OpenText Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines the application security testing (AST) market as consisting of providers of products that enable organizations to assess applications for the presence and management of risk. These products identify risk by evaluating source code, performing runtime tests and inspecting supply chain components. AST products can be integrated throughout development workflows for continuous assessment or be used to perform ad hoc evaluations. They enable organizations to manage application risks by providing an integrated set of capabilities for risk identification, prioritization and triage, policy evaluation and enforcement, and remediation assistance. Market offerings are available in on-premises, SaaS and hybrid delivery models. Organizations leverage AST products to assess applications for the presence of security vulnerabilities and other risks (e.g., legal and operational) throughout their life cycle. These assessments are used to measure and manage the risks within individual applications, application components or groups of applications in the context of their business criticality and other key attributes (e.g., environment, sensitive data handling, etc.). AST products further enable organizations to evaluate software for compliance with internal policies as well as regulatory requirements established by governments or authoritative industry groups.

Active

Find the top Application Security Testing Tools with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Application Security Testing

OpenText Dynamic Application Security Testing (Fortify)

OpenText Static Application Security Testing (Fortify)

Micro Focus Fortify WebInspect IAST (Legacy)

OpenText Application Security Aviator (Fortify)

OpenText

IT Associate

Fortify SAST has helped us detect and resolve thousands of real vulnerabilities in legacy code bases containing millions of lines of code. All the while preventing new vulnerabilities from reaching production on newer products. 
We were able to relatively easily bend the tool to our custom build chain providing us with constant reporting on the security status of our product.

500M - 1B USD

30B + USD

<50M USD

50M - 250M USD

3B - 10B USD

10B - 30B USD

1B - 3B USD

250M - 500M USD

Gov't/PS/ED 5,000 - 50,000 Employees

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 50,000 + Employees

Manager, It Security And Risk Management

I have been a Fortify customer for 7 years now and have administered and deployed FoD as well as their on premise engine (Software Security Center and Static Code Analysis). The scan results are trustworthy, but I have found that Fortify produces high false positives. The system overall is trustworthy, but for modern applications that must deliver scanning at devsecops speeds it is behind.  I would only suggest fortify for large enterprises that can wait on scan results and have the budget for many vendors tools.

Veracode

Checkmarx

Black Duck

Qualys

Rapid7

PortSwigger

GitLab

Snyk

Sonatype

NTT Application Security

Contrast Security

GitHub

Invicti

HCLTech

SonarSource

Other...

Symantec (Appthority)

Tenable

CAST

HCLTech (HCLSoftware)

Netsparker--

LevelBlue

The Open Web Application Security Project (OWASP)

Mend.io

JFrog

NowSecure

Synopsys (Cigital)

AdaCore

OpenText powers and protects information. As a global secure information management provider for businesses, OpenText tools span content management, artificial intelligence (AI), cybersecurity, cloud, and business networks. For over 30 years, OpenText has helped organizations manage and protect their data and documents while modernizing their information architecture. Its integrated hub connects information across departments and applications to enhance employee experience, productivity, and collaboration, while making information structured and searchable through AI, machine learning, and semantic search. In addition, OpenText delivers endpoint security and digital life protection solutions to safeguard businesses against cyberattacks and data breaches.

OpenText is a world leader in Information Management, helping companies securely capture, govern and exchange information on a global scale. OpenText solves digital business challenges for customers, ranging from small and mid-sized businesses to the largest and most complex organizations in the world. For more information about OpenText (NASDAQ/TSX: OTEX), visit www.opentext.com

Reviews

Ratings Overview

Overall experience with

Favorable Review

Effective vulnerability detection in legacy code, with integration learning curve

Critical Review

Fortify Trusted for SAST Yet Faces Challenges with Scan Times and Dashboards

Likes and dislikes about

likes

dislikes