architect with 1,001-5,000 employees
Oct 11, 2015
Excellent – from the PoC through setup and implementation; we received timely and knowledgeable support whenever we need it.
it_user362055 - PeerSpot reviewer
Senior Manager at a tech services company with 10,001+ employees
Dec 27, 2015
I think the most valuable feature is its ability to address the source code scanning and dynamic scanning in a known, correlated way.
Learn what your peers think about OpenText Core Application Security. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
884,873 professionals have used our research since 2012.
it_user399378 - PeerSpot reviewer
Director of Information Technology at a tech consulting company with 501-1,000 employees
Mar 3, 2016
It enforces source-code scanning, finding vulnerabilities in source code.
it_user441546 - PeerSpot reviewer
Information Security Lead Consultant & Application Security Specialist at a energy/utilities company with 1,001-5,000 employees
May 11, 2016
It's saved us a lot of time as we focus primarily on security consultancy work rather than tool operational work.
it_user455427 - PeerSpot reviewer
Development and Database Manager at a financial services firm with 501-1,000 employees
Jun 3, 2016
This identification provides us an advantage in that the service itself works to stay abreast and knowledgeable about emerging threats.
it_user488208 - PeerSpot reviewer
Specialist Master/Manager at a consultancy with 10,001+ employees
Aug 29, 2016
The static code analyzer provides views from a security perspective and it is easy to use compared to others.
it_user488193 - PeerSpot reviewer
System Engineer at a tech services company with 501-1,000 employees
Jul 22, 2016
HP Fortify is perfect for any company that creates their own applications or uses vendor-developed ones; it’s great for QA and development phases.
it_user506661 - PeerSpot reviewer
Senior Lead at a computer software company with 1,001-5,000 employees
Aug 21, 2016
We identified a lot of security vulnerability much earlier in the development and could fix this well before the product was rolled out to a huge number of clients.
it_user512112 - PeerSpot reviewer
Technical Lead at a tech services company with 10,001+ employees
Sep 14, 2016
Audit workbench: for on-the-fly defect auditing.
 

OpenText Core Application Security Cons review quotes

JL
Sr. Manager 5G & MEC (Edge) Strategy at Verizon
Aug 25, 2017
With Rapid7 I utilized its reporting capabilities to deliver Client Reports within just a few minutes of checking the data. I believe that HP’s FoD Clients could sell more services to clients if HP put more effort into delivering visually pleasing reporting capabilities.
it_user326421 - PeerSpot reviewer
Solution Security Architect with 1,001-5,000 employees
Oct 11, 2015
It needs to support more languages.
it_user362055 - PeerSpot reviewer
Senior Manager at a tech services company with 10,001+ employees
Dec 27, 2015
It could use better integration with the incident management processor.
Learn what your peers think about OpenText Core Application Security. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
884,873 professionals have used our research since 2012.
it_user399378 - PeerSpot reviewer
Director of Information Technology at a tech consulting company with 501-1,000 employees
Mar 3, 2016
Stability could use a little improvement as we've had some issues. It runs out of memory sometimes and uses a lot of resources.
it_user441546 - PeerSpot reviewer
Information Security Lead Consultant & Application Security Specialist at a energy/utilities company with 1,001-5,000 employees
May 11, 2016
It would be useful if they could integrate secure design reviews, security user stories in Fortify on Demand Portal, and also look for possible options to get just one view of risks for given services (Covering Application, Infrastructure, Pen. Test, etc.).
it_user455427 - PeerSpot reviewer
Development and Database Manager at a financial services firm with 501-1,000 employees
Jun 3, 2016
I find that while it does find a lot of legitimate threats, it tends to have a lot of false positives, and there are more false positives than I would like to see.
it_user488208 - PeerSpot reviewer
Specialist Master/Manager at a consultancy with 10,001+ employees
Aug 29, 2016
Technical support is 6/10. I find the Internet to be more helpful at times than their own tech support in finding answers.
it_user488193 - PeerSpot reviewer
System Engineer at a tech services company with 501-1,000 employees
Jul 22, 2016
The only thing that comes to mind regarding room for improvement are the security vulnerability updates.
it_user506661 - PeerSpot reviewer
Senior Lead at a computer software company with 1,001-5,000 employees
Aug 21, 2016
The Visual Studio plugin seems to hang when a scan is run on big projects. I would expect some improvements there.
it_user512112 - PeerSpot reviewer
Technical Lead at a tech services company with 10,001+ employees
Sep 14, 2016
.NET code scanning is still dependent on building the code base before running any scan. Also, it's dependent on an IDE such as Visual Studio.