Fortify by OpenText vs. Cenzic Hailstorm / App Scanner (discontinued)

I think Micro Focus Fortify WebInspect could fit really any organization well that needs to perform static code analysis on their applications (they do have dynamic scanning but I don't have any experience using it). Different static analysis tools scan code differently, Micro Focus Fortify WebInspect requires you to provide a full build of the application to be submitted with debugging files which could be easy or hard depending on how your organization is building it's apps.

Incentivized

This scanner is helpful for financial services apps that need to prove their credibility to users, and in an environment where users might not be comfortable providing their PII.

Incentivized

• prevents malware
• mitigates risks
• visibility
• safety

Incentivized

• Show that our app is credible
• Give users the confidence to do business on our app

Incentivized

• It should focus on microservices and develop features
• Performance need to be improved
• Multiple apps should be easy to scan in parallel thus saving time

Incentivized

• Integration requires the development team
• Takes up valuable real estate within the app
• Requires bandwidth and may slow down primary functions

Incentivized

Since every firm needs to perform static code analysis on their applications, I believe Micro Focus Fortify WebInspect would work well for them (they also offer dynamic scanning, although I haven't used it myself). Different static analysis tools scan code in different ways, and Micro Focus Fortify WebInspect asks you to submit a complete build of the application along with debugging files. Depending on how your company builds its apps, this requirement may be simple or challenging.

Incentivized

It is a cloud-based platform which can provide us a very useful and unique features like Application Assessment, Scans, Vulnerability Test, Comprehensive Reporting, Monitoring, etc. Fortify by Open Text is also outstanding in various parameters for the support and integration and it is highly adaptable in various DevOps Program where you need secure app testing with all given features.

Incentivized

Always receive excellent support from the vendor. No issues there.

Incentivized

Micro Focus Fortify WebInspect is better when it comes to speed, integration and detection capabilities as compared to Insight Appsec. What I loved the most is the broad coverage of vulnerabilities it identified as against Insight Appsec. Apart from detection capabilities the time taken is also less compared to Insight Appsec. Given the performance of Micro Focus Fortify WebInspect I would strongly recommend to everyone looking for DevSecOps and application security solutions

Incentivized

These products are similar in nature. They all tend to do the same thing, in a similar way. Just need to watch for integration problems and consumer trust issues.

Incentivized

• Good as part of our security suite to help prevent successful attacks.
• Reporting of defects helps to educate developers.
• Worth the price we paid.

Incentivized

• Increases usage of mobile devices
• Reduces the need for live client services
• Improves user conference

Incentivized