Fortify by OpenText vs. Trustwave App Scanner (discontinued)

SDLC deployment is simple. simple to use The coverage is thorough and complete as a DAST product.

Incentivized

This scanner is helpful for financial services apps that need to prove their credibility to users, and in an environment where users might not be comfortable providing their PII.

Incentivized

• Detection of vulnerabilities
• Scanning pipelines
• Integration is super easy
• Scanned cloud based applications

Incentivized

• Show that our app is credible
• Give users the confidence to do business on our app

Incentivized

• Reporting could be better
• Can be an involved setup if your organization is not using common build tools
• Users get spammed with a lot of email updates from the service

Incentivized

• Integration requires the development team
• Takes up valuable real estate within the app
• Requires bandwidth and may slow down primary functions

Incentivized

Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.

Incentivized

Always receive excellent support from the vendor. No issues there.

Incentivized

Fortify Application Defender is a little more timely and upfront with a lot of their information on cyber security. we like what they provide and how they communicate with our users. I think they have a good understanding and practice in their field. they seem best suited for us and the best fit.

Incentivized

These products are similar in nature. They all tend to do the same thing, in a similar way. Just need to watch for integration problems and consumer trust issues.

Incentivized

• DevSecOps helped in reducing efforts
• License cost was less
• We could roll out double the count of applications with implementation of WebInspect

Incentivized

• Increases usage of mobile devices
• Reduces the need for live client services
• Improves user conference

Incentivized