Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 1 Rating

Total
ease
features
design
support

Alternatives to Consider

  • Aikido Security Reviews & Ratings
    364 Ratings
    Company Website
  • Astra Pentest Reviews & Ratings
    296 Ratings
    Company Website
  • Rocket z/Assure VAP Reviews & Ratings
    1 Rating
    Company Website
  • ESET PROTECT Advanced Reviews & Ratings
    2,332 Ratings
    Company Website
  • Feroot Reviews & Ratings
    33 Ratings
    Company Website
  • Jscrambler Reviews & Ratings
    41 Ratings
    Company Website
  • Reflectiz Reviews & Ratings
    34 Ratings
    Company Website
  • DriveStrike Reviews & Ratings
    25 Ratings
    Company Website
  • Kasm Workspaces Reviews & Ratings
    127 Ratings
    Company Website
  • NeuBird Reviews & Ratings
    2 Ratings
    Company Website

What is OpenText Core Application Security (Fortify)?

OpenText Core Application Security (Fortify) is a comprehensive AppSec-as-a-service platform designed to enable organizations to build, extend, and manage effective software security assurance programs at scale. The solution integrates essential security testing technologies such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Mobile Application Security Testing (MAST) into CI/CD pipelines, providing developers continuous feedback to identify and remediate vulnerabilities early and efficiently. By delivering this as a cloud-based service, OpenText eliminates the need for costly on-premises infrastructure, offering flexible deployment that scales to support everything from a handful to thousands of applications. Regularly updated vulnerability rule packs, powered by a dedicated Software Security Research team, help detect emerging threats accurately while reducing false positives for faster remediation cycles. The platform provides comprehensive vulnerability identification with prioritized, actionable remediation guidance and customizable reporting to track the effectiveness of AppSec initiatives across teams and stakeholders. Continuous monitoring ensures evolving codebases are automatically scanned, mitigating new risks as applications change. Educational resources and training empower development and security teams to adopt best practices and build a security-aware culture. OpenText Core Application Security has earned FedRAMP certification, supporting government agencies and contractors with stringent compliance needs. Recognized by Gartner, Forrester, and IDC as a leader in application security, the platform is backed by 24/7 professional support and technical account management. Together, these capabilities enable organizations to accelerate security efforts while maintaining agility in software delivery.

What is Invicti Web + API?

Invicti Web + API, formerly Acunetix, is a dynamic application security testing platform designed to automate vulnerability discovery, validation, prioritization, and remediation workflows for web applications and APIs. The product builds on more than 20 years of Acunetix DAST technology while incorporating AI, code-to-runtime correlation, and vulnerability management capabilities. Invicti can automatically identify web applications, APIs, shadow assets, unlinked pages, and undocumented endpoints across code, traffic, and runtime environments. Its scanning engine detects more than 7,000 security issues, including vulnerabilities from the OWASP Top 10 and OWASP API Top 10 as well as business logic flaws. The platform supports modern single-page applications, JavaScript-heavy websites, LLM-powered services, role-based authentication scenarios, complex multi-step workflows, and stateful API testing. API security testing covers REST, GraphQL, and SOAP services while maintaining context across requests. Invicti uses AI-driven risk scoring based on more than 200 signals together with runtime reachability, exploitability, and business context to help teams prioritize security findings. Proof-based validation confirms exploitable vulnerabilities to reduce false positives, with Invicti reporting 99.98% confirmation accuracy for exploitable findings. DAST-to-SAST correlation connects runtime vulnerabilities with corresponding source code, while AI-powered remediation delivers developer-oriented fix guidance and automated validation can retest applications after changes are implemented. Invicti also provides agentic penetration testing capabilities that coordinate specialized AI agents, adapt attack plans to application behavior, investigate chained and contextual vulnerabilities, and validate findings using its proof-based techniques.

Media

Media

Integrations Supported

Integrations Supported

ArmorCode
Bizzy
Centraleyezer
CyberArk Workforce Identity
Dradis
Flexagon
Hexway Pentest Suite
Imperva DDoS Protection
Imperva WAF
Jenkins
Jira
Jira Work Management
Kondukto
Phoenix Security
Scuba Database Vulnerability Scanner
SecurityHQ
ThreadFix
ThreatAdvisor
WordPress

API Availability

API Availability

Has API

Pricing Information

Pricing not provided

Pricing Information

Pricing not provided
Free Trial Offered?

Supported Platforms

SaaS

Supported Platforms

SaaS
Windows
On-Prem
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training

Training Options

Documentation Hub
Webinars
Online Training

Company Facts

Organization Name

OpenText

Date Founded

1991

Company Location

Canada

Company Website

www.opentext.com/products/fortify-on-demand

Company Facts

Organization Name

Invicti Security

Date Founded

2018

Company Location

United States

Company Website

acunetix.com

Categories and Features

Categories and Features

Application Security

Analytics / Reporting
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Computer Security

Audit Trail
Compliance Management
Database Security Audit
File Access Control
Vulnerability Protection

Cybersecurity

IOC Verification
Vulnerability Scanning

IP Scanners

Not specified

IT Security

Vulnerability Scanning
Web Threat Management

Network Security

Threat Response
Vulnerability Scanning

Penetration Testing

Not specified

Vulnerability Management

Asset Discovery
Asset Tagging
Network Scanning
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Website Security

Not specified

Popular Alternatives

Popular Alternatives

Astra Pentest Reviews & Ratings

Astra Pentest

Astra Security
AppScan Reviews & Ratings

AppScan

HCLSoftware
AppTrana Reviews & Ratings

AppTrana

Indusface
Invicti Reviews & Ratings

Invicti

Invicti Security