Name: Fortify by OpenText
Rating: 9 (22 reviews)
Author: OpenText

Help Desk

Web and Video Conferencing

Customer Support

Batch Management Software

Feature Management

Innovation Management

Product Lifecycle Management (PLM)

Development

Classroom Management

Education

Business Intelligence (BI)

Calendar

Collaboration

Digital Rights Management (DRM)

Enterprise Content Management

Statistical Analysis

Visitor Management

Enterprise

Accounting

Corporate Performance Management (CPM)

Digital Banking

Finance and Accounting

ACA Compliance

Applicant Tracking

Corporate Learning Management

HR Management

Leadership Development

Payroll

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

Access Gateways

Archiving

Cloud Storage

Configuration Management Databases

Disk Cloning

Email Encryption

Fraud Detection

Infrastructure-as-a-Service

Integration Platform as a Service (iPaaS)

Log Management

Network Performance Monitoring

Office Migration and Repair

SIP Trunking

Software Asset Management

Telecom Expense Management (TEM)

Vendor Risk Management

Virtual Data Room

Web Scraping

WiFi Hotspot

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Blogging

Content Management

Ecommerce Personalization

Email Marketing

Enterprise Marketing Management

Market Intelligence

Market Research

Marketing Automation

Social Media Management

Survey & Forms Building

Video Marketing

Web Analytics

Marketing

Job Site Management

Project Management

Waste Management

Writing and Proofreading Tools

Professional Services

Customer Onboarding

Customer Relationship Management (CRM)

Sales Performance Management

Sales

Fleet Management

Membership Management

Municipal

Rental Property Management

Roofing

Warranty Management

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

Black Duck Software Composition Analysis (SCA)

Synopsys

SonarQube Server

SonarSource Sarl

Coverity Static Analysis (SAST)

Veracode

Checkmarx

PortSwigger Burp Suite

PortSwigger Web Security

Tenable Nessus

Tenable

HCL AppScan

HCLSoftware

Tenable Vulnerability Management

Palo Alto Networks Prisma Cloud

Palo Alto Networks

### Vulnerability Detection and Management
Users across various reviews have consistently praised Micro Focus Fortify WebInspect for its robust vulnerability detection and management capabilities. Reviewers have highlighted the tool's effectiveness in detecting vulnerabilities, providing clear feedback on how to address them, and integrating smoothly into CI/CD pipelines for automated scanning. The tool's ability to identify OWASP Top 10 vulnerabilities, both in runtime applications and through static code analysis, has been particularly lauded. While some users mentioned minor challenges with customization and the submission process for static analysis, overall, the sentiment leans heavily towards the tool's strength in vulnerability detection and management. (Source Reviews: [1](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2022-12-12-10-01-15), [2](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2023-01-30-21-40-15), [3](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2022-06-14-12-00-33), [4](https://www.trustradius.com/reviews/fortify-on-demand-formerly-hp-fortify-on-demand-2019-12-08-10-59-45))

### Static Application Security Testing (SAST
Users generally praise Micro Focus Fortify WebInspect for its static code analysis capabilities and vulnerability reporting. However, there seems to be a mixed opinion among users regarding the ease of use and integration of the tool within their development processes. Some users find the static application security testing (SAST) features to be robust and effective in identifying vulnerabilities, while others express concerns about the complexity of setting up the tool and the level of expertise required to fully leverage its capabilities. (Source Reviews: [1](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2022-06-14-12-00-33), [2](https://www.trustradius.com/reviews/fortify-on-demand-formerly-hp-fortify-on-demand-2019-12-08-10-59-45))

### Dynamic Application Security Testing (DAST
Users generally find Micro Focus Fortify WebInspect's dynamic application security testing (DAST) capabilities to be highly efficient and effective. The tool is praised for its ability to scan ASP.NET applications quickly and accurately, providing detailed reports that can be customized to meet corporate requirements. Additionally, users appreciate the tool's integration with automation pipelines for seamless dynamic scans, especially for cloud-based applications vulnerable to OWASP Top 10 threats. However, some users note limitations when dealing with serverless architectures. Despite this, the overall sentiment towards Micro Focus Fortify WebInspect's DAST functionality remains positive, with users acknowledging its value in enhancing application security. (Source Reviews: [1](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2023-01-30-21-40-15), [2](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2022-12-12-10-01-15), [3](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2022-06-14-12-00-33), [4](https://www.trustradius.com/reviews/fortify-on-demand-formerly-hp-fortify-on-demand-2019-12-08-10-59-45))

### Application Security
Users generally praise Micro Focus Fortify WebInspect for its robust application security capabilities. Reviewers highlight the tool's effectiveness in detecting vulnerabilities in runtime applications, integrating smoothly with CI/CD pipelines for automation, and scanning cloud-based applications for potential risks. While some users suggest improvements in focusing on microservices and enhancing performance, overall, the consensus leans towards the tool being a valuable asset for enhancing application security measures. (Source Reviews: [1](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2022-12-12-10-01-15), [2](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2022-06-14-12-00-33), [3](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2023-01-30-21-40-15), [4](https://www.trustradius.com/reviews/fortify-application-defender-2021-09-13-11-11-20), [5](https://www.trustradius.com/reviews/fortify-on-demand-formerly-hp-fortify-on-demand-2019-12-08-10-59-45))

### Cloud-Based Application Security
Some users praise Fortify by Micro Focus for its ability to detect vulnerabilities and conduct thorough scans on cloud-based applications. They find the integration process to be straightforward and appreciate the ease of scanning pipelines. However, there are mixed opinions regarding its compatibility with serverless architecture. While some users find it suitable for runtime application security scanning and automation, others feel it may not be the best fit for certain architectural setups. (Source Reviews: [1](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2022-12-12-10-01-15), [2](https://www.trustradius.com/reviews/micro-focus-fortify-webinspect-2023-01-30-21-40-15))

Users have found the product to be a valuable tool for managing customer relationships and tracking interactions. It offers a comprehensive system that organizes customer information effectively, allowing users to stay updated on client needs and easily track communication history. The software has received positive feedback from reviewers for streamlining project management and facilitating collaboration among team members. It offers features such as task assignment, progress tracking, and file sharing, enhancing productivity for teams working on complex projects. Customers have reported increased efficiency in handling inventory and tracking sales with the product. Its inventory management functionality enables users to monitor stock levels, streamline order fulfillment, and generate accurate sales reports.

The product's user-friendly interface and intuitive navigation have been appreciated by users. It allows both new and experienced users to easily access desired features without confusion. The software's robust reporting capabilities have been highlighted by reviewers, providing users with insightful data analysis options for making informed business decisions. Users have also praised the product's reliability and stability, minimizing downtime and ensuring uninterrupted workflow. With customization options available, users can tailor the software to their specific business needs.

Reviewers have commended the product's integration capabilities with other software and platforms, resulting in enhanced productivity and data synchronization. Seamless integration with popular tools such as email clients, accounting software, and CRM systems eliminates manual data entry and ensures consistency across applications. The product's responsive customer support team has been helpful in resolving issues or answering queries satisfactorily according to customers' reports.

Users find the mobile app convenient and efficient for on-the-go access and management. It allows them to access important data, respond to inquiries, and stay connected with their teams even when away from their desks. This flexibility is particularly beneficial for those who require constant access to critical information while on the move.

Confusing User Interface: Several users have expressed frustration with the confusing and difficult-to-navigate user interface of the product. They have struggled to complete tasks efficiently due to a lack of clarity in the interface.

Unhelpful Customer Support: A number of reviewers have found the customer support provided by the company to be unhelpful. When facing issues or seeking guidance, they did not receive the assistance they needed, leading to dissatisfaction with their overall experience.

Difficulty Completing Tasks Quickly: Users have reported difficulty in completing tasks quickly due to the lack of clarity in the product's user interface. This has resulted in frustration and inefficiency when using the product.

Well-Designed User Interface: Many users have praised the well-designed user interface of the product, stating that it is easy to navigate and intuitive. They appreciate how the interface allows them to effortlessly complete tasks efficiently without any confusion.

User-Friendly Design: Several reviewers have mentioned that they appreciate the user-friendly design of the product's interface. This design enables them to quickly accomplish their goals without any hassle or confusion, enhancing their overall satisfaction with the product.

Helpful Customer Support: Users have reported positive experiences when reaching out to the customer support team for assistance. They found the support team to be helpful, responsive, and knowledgeable, which contributed to their overall satisfaction with the product.

Intuitive User Interface: Many users have praised the product's user interface, finding it intuitive and easy to navigate. This positive feedback indicates that a significant number of reviewers appreciate the well-designed and user-friendly interface, which allows them to perform tasks quickly and efficiently.

Convenient Task Performance: Reviewers have mentioned that the intuitive user interface makes it convenient for them to perform tasks with ease. By providing a seamless experience, the product enables users to complete their desired actions quickly and efficiently. This sentiment suggests that a considerable number of customers find the product's task performance highly satisfactory.

Helpful Customer Support: Several reviewers have expressed satisfaction with the customer support provided by the company. The positive feedback highlights that many users found the support team responsive and attentive to their needs. This demonstrates that the company values its customers and strives to provide excellent service, contributing to a positive overall user experience.

An AppSec solution formerly from Micro Focus, spanning SCA, SAST and DAST that supports the breadth and management of any application portfolio, used to secure code. Features API discovery and testing for any application, throughout the software lifecycle.

SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable.

Community

Developer EDITION

Enterprise EDITION

Data Center EDITION

Detectify is an automated External Attack Surface Management solution from the company of the same name in Stockholm, powered by an ethical hacker community. By leveraging hacker insights, security teams using Detectify can map out their attack surface to find anomalies and detect the latest business critical vulnerabilities,  especially in third-party software.

Deep Scan

Asset Monitoring

Detectify

Fortify by OpenText

Application Security Testing is a key element of ensuring that web applications remain secure. Various tools and managed services exist to provide continuous testing, besides application security platforms that include app testing as part of their functionality. Dynamic Application Security Tests (DAST) scans applications for vulnerabilities while they are running or in production, simulating real life conditions.

Dynamic Application Security Testing (DAST)

Chemicals

Aether Industries Ltd.

Product Consultant

Likelihood to Recommend

Likelihood to Renew

Usability

Support Rating

OpenText is a leader in Enterprise Information Management (EIM). EIM enables organizations to grow the business, lower costs of operations, and reduce information governance and security related risks. OpenText focuses on the key drivers of business success to improve business insight, strengthen business impact, accelerate process velocity, address information governance and provide security.

OpenText

Fortify by OpenText 2025-01-17 01:53:56

Employee

Micro Focus Fortify WebInspect 2023-01-30 21:40:15

Vice President, Chief Architect, Development Manager and Software Engineer

Fortify on Demand (formerly HP Fortify on Demand) 2019-12-08 10:59:45

Rapid7 InsightAppSec

Micro Focus Fortify WebInspect 2022-12-12 10:01:15

Contrast Assess

Micro Focus Fortify WebInspect 2022-06-14 12:00:33

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home

Dynamic Application Security Testing (DAST) Tools

We are in need of some tools which can be secure the apps management and have some integration to enhance the security of particular apps.
Then we have found Fortify by OpenText and it works really well in terms of our needs and giving us a perfect results. It is also offers a secure application development with their unique feedback features.

Industry leading solutions
Fast and easy integration
Support mechanism

Available for AppSec Solution only
Support is good but taking time for resolutions
Very few awareness for this product due to lack of marketing

Comprehensive Application Reporting
App Monitoring
Application Vulnerability Test

After 4 years of use, this tool is still the best for scanning dynamic applications. When we looked for alternatives, we discovered that none of them could match the speed with which it could audit and scan ASP.NET apps. Minor customisation is possible with the offered reports, which is ideal for our corporate requirements.

DAST Scanning
API Scanning
Less detection of false positive

Excellent integration with CICD Dashboard.
Excellent DevSecOps management

detection of loopholes
pipeline scanning
Integration is really simple.
cloud applications that have been scanned

We use Fortify on our applications to perform SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing). This is an Enterprise approved product and it is part of a suite of products used across the enterprise. This is NOT the only product we use for our testing, but part of a suite of products.

SAST
DAST
Manage Software Security Risk
Automation
Compliance
Integration

Good as part of our security suite to help prevent successful attacks.
Reporting of defects helps to educate developers.
Worth the price we paid.

I have used Micro Focus Fortify WebInspect for scanning applications during runtime and finding OWASP TOP 10 vulnerabilities. I have used it to integrate with CICD pipeline to automate security scanning of applications and website

Detection of vulnerabilities
Scanning pipelines
Integration is super easy
Scanned cloud based applications

It should focus on microservices and develop features
Performance need to be improved
Multiple apps should be easy to scan in parallel thus saving time

Integration with CICD
Dashboard is great
DevSecOps management is great

DevSecOps helped in reducing efforts
License cost was less
We could roll out double the count of applications with implementation of WebInspect

Rapid7 InsightAppSec, HCL AppScan, Checkmarx

We use Micro Focus Fortify WebInspect for it's static analysis on our codebase of web applications. Using the reports generated for found vulnerabilities, we can work with our developers to target the high or critically ranked findings and reduce risk on our external and internally facing web apps and mobile apps.

Static code analysis
Organization of found vulnerabilities
Usually provides clear feedback on how to correct vulnerable code

Reporting could be better
Can be an involved setup if your organization is not using common build tools
Users get spammed with a lot of email updates from the service

Static analysis
Vulnerability reporting
Automation

A cheaper option than some other SAST tools
Automation of code scanning
Reduction of high and critical vulnerabilities

Fortify by OpenText
Formerly from Micro Focus

Overview

What is Fortify by OpenText?