Fortify by OpenText vs. Tenable Nessus

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Fortify by OpenText
Score 9.4 out of 10
N/A
An AppSec solution formerly from Micro Focus, spanning SCA, SAST and DAST that supports the breadth and management of any application portfolio, used to secure code. Features API discovery and testing for any application, throughout the software lifecycle.N/A
Tenable Nessus
Score 8.3 out of 10
N/A
Tenable headquartered in Columbia offers Nessus, a vulnerability scanning and security assessment solution used to analyze an entity's security posture, vulnerability testing, and provide configuration assessments.
$2,790
Pricing
Fortify by OpenTextTenable Nessus
Editions & Modules
No answers on this topic
1 Year
$2,790.00
1 Year + Advanced Support
$3,190.00
2 Years
$5,440.00
2 Years + Advanced Support
$6,240.00
3 Years
$7,951.00
3 Years + Advanced Support
$9,151.00
Offerings
Pricing Offerings
Fortify by OpenTextTenable Nessus
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details——
More Pricing Information
Community Pulse
Fortify by OpenTextTenable Nessus
Top Pros

No answers on this topic

Top Cons

No answers on this topic

Features
Fortify by OpenTextTenable Nessus
Threat Intelligence
Comparison of Threat Intelligence features of Product A and Product B
Fortify by OpenText
-
Ratings
Tenable Nessus
5.1
1 Ratings
47% below category average
Network Analytics00 Ratings8.21 Ratings
Threat Recognition00 Ratings4.51 Ratings
Vulnerability Classification00 Ratings8.21 Ratings
Automated Alerts and Reporting00 Ratings1.01 Ratings
Threat Analysis00 Ratings5.51 Ratings
Threat Intelligence Reporting00 Ratings7.31 Ratings
Automated Threat Identification00 Ratings1.01 Ratings
Vulnerability Management Tools
Comparison of Vulnerability Management Tools features of Product A and Product B
Fortify by OpenText
-
Ratings
Tenable Nessus
8.0
1 Ratings
6% below category average
IT Asset Realization00 Ratings9.11 Ratings
Authentication00 Ratings9.11 Ratings
Configuration Monitoring00 Ratings9.11 Ratings
Web Scanning00 Ratings4.51 Ratings
Vulnerability Intelligence00 Ratings8.21 Ratings
Best Alternatives
Fortify by OpenTextTenable Nessus
Small Businesses
GitLab
GitLab
Score 8.9 out of 10
ThreatDown, powered by Malwarebytes
ThreatDown, powered by Malwarebytes
Score 8.8 out of 10
Medium-sized Companies
GitLab
GitLab
Score 8.9 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
Enterprises
GitLab
GitLab
Score 8.9 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Fortify by OpenTextTenable Nessus
Likelihood to Recommend
9.8
(5 ratings)
8.5
(7 ratings)
Likelihood to Renew
10.0
(1 ratings)
9.1
(1 ratings)
Usability
-
(0 ratings)
9.7
(2 ratings)
Support Rating
10.0
(1 ratings)
7.1
(4 ratings)
User Testimonials
Fortify by OpenTextTenable Nessus
Likelihood to Recommend
OpenText
SDLC deployment is simple. simple to use The coverage is thorough and complete as a DAST product.
Read full review
Tenable
Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.
Read full review
Pros
OpenText
  • Detection of vulnerabilities
  • Scanning pipelines
  • Integration is super easy
  • Scanned cloud based applications
Read full review
Tenable
  • With Nessus we can find the missing critical patches for a server or workstations.
  • Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up.
  • Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties.
  • Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation.
Read full review
Cons
OpenText
  • Reporting could be better
  • Can be an involved setup if your organization is not using common build tools
  • Users get spammed with a lot of email updates from the service
Read full review
Tenable
  • Could use an upgrade within reports.
  • Scans can take a long time to complete. Have to break them down in small sections.
Read full review
Likelihood to Renew
OpenText
Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.
Read full review
Tenable
Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.
Read full review
Usability
OpenText
No answers on this topic
Tenable
It's very much a plug and play application that the user can go into with limited knowledge and set-up scans in minutes.
Read full review
Support Rating
OpenText
Always receive excellent support from the vendor. No issues there.
Read full review
Tenable
I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.
Read full review
Alternatives Considered
OpenText
Fortify Application Defender is a little more timely and upfront with a lot of their information on cyber security. we like what they provide and how they communicate with our users. I think they have a good understanding and practice in their field. they seem best suited for us and the best fit.
Read full review
Tenable
Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.
Read full review
Return on Investment
OpenText
  • DevSecOps helped in reducing efforts
  • License cost was less
  • We could roll out double the count of applications with implementation of WebInspect
Read full review
Tenable
  • Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
  • The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
  • Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.
Read full review
ScreenShots