Fortify by OpenText vs. Tripwire Enterprise

It is best suited for runtime application security scanning and very useful for automation. You can seemlessly integrate with pipeline for dynamic scans. Cloud based apps can also be scanned for vulnerabilities, cross site scripting attacks. Basically all OWASP TOP 10. It is less appropriate to use if you have serverless architecture

Incentivized

Tripwire Enterprise is great for hosting/data center environments and it greatly helps where console screenshots and reporting fill a lot of our client internal audit needs for security and change control.

Incentivized

• DAST Scanning
• API Scanning
• Less detection of false positive

Incentivized

• It allows us to track development changes for engineer accountability.
• Tripwire Enterprise also allows us to monitor changes/updates being done to our systems in our hosting centers.
• We use the software to track user access and critical system changes.

Incentivized

• Reporting could be better
• Can be an involved setup if your organization is not using common build tools
• Users get spammed with a lot of email updates from the service

Incentivized

• In previous versions the management console was a little hard to navigate in some respects.
• I'm sure this has changed over time but we hope the reporting system has gotten more granular.
• I really don't have to many cons for this product, I recommend it for every company I work for!

Incentivized

Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.

Incentivized

It is a cloud-based platform which can provide us a very useful and unique features like Application Assessment, Scans, Vulnerability Test, Comprehensive Reporting, Monitoring, etc. Fortify by Open Text is also outstanding in various parameters for the support and integration and it is highly adaptable in various DevOps Program where you need secure app testing with all given features.

Incentivized

Always receive excellent support from the vendor. No issues there.

Incentivized

Fortify Application Defender is a little more timely and upfront with a lot of their information on cyber security. we like what they provide and how they communicate with our users. I think they have a good understanding and practice in their field. they seem best suited for us and the best fit.

Incentivized

Honestly, I haven't used other products to do what Tripwire does, it's always my first recommendation.

Incentivized

• DevSecOps helped in reducing efforts
• License cost was less
• We could roll out double the count of applications with implementation of WebInspect

Incentivized

• Tripwire has been a positive business impact for us because of its trusted name. Our customers require software like Tripwire because they know their data and security concerns are in good hands when it's deployed.
• The ROI for Tripwire is also a positive for our business because of the time and man power saved in due diligence and reporting for our clients' internal auditing.

Incentivized