FOSSA vs. Fortify by OpenText

The only issue we have had is sometimes the web app is too slow, and that causes issues with us wanting to continue to use FOSSA over going with another tool. That is the only problem. I noticed it happened more recently, but if that is solved now or will be solved, I would 100% recommend this tool to anyone!

Incentivized

SDLC deployment is simple. simple to use The coverage is thorough and complete as a DAST product.

Incentivized

• Setup of tool.
• Speed of scans.
• Automated emails with reports.

Incentivized

• Detection of vulnerabilities
• Scanning pipelines
• Integration is super easy
• Scanned cloud based applications

Incentivized

• Interface for loading results can be slow, this is the #1 issue we have faced.
• Speed of scans could be improved.

Incentivized

• Reporting could be better
• Can be an involved setup if your organization is not using common build tools
• Users get spammed with a lot of email updates from the service

Incentivized

Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.

Incentivized

Never needed support but the chat and help seem forefront of the app!

Incentivized

Always receive excellent support from the vendor. No issues there.

Incentivized

BlackDuck and Synk

Incentivized

Fortify Application Defender is a little more timely and upfront with a lot of their information on cyber security. we like what they provide and how they communicate with our users. I think they have a good understanding and practice in their field. they seem best suited for us and the best fit.

Incentivized

• Hard to measure the ROI, but no doubt having licenses be above board is fantastic for protection of your software.
• Caused developers to make more informed decisions.

Incentivized

• DevSecOps helped in reducing efforts
• License cost was less
• We could roll out double the count of applications with implementation of WebInspect

Incentivized