Fortify by OpenText vs. Tenable Vulnerability Management

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Fortify by OpenText
Score 9.4 out of 10
N/A
An AppSec solution formerly from Micro Focus, spanning SCA, SAST and DAST that supports the breadth and management of any application portfolio, used to secure code. Features API discovery and testing for any application, throughout the software lifecycle.N/A
Tenable Vulnerability Management
Score 8.9 out of 10
N/A
Vulnerability management specialist Tenable offers their cloud application and container security platform Tenable Web App Scanning (formerly Tenable.io), a vulnerability management tool that emphasizes visibility of web applications, automatic scanning, and a unified view of cloud infrastructure and possible inconsistencies indicating a vulnerability.N/A
Pricing
Fortify by OpenTextTenable Vulnerability Management
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
Fortify by OpenTextTenable Vulnerability Management
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
Fortify by OpenTextTenable Vulnerability Management
Considered Both Products
Fortify by OpenText
Chose Fortify by OpenText
When compared to Insight Appsec, Focus Fortify WebInspect performs better in terms of speed, integration, and detection capabilities. The variety of vulnerabilities it detected as being against Insight Appsec is what I appreciated the most. In addition to detecting …
Tenable Vulnerability Management

No answer on this topic

Top Pros

No answers on this topic

Top Cons

No answers on this topic

Features
Fortify by OpenTextTenable Vulnerability Management
Threat Intelligence
Comparison of Threat Intelligence features of Product A and Product B
Fortify by OpenText
-
Ratings
Tenable Vulnerability Management
9.6
1 Ratings
16% above category average
Network Analytics00 Ratings9.01 Ratings
Threat Recognition00 Ratings10.01 Ratings
Vulnerability Classification00 Ratings10.01 Ratings
Automated Alerts and Reporting00 Ratings10.01 Ratings
Threat Analysis00 Ratings9.01 Ratings
Threat Intelligence Reporting00 Ratings9.01 Ratings
Automated Threat Identification00 Ratings10.01 Ratings
Vulnerability Management Tools
Comparison of Vulnerability Management Tools features of Product A and Product B
Fortify by OpenText
-
Ratings
Tenable Vulnerability Management
8.8
1 Ratings
4% above category average
IT Asset Realization00 Ratings8.01 Ratings
Authentication00 Ratings8.01 Ratings
Configuration Monitoring00 Ratings9.01 Ratings
Web Scanning00 Ratings9.01 Ratings
Vulnerability Intelligence00 Ratings10.01 Ratings
Best Alternatives
Fortify by OpenTextTenable Vulnerability Management
Small Businesses
GitLab
GitLab
Score 8.9 out of 10
ThreatDown, powered by Malwarebytes
ThreatDown, powered by Malwarebytes
Score 8.8 out of 10
Medium-sized Companies
GitLab
GitLab
Score 8.9 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
Enterprises
GitLab
GitLab
Score 8.9 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Fortify by OpenTextTenable Vulnerability Management
Likelihood to Recommend
9.8
(5 ratings)
8.9
(6 ratings)
Likelihood to Renew
10.0
(1 ratings)
9.0
(1 ratings)
Support Rating
10.0
(1 ratings)
8.8
(2 ratings)
User Testimonials
Fortify by OpenTextTenable Vulnerability Management
Likelihood to Recommend
OpenText
SDLC deployment is simple. simple to use The coverage is thorough and complete as a DAST product.
Read full review
Tenable
I've been using this product since it began as an open source product, I really like it and for the money, I think it's probably the best choice for most companies who need a product like this. Over the years I've seen the interface change quite a bit and sometimes I think it's a bit unclear how to do certain things and the different packages can be confusing, these are the only reasons I'm giving it a 9 instead of a 10.
Read full review
Pros
OpenText
  • Detection of vulnerabilities
  • Scanning pipelines
  • Integration is super easy
  • Scanned cloud based applications
Read full review
Tenable
  • Setup of the internal scanner was fairly simple and straight forward.
  • An update came out for the internal scanner that allows you to add an Internal Certificate Authority for lookup.
  • Has automated reporting to keep executives and compliance departments informed.
  • Internal scanner can be configured to auto-update itself.
  • "Recast Rules" allows your organization to redefine a vulnerabilities' classification, if it is not applicable or your disagree.
  • External PCI scans allow you to remediate before submitting to Tenable.io for review.
  • Tenable.io staff was very patient and helpful. They provided some limited guidance with remediation.
  • Internal and External scans can be automated. schedule for the automated scans is very granular.
Read full review
Cons
OpenText
  • Reporting could be better
  • Can be an involved setup if your organization is not using common build tools
  • Users get spammed with a lot of email updates from the service
Read full review
Tenable
  • Expensive - You do pay a slight premium for the best product in the space.
  • Asset management is difficult to work with if you have a lot of asset turnover, the license can be ''held'' for 3-6 months after the asset is gone from your environment.
Read full review
Likelihood to Renew
OpenText
Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.
Read full review
Tenable
We like to renew tenable each year we have had it so far.
Read full review
Support Rating
OpenText
Always receive excellent support from the vendor. No issues there.
Read full review
Tenable
Support is usually really great at walking you through any steps you need to take when you get stuck on something. There are a few false positives and errors that have come up over the years that required their help to get through. Unfortunately, the steps required to diagnose some problems are more tedious than I think should be necessary. (IE: SQL instances can throw errors that clog up your logs because one plugin affects it in a certain way. The process to diagnose this is to watch timestamps of plugins in a log while monitoring the SQL logs at the same time and using your best guess as to what is causing it.)
Read full review
Alternatives Considered
OpenText
Fortify Application Defender is a little more timely and upfront with a lot of their information on cyber security. we like what they provide and how they communicate with our users. I think they have a good understanding and practice in their field. they seem best suited for us and the best fit.
Read full review
Tenable
Tenable.io has a comparable set of features, with excellent support and a competitive price. After less than desirable experiences with another company, we moved to Tenable and haven't looked back since.
Read full review
Return on Investment
OpenText
  • DevSecOps helped in reducing efforts
  • License cost was less
  • We could roll out double the count of applications with implementation of WebInspect
Read full review
Tenable
  • Since this is a requirement for our PCI compliance and the cost is relatively low, the ROI isn't really something we need to think too much about, Tenable's pricing is fair and affordable.
Read full review
ScreenShots