Micro Focus Fortify on Demand Competitors and Alternatives

Get our free report covering SonarQube, Veracode, Checkmarx, and other competitors of Micro Focus Fortify on Demand. Updated: February 2020.
398,567 professionals have used our research since 2012.

Read reviews of Micro Focus Fortify on Demand competitors and alternatives

Dave Cheli
Real User
Chief Technology Officer
Mar 15 2018

What is most valuable?

Certainly it eases integration into our workflow. Veracode is part of our Jenkins build, so whenever we build our software, Jenkins will automatically submit the code… more»

How has it helped my organization?

Firstly, it prevents me from putting out software that has security vulnerabilities, which is a big thing and can be one of the most important things. Also, we just… more»

What needs improvement?

The Web portal, at times, is not necessarily intuitive. I can get around when I want to but there are times when I have to email my account manager on: "Hey, where do I… more»

What's my experience with pricing, setup cost, and licensing?

I think it's a great value. It's at a price point that a small company like mine can afford to use versus, if it was too exorbitant, I wouldn't be able to use this… more»

Which solution did I use previously and why did I switch?

Veracode was really my first introduction to static code analysis. The way I came across it in my previous company was, they were going through security due diligence and… more»

What other advice do I have?

CA Veracode provides application security (AppSec) best practices and guidance to our teams in a couple ways. First of all, they have an e-learning module that has courses… more»

Which other solutions did I evaluate?

When I was at the last company, I looked at HPE (now Micro Focus) Fortify vs Veracode and maybe IBM had a product, but they were overly complex and overly expensive. I… more»
Real User
Senior Security Engineer at a insurance company
Apr 10 2019

What is most valuable?

The ability to be on the website and test for different vulnerabilities. We are able to create a report which shows the PCI DSS scoring and share it with the application… more»

How has it helped my organization?

We have had more success with this particular product being able to control our different applications better than some of the other applications that we have used in the… more»

What needs improvement?

On the vulnerabilities screen, where you put your target on the drop down, it would be nice to have more choices, not have such limited options. One thing that we used to… more»

What's my experience with pricing, setup cost, and licensing?

The pricing and licensing are reasonable to a point. In order to run multiple scans at a time, we are going to have to purchase a 100 count license, which is overkill… more»

Which solution did I use previously and why did I switch?

The speed is phenomenal. Some of our applications can do a scan in less ten minutes, even some of our bigger scans. We were using Micro Focus Fortify WebInspect when it is… more»

What other advice do I have?

It is a pretty good product. Do a demo and test whatever application that you are using right now. If you have a site where it is more difficult to identify… more»

Which other solutions did I evaluate?

We went with the recommendations of our parent company. This was one of the approved solutions.
ManoharRaju
Real User
AVP at a tech vendor with 1,001-5,000 employees
Jan 29 2020

What is most valuable?

The reporting is very useful because you can always view an entire list of the issues that you have. The importing of the reports into the dashboard is helpful.

What needs improvement?

The integrability of this solution can be improved. Integration with other tools such as Jira is needed. We are having issues with false positives that need to be resolved. Being able to save reports in different formats would be helpful… more»

Which solution did I use previously and why did I switch?

The solution that we used prior to this one was developed internally, and we have not used other commercial tools. I have seen Rapid7 solutions, but have not used them to a great extent.

What other advice do I have?

I would rate this solution a seven out of ten.

Which other solutions did I evaluate?

We evaluated a couple of other options including Checkmarx and Veracode. We also looked at a solution to help collect and collate all of the logs and reports from different tools. I do think that in terms of coverage, Micro Focus Fortify… more»
Get our free report covering SonarQube, Veracode, Checkmarx, and other competitors of Micro Focus Fortify on Demand. Updated: February 2020.
398,567 professionals have used our research since 2012.