OpenText Core Application Security Reviews & Product Details

Fortify on Demand (FoD) is a complete Application Security as a Service solution. It offers an easy way to get started with the flexibility to scale. In addition to static and dynamic, Fortify on Demand covers in-depth mobile app security testing, open-source analysis, and vendor application security management. False positives are removed for every test and test results can be manually reviewed by application security experts.

Seller

OpenText

Discussions

OpenText Core Application Security Community

Solution Type

All-in-One

Overview by

Staci Butler

Value at a Glance

Averages based on real user reviews.

Perceived Cost

$$$$$

View More Pricing Information

Top-Rated Alternatives

Checkmarx

4.2/5(49)

Veracode Application Security Platform

3.8/5(26)

HCL AppScan

4.2/5(105)

View All Alternatives

User Insights

Average based on 34 real user reviews.

Perceived Cost

$$$$$

Verified User in Information Technology and Services

Enterprise (> 1000 emp.)

4/6/2018

"Doesn't really do as it says"

1/5

What do you like best about OpenText Core Application Security?

Scans are thorough, easily distributed. Branding. Perceived integration. Review collected by and hosted on G2.com.

What do you dislike about OpenText Core Application Security?

Returns many false positives - for example identifies any variable with the name 'key' as a stored encryption key violation. Doesn't understand the context of code, or entry points for an exploit. Cumbersome in execution (will monopolize a machine's resources while running). Review collected by and hosted on G2.com.

Recommendations to others considering OpenText Core Application Security:

Shop around. Identify what need it for first before signing on. Review collected by and hosted on G2.com.

What problems is OpenText Core Application Security solving and how is that benefiting you?

Intended use for security reasons and strengthening code. Unsure of benefits at this time. Review collected by and hosted on G2.com.

Verified User in Law Practice

Small-Business (50 or fewer emp.)

1/18/2018

"Overall a good experience"

2.5/5

What do you like best about OpenText Core Application Security?

There is a good flexibility of the demand ability Review collected by and hosted on G2.com.

What do you dislike about OpenText Core Application Security?

Customer service has not been great. Not intuitive so takes some time to get really into it. Review collected by and hosted on G2.com.

Recommendations to others considering OpenText Core Application Security:

I guess it works great for securing data, but it takes time to really learn how to use it. If you have problems are basically left to figure it out yourself. Review collected by and hosted on G2.com.

What problems is OpenText Core Application Security solving and how is that benefiting you?

It is a great tool as part of the «toolbox». We use the software for testing for us to meet the security standards. It benefits us in the sense that we feel confident that we meet the requirements of the security standards. Review collected by and hosted on G2.com.

Amir M.

Sr. Security Analyst

Airlines/Aviation

Enterprise (> 1000 emp.)

4/14/2017

"A great component of the SDLC"

5/5

What do you like best about OpenText Core Application Security?

We use the HP Fortify on Demand SaaS, this allows us to free up resources from having to spend time maintaining the infrastructure.

The product allows for RBAC, which helps in allowing appropriate access at all levels.

We have implemented a process of Scan-at-Build, this allows us to ensure that continuous testing is performed.

Additionally, we have enabled SSO, so that developers are able to login to check results as well as add commentary information. Review collected by and hosted on G2.com.

What do you dislike about OpenText Core Application Security?

One thing that I would like to see improved is the capability for the platform to be able to send alerts on detection of findings. This would allow for stakeholders to be made aware, and take action Review collected by and hosted on G2.com.

Recommendations to others considering OpenText Core Application Security:

A good option for Static Analysis, helps close the application layer gaps as well as provides reporting Review collected by and hosted on G2.com.

What problems is OpenText Core Application Security solving and how is that benefiting you?

We have compliance requirements for code review, and the department runs fairly lean. The product has allowed us to setup continuous testing as well as self-service Review collected by and hosted on G2.com.

Stephanie S.

Account Manager

Medical Devices

Enterprise (> 1000 emp.)

1/17/2018

"great for extra security"

5/5

What do you like best about OpenText Core Application Security?

it helps spot any flaws in our security application system. Review collected by and hosted on G2.com.

What do you dislike about OpenText Core Application Security?

I feel there should me more sell package options Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Mid-Market (51-1000 emp.)

2/8/2018

"Flexible security monitoring for applications"

5/5

What do you like best about OpenText Core Application Security?

Fortify has a magical dashboard where you can find and detect your security issues in your applications. Review collected by and hosted on G2.com.

What do you dislike about OpenText Core Application Security?

I would like a more flexible GUI to edit and design reports. Review collected by and hosted on G2.com.

Antonio S.

IT Applications Manager

Information Technology and Services

Mid-Market (51-1000 emp.)

1/23/2017

"Great experience!"

5/5

What do you like best about OpenText Core Application Security?

The response time for analysis report is pretty fast and very well detailed. The reports are very granular and the communication with the vendor is pretty much instantaneous. Review collected by and hosted on G2.com.

What do you dislike about OpenText Core Application Security?

Sometimes the level of effort to fight a "red flag" in the code can be overwhelming. This requires engaging senior level people to agree on something. It feels like going through an audit and having to fight the major discrepancies. That is very time consuming. Review collected by and hosted on G2.com.

Recommendations to others considering OpenText Core Application Security:

I would defeinetly recommend this product to anyone looking to validate the security and the quality of the code of any custom application. I probably would recommend the SaS versus the on premises solution. Review collected by and hosted on G2.com.

What problems is OpenText Core Application Security solving and how is that benefiting you?

Our code must meet certain security standards that must be validated by a third party such as HPE Fortify. That gives our customers the assurance that our code is secure and optimized to meet their requirements and security standards. Review collected by and hosted on G2.com.

Verified User in Import and Export

Mid-Market (51-1000 emp.)

1/15/2018

"Best security vulnerability scanning tool"

4/5

What do you like best about OpenText Core Application Security?

Microfocus fortify is one of best security vulnerability scanning tool . It helps to mitigate the security risks before launching the application Review collected by and hosted on G2.com.

What do you dislike about OpenText Core Application Security?

There is nothing much to dislike about this tool Review collected by and hosted on G2.com.

Verified User in Construction

Mid-Market (51-1000 emp.)

1/18/2018

"Meets demands"

3.5/5

What do you like best about OpenText Core Application Security?

Client portal is real helpful. Projects status in real time creates a streamlined process internally and externally. Review collected by and hosted on G2.com.

What do you dislike about OpenText Core Application Security?

Currently we have not delve very far into the program to have dislikes. Review collected by and hosted on G2.com.