Beyond Compare from Scooter Software headquartered in Madison is a utility for comparing different version of documents and seeing the differences. It also allows changes to be merged and synchronized.
N/A
Fortify by OpenText
Score 9.0 out of 10
N/A
An AppSec solution formerly from Micro Focus, spanning SCA, SAST and DAST that supports the breadth and management of any application portfolio, used to secure code. Features API discovery and testing for any application, throughout the software lifecycle.
Beyond Compare is extremely good at the task of comparisons, whether that is text file comparisons or folder comparisons. It does a great job of easily highlighting the differences for users, and giving them the option of merging (in the case of text files) or synchronizing (in the case of folders.) In either case, no one on my team has ever had any reason to reach for another different tool.
It is best suited for runtime application security scanning and very useful for automation. You can seemlessly integrate with pipeline for dynamic scans. Cloud based apps can also be scanned for vulnerabilities, cross site scripting attacks. Basically all OWASP TOP 10. It is less appropriate to use if you have serverless architecture
Upsource is the best review tool we've found but it still has some flaws. Notably, it makes reviewing small and quick changes less convenient than they need to be, and diff viewing (especially collaboratively) can be tedious.
It does handle larger, iterative reviews well. Especially when using a feature branch, Upsource will track that branch and automatically add all commits to the review. You can then review the branch as a whole, or look at a subset of diffs.
For date formatting discrepancies the software does not automatically mark the dates as equivalent; for instance ‘2019/10/15’ vs. ‘15-OCT-2019’. This would be considered a difference.
The columns/report must be ordered similarly. If extra data is available in one file, it should be removed or extra rows will be marked as differences.
For spreadsheet comparison, the user must save the file on the proper tab and then “recompare” within the tool. There is no way to switch between sheets in the software.
Creating and closing reviews isn't as quick as it could be. You must create a review, assign reviewers, approve and close. I wish there would be a quick review-approve-close for a commit where the change is simple and doesn't require multiple review iterations.
Web based interface can be clunky, especially when looking at big diffs side-by-side
JetBrains IDE integration is somehow less convenient than going using it in browser.
Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.
Again, given the intuitive nature of this program, there is barely any learning curve needed. It is simple, reliable, accurate, and just one of those tools you always have with you and rarely think about until you don't have it. Then it is a case of OMG what was I thinking? This program is just very easy to use, and that makes it more valuable to me than some of my other software tools that cost significantly more.
It is a cloud-based platform which can provide us a very useful and unique features like Application Assessment, Scans, Vulnerability Test, Comprehensive Reporting, Monitoring, etc. Fortify by Open Text is also outstanding in various parameters for the support and integration and it is highly adaptable in various DevOps Program where you need secure app testing with all given features.
I have never needed support for this product other than learning how to use a new feature I was not familiar with. User forums and user groups that have used this product for their own purposes have always sufficed for anything that I needed help using with the product. Some of the features could be a little better outlined, but overall very easy to use.
We've tried many: Code Compare, Meld, UltraCompare, and WinMerge. None of them have the depth of features and speed to handle the work we throw at Beyond Compare. The multi-tabbed interface allows us to sync multiple servers at the same time. It understands multiple file types, metadata, and encodings. It's the best tool for the job.
Fortify Application Defender is a little more timely and upfront with a lot of their information on cyber security. we like what they provide and how they communicate with our users. I think they have a good understanding and practice in their field. they seem best suited for us and the best fit.
Compared to the other tools we evaluated, Upsource was the only tool that allowed distinct reviews without needing explicit pull requests while still being able to go in-depth when required. The diff viewer is serviceable and better than the alternatives, as well, especially the side-by-side viewer.
