Fortify Application Defender vs Polyspace Code Prover comparison

Cancel
You must select at least 2 products to compare!
OpenText Logo
1,977 views|1,670 comparisons
80% willing to recommend
MathWorks Logo
1,773 views|1,161 comparisons
80% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Fortify Application Defender and Polyspace Code Prover based on real PeerSpot user reviews.

Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Fortify Application Defender vs. Polyspace Code Prover Report (Updated: March 2024).
767,319 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The product saves us cost and time.""The most valuable features of Fortify Application Defender are the code packages that are default.""Fortify Application Defender's most valuable features are machine learning algorithms, real-time remediation, and automatic vulnerability notifications.""Its ability to find security defects is valuable.""The most valuable feature is that it analyzes data in real-time.""The most valuable feature is the ability to automatically feed it rules what it's coupled with the WebInspect dynamic application scanning technology.""The solution helped us to improve the code quality of our organization.""The tool's most valuable feature is software composition analysis. This feature works well with my .NET applications, providing a better understanding of library vulnerabilities."

More Fortify Application Defender Pros →

"The outputs are very reliable.""Polyspace Code Prover is a very user-friendly tool.""When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts, and null pointer dereferences.""The product detects memory corruptions.""Polyspace Code Prover has made me realize it differs from other static code analysis tools because it runs the code. So it's quite distinct in that aspect."

More Polyspace Code Prover Pros →

Cons
"The false positive rate should be lower.""The biggest complaint that I have heard concerns additional platform support because right now, it only supports applications that are written in .NET and Java.""Support for older compilers/IDEs is lacking.""The solution could improve the time it takes to scan. When comparing it to SonarQube it does it in minutes while in Fortify Application Defender it can take hours.""Fortify Application Defender gives a lot of false positives.""I encountered many false positives for Python applications.""The licensing can be a little complex.""The workbench is a little bit complex when you first start using it."

More Fortify Application Defender Cons →

"Automation could be a challenge.""The tool has some stability issues.""One of the main disadvantages is the time it takes to initiate the first run.""I'd like the data to be taken from any format.""Using Code Prover on large applications crashes sometimes."

More Polyspace Code Prover Cons →

Pricing and Cost Advice
  • "The base licensing costs for the SaaS platform is about $900 USD per application, per year."
  • "The price of this solution could be less expensive."
  • "The licensing is very complex, it's project based and can range from $10,000 to $200,000+ depending on the project type and size."
  • "Fortify Application Defender is very expensive."
  • "The product’s price is much higher than other tools."
  • More Fortify Application Defender Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
    767,319 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The product does not work well with Java coding. The false positive rate should be lower. The product should introduce more licensing models and reduce the licensing cost.
    Top Answer:When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts… more »
    Top Answer:There are two main areas of improvement. * False negatives and false positives. * The speed of the validation itself. Another area I see for improvement is scalability, particularly when dealing with… more »
    Ranking
    Views
    1,977
    Comparisons
    1,670
    Reviews
    3
    Average Words per Review
    282
    Rating
    6.3
    Views
    1,773
    Comparisons
    1,161
    Reviews
    5
    Average Words per Review
    656
    Rating
    7.6
    Comparisons
    Also Known As
    HPE Fortify Application Defender, Micro Focus Fortify Application Defender
    Learn More
    MathWorks
    Video Not Available
    Overview

    Micro Focus Security Fortify Application Defender is a runtime application self-protection (RASP) solution that helps you manage and mitigate risk from homegrown or third-party applications. It provides centralized visibility into application use and abuse while protecting from software vulnerability exploits and other violations in real time.

    Polyspace Code Prover is a sound static analysis tool that proves the absence of overflow, divide-by-zero, out-of-bounds array access, and certain other run-time errors in C and C++ source code. It produces results without requiring program execution, code instrumentation, or test cases. Polyspace Code Prover uses semantic analysis and abstract interpretation based on formal methods to verify software interprocedural, control, and data flow behavior. You can use it on handwritten code, generated code, or a combination of the two. Each operation is color-coded to indicate whether it is free of run-time errors, proven to fail, unreachable, or unproven.

    Sample Customers
    ServiceMaster, Saltworks, SAP
    Alenia Aermacchi, CSEE Transport, Delphi Diesel Systems, EADS, Institute for Radiological Protection and Nuclear Safety, Korean Air, KOSTAL, Miracor, NASA Ames Research Center
    Top Industries
    REVIEWERS
    Computer Software Company29%
    Logistics Company14%
    Energy/Utilities Company14%
    Comms Service Provider14%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company14%
    Manufacturing Company12%
    Government8%
    VISITORS READING REVIEWS
    Manufacturing Company34%
    Computer Software Company15%
    Transportation Company7%
    Retailer5%
    Company Size
    REVIEWERS
    Small Business40%
    Midsize Enterprise10%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business12%
    Midsize Enterprise14%
    Large Enterprise74%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise10%
    Large Enterprise77%
    Buyer's Guide
    Fortify Application Defender vs. Polyspace Code Prover
    March 2024
    Find out what your peers are saying about Fortify Application Defender vs. Polyspace Code Prover and other solutions. Updated: March 2024.
    767,319 professionals have used our research since 2012.

    Fortify Application Defender is ranked 34th in Application Security Tools with 10 reviews while Polyspace Code Prover is ranked 23rd in Application Security Tools with 5 reviews. Fortify Application Defender is rated 8.0, while Polyspace Code Prover is rated 7.6. The top reviewer of Fortify Application Defender writes "Reliable solution with excellent machine learning algorithms but expensive and lacking support". On the other hand, the top reviewer of Polyspace Code Prover writes "A stable solution for developing software components". Fortify Application Defender is most compared with Checkmarx One, Coverity, CAST Application Intelligence Platform, SonarQube and Qualys Web Application Scanning, whereas Polyspace Code Prover is most compared with SonarQube, Coverity, Klocwork, CodeSonar and Parasoft SOAtest. See our Fortify Application Defender vs. Polyspace Code Prover report.

    See our list of best Application Security Tools vendors.

    We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.