Skip to main content
TrustRadius
Fortify by OpenText

Fortify by OpenText
Formerly from Micro Focus

Overview

What is Fortify by OpenText?

An AppSec solution formerly from Micro Focus, spanning SCA, SAST and DAST that supports the breadth and management of any application portfolio, used to secure code. Features API discovery and testing for any application, throughout the software lifecycle.

Read more
Recent Reviews

TrustRadius Insights

Users have found the product to be a valuable tool for managing customer relationships and tracking interactions. It offers a …
Continue reading

safe and sound

4 out of 10
September 15, 2021
Incentivized
we are using it to help prevent cyber attacks on our network and system computers. it addresses a lot of issues with malware being …
Continue reading
Read all reviews
Return to navigation

Pricing

View all pricing
N/A
Unavailable

What is Fortify by OpenText?

An AppSec solution formerly from Micro Focus, spanning SCA, SAST and DAST that supports the breadth and management of any application portfolio, used to secure code. Features API discovery and testing for any application, throughout the software lifecycle.

Entry-level set up fee?

  • No setup fee

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Would you like us to let the vendor know that you want pricing?

114 people also want pricing

Alternatives Pricing

What is SonarQube?

SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable.

What is Detectify?

Detectify is an automated External Attack Surface Management solution from the company of the same name in Stockholm, powered by an ethical hacker community. By leveraging hacker insights, security teams using Detectify can map out their attack surface to find anomalies and detect the latest…

Return to navigation

Product Details

What is Fortify by OpenText?

An AppSec solution formerly from Micro Focus, spanning SCA, SAST and DAST that supports the breadth and management of any application portfolio, used to secure code. Features API discovery and testing for any application, throughout the software lifecycle.

Fortify by OpenText Technical Details

Operating SystemsUnspecified
Mobile ApplicationNo
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(22)

Community Insights

TrustRadius Insights are summaries of user sentiment data from TrustRadius reviews and, when necessary, 3rd-party data sources. Have feedback on this content? Let us know!

Users have found the product to be a valuable tool for managing customer relationships and tracking interactions. It offers a comprehensive system that organizes customer information effectively, allowing users to stay updated on client needs and easily track communication history. The software has received positive feedback from reviewers for streamlining project management and facilitating collaboration among team members. It offers features such as task assignment, progress tracking, and file sharing, enhancing productivity for teams working on complex projects. Customers have reported increased efficiency in handling inventory and tracking sales with the product. Its inventory management functionality enables users to monitor stock levels, streamline order fulfillment, and generate accurate sales reports.

The product's user-friendly interface and intuitive navigation have been appreciated by users. It allows both new and experienced users to easily access desired features without confusion. The software's robust reporting capabilities have been highlighted by reviewers, providing users with insightful data analysis options for making informed business decisions. Users have also praised the product's reliability and stability, minimizing downtime and ensuring uninterrupted workflow. With customization options available, users can tailor the software to their specific business needs.

Reviewers have commended the product's integration capabilities with other software and platforms, resulting in enhanced productivity and data synchronization. Seamless integration with popular tools such as email clients, accounting software, and CRM systems eliminates manual data entry and ensures consistency across applications. The product's responsive customer support team has been helpful in resolving issues or answering queries satisfactorily according to customers' reports.

Users find the mobile app convenient and efficient for on-the-go access and management. It allows them to access important data, respond to inquiries, and stay connected with their teams even when away from their desks. This flexibility is particularly beneficial for those who require constant access to critical information while on the move.

Intuitive User Interface: Many users have praised the product's user interface, finding it intuitive and easy to navigate. This positive feedback indicates that a significant number of reviewers appreciate the well-designed and user-friendly interface, which allows them to perform tasks quickly and efficiently.

Convenient Task Performance: Reviewers have mentioned that the intuitive user interface makes it convenient for them to perform tasks with ease. By providing a seamless experience, the product enables users to complete their desired actions quickly and efficiently. This sentiment suggests that a considerable number of customers find the product's task performance highly satisfactory.

Helpful Customer Support: Several reviewers have expressed satisfaction with the customer support provided by the company. The positive feedback highlights that many users found the support team responsive and attentive to their needs. This demonstrates that the company values its customers and strives to provide excellent service, contributing to a positive overall user experience.

Confusing User Interface: Several users have expressed frustration with the confusing and difficult-to-navigate user interface of the product. They have struggled to complete tasks efficiently due to a lack of clarity in the interface.

Unhelpful Customer Support: A number of reviewers have found the customer support provided by the company to be unhelpful. When facing issues or seeking guidance, they did not receive the assistance they needed, leading to dissatisfaction with their overall experience.

Difficulty Completing Tasks Quickly: Users have reported difficulty in completing tasks quickly due to the lack of clarity in the product's user interface. This has resulted in frustration and inefficiency when using the product.

Attribute Ratings

Reviews

(1-5 of 5)
Companies can't remove reviews or game the system. Here's why
Zishan Ali Dakhani | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Incentivized
After 4 years of use, this tool is still the best for scanning dynamic applications. When we looked for alternatives, we discovered that none of them could match the speed with which it could audit and scan ASP.NET apps. Minor customisation is possible with the offered reports, which is ideal for our corporate requirements.
  • DAST Scanning
  • API Scanning
  • Less detection of false positive
  • NA
  • NA
  • NA
SDLC deployment is simple. simple to use The coverage is thorough and complete as a DAST product.
  • Excellent integration with CICD Dashboard.
  • Excellent DevSecOps management
  • detection of loopholes
  • pipeline scanning
  • Integration is really simple.
  • cloud applications that have been scanned
When compared to Insight Appsec, Focus Fortify WebInspect performs better in terms of speed, integration, and detection capabilities. The variety of vulnerabilities it detected as being against Insight Appsec is what I appreciated the most. In addition to detecting capabilities, the processing time is also quicker than with Insight Appsec. Given its performance, I would definitely advise anyone searching for DevSecOps and application security solutions to use Micro Focus Fortify WebInspect.
After using this product for 4 years, it is still a leader in dynamic application scanning. We tried to hunt for replacement and realized that no other beats the crawling and auditing speed and its ability to analyze ASP.NET applications. The provided reports allows minor customization which fits perfectly into our corporate requirements
100
Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.
  • static analysis
  • reporting
  • NA
  • it is very awesome tool
Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.
Score 10 out of 10
Vetted Review
Verified User
Incentivized
I have used Micro Focus Fortify WebInspect for scanning applications during runtime and finding OWASP TOP 10 vulnerabilities. I have used it to integrate with CICD pipeline to automate security scanning of applications and website
  • Detection of vulnerabilities
  • Scanning pipelines
  • Integration is super easy
  • Scanned cloud based applications
  • It should focus on microservices and develop features
  • Performance need to be improved
  • Multiple apps should be easy to scan in parallel thus saving time
It is best suited for runtime application security scanning and very useful for automation. You can seemlessly integrate with pipeline for dynamic scans. Cloud based apps can also be scanned for vulnerabilities, cross site scripting attacks. Basically all OWASP TOP 10. It is less appropriate to use if you have serverless architecture
  • Integration with CICD
  • Dashboard is great
  • DevSecOps management is great
  • DevSecOps helped in reducing efforts
  • License cost was less
  • We could roll out double the count of applications with implementation of WebInspect
Micro Focus Fortify WebInspect is better when it comes to speed, integration and detection capabilities as compared to Insight Appsec. What I loved the most is the broad coverage of vulnerabilities it identified as against Insight Appsec. Apart from detection capabilities the time taken is also less compared to Insight Appsec. Given the performance of Micro Focus Fortify WebInspect I would strongly recommend to everyone looking for DevSecOps and application security solutions
Score 9 out of 10
Vetted Review
Verified User
Incentivized
We use Micro Focus Fortify WebInspect for it's static analysis on our codebase of web applications. Using the reports generated for found vulnerabilities, we can work with our developers to target the high or critically ranked findings and reduce risk on our external and internally facing web apps and mobile apps.
  • Static code analysis
  • Organization of found vulnerabilities
  • Usually provides clear feedback on how to correct vulnerable code
  • Reporting could be better
  • Can be an involved setup if your organization is not using common build tools
  • Users get spammed with a lot of email updates from the service
I think Micro Focus Fortify WebInspect could fit really any organization well that needs to perform static code analysis on their applications (they do have dynamic scanning but I don't have any experience using it). Different static analysis tools scan code differently, Micro Focus Fortify WebInspect requires you to provide a full build of the application to be submitted with debugging files which could be easy or hard depending on how your organization is building it's apps.
  • Static analysis
  • Vulnerability reporting
  • Automation
  • A cheaper option than some other SAST tools
  • Automation of code scanning
  • Reduction of high and critical vulnerabilities
  • Veracode is the product I've used that is most similar to Fortify WebInspect. They both do a good job at reporting code vulnerabilities and both allow for good automation.
  • SonarQube can be a free tool, but does a much better job at finding bugs that aren't necessarily vulnerabilities.
  • Contract Assess takes a different approach for finding vulnerabilities. Instead of doing a code scan, it observes the running program to find vulnerabilities. In our experience this was harder to automate since it required developers and QA to exercise the application.
September 15, 2021

safe and sound

Score 4 out of 10
Vetted Review
Verified User
Incentivized
we are using it to help prevent cyber attacks on our network and system computers. it addresses a lot of issues with malware being downloaded on to our network and computers. having it installed and working properly allows us to make sure that all of our stuff works seamlessly and without issue. we like that we can install it and let it ride and not have to worry about it a lot.
  • prevents malware
  • mitigates risks
  • visibility
  • safety
  • user interface
  • applications
  • installation
it is really good at being a great software protector. we value their insight and ability to prevent cyber attacks and other things like that. it does well at catching a lot of things and keeping our business moving. it helps fortify our network infrastructure and we're very happy with that.
  • safety
  • security
  • peace of mind
  • usability
  • understanding
Fortify Application Defender is a little more timely and upfront with a lot of their information on cyber security. we like what they provide and how they communicate with our users. I think they have a good understanding and practice in their field. they seem best suited for us and the best fit.
Gene Baker | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User
Incentivized
We use Fortify on our applications to perform SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing). This is an Enterprise approved product and it is part of a suite of products used across the enterprise. This is NOT the only product we use for our testing, but part of a suite of products.
  • SAST
  • DAST
  • Manage Software Security Risk
  • Automation
  • Compliance
  • Integration
  • Cross module compliance
Integrated as part of our CI / CD chain. Scans are done in an automated fashion and defects are reported out and tracked. Easy to use, easy to integrate. Very pleased with the product. It does not perform cross module analysis scanning for vulnerabilities that may cross applications as well as it could, but it's pretty close.
  • Good as part of our security suite to help prevent successful attacks.
  • Reporting of defects helps to educate developers.
  • Worth the price we paid.
CAST in my opinion provides a far superior product in that it can parse in an entire suite of applications and do scans across modules. HP Fortify probably has deeper and more current scanning so I think both products complement each other. I would not rely solely on Fortify and would try to have that as part of the mix of products. Overall it's a good product. We use Fortify because the Enterprise has made that a mandatory part of our security suite.
Always receive excellent support from the vendor. No issues there.
Return to navigation