Try our new research platform with insights from 80,000+ expert users

CAST Application Intelligence Platform vs Fortify on Demand comparison

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CAST Application Intelligen...
Average Rating
7.0
Number of Reviews
4
Ranking in other categories
Software Development Analytics (3rd)
Fortify on Demand
Average Rating
8.0
Reviews Sentiment
7.8
Number of Reviews
59
Ranking in other categories
Application Security Tools (9th), Static Application Security Testing (SAST) (8th)
 

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. CAST Application Intelligence Platform is designed for Software Development Analytics and holds a mindshare of 29.1%, up 26.0% compared to last year.
Fortify on Demand, on the other hand, focuses on Application Security Tools, holds 4.9% mindshare, up 4.9% since last year.
Software Development Analytics
Application Security Tools
 

Featured Reviews

Jayanti Rode - PeerSpot reviewer
Application Intelligence Platform that offers useful insights into violations and improvements
There are different products of the CAST solution that we use for different reasons. For quality improvement, we use CAST AIP which is an Application Intelligence Platform. We have a health dashboard where we can view improvements and violations that have been fixed.  Our clients use CAST Highlight…
Jonathan Steyn - PeerSpot reviewer
Source code analyzer, FPR file generation, reduction of false positives and generates compliance reports, for in-depth analysis
Not challenges with the product itself. The product is very reliable. It does have a steep learning curve. But, again, one thing that Fortify or OpenText does very well is training. There are a lot of free resources and training in the community forums, free training as well as commercial training where users can train on how to use the back-end systems and the scanning engines and how to use command-line arguments because some of the procedures or some of the tools do require a bit of a learning curve. That's the only challenge I've really seen for customers because you have to learn how to use the tool effectively. But Fortify has, in fact, improved its user interface and the way users engage the dashboards and the interfaces. It is intuitive. It's easy to understand. But in some regards, the cybersecurity specialist or AppSec would need a bit of training to engage the user interface and to understand how it functions. But from the point of the reliability index and how powerful the tool is, there's no challenge there. But it's just from a learning perspective; users might need a bit more skill to use the tool. The user interface isn't that tedious. It's not that difficult to understand. When I initially learned how to use the interfaces, I was able to master it within a week and was able to use it quite effectively. So training is required. All skills are needed to learn how to use the tool. I would like to see more enhancements in the dashboards. Dashboards are available. They do need some configuration and settings. But I would like to see more business intelligence capabilities within the tool. It's not particularly a cybersecurity function, but, for instance, business impact analysis or other features where you can actually use business intelligence capabilities within your security tool. That would be remarkable because not only do you have a cybersecurity tool, but you also have a tool that can give you business impact analysis and some other measurements. A bit more intelligence in terms of that from a cybersecurity perspective would be remarkable.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Used for controlling the technical debt and code quality."
"It supports most programming languages."
"CAST's risk and security flow detection capabilities are highly effective, particularly in identifying security vulnerabilities. It is one of the most important and valuable features of the platform."
"The most valuable feature of the CAST Application Intelligence Platform is its security dashboard which is a dedicated dashboard that's pretty helpful because it gives compliance checks based on some of the leading frameworks in the industry, such as ISO 5055, OWASP, CWE Top 25, and NIST security guidelines. I find the security dashboard of the solution and the information it provides pretty useful. The security dashboard of the CAST Application Intelligence Platform is a feature that stands out."
"Our clients use CAST Highlight for cloud migration. This allows them to remove or remediate the blockers which are highlighted. This part of the solution shows improvement in quality and captures feedback for our clients."
"This product is top-notch solution and the technology is the best on the market."
"It is a very easy tool for developers to use in parallel while they're doing the coding. It does auto scanning as we are progressing with the CI/CD pipeline. It has got very simple and efficient API support."
"I do not remember any issues with stability."
"t's a cloud-based solution, so there was no installation involved."
"The scanning capabilities, particularly for our repositories, have been invaluable."
"The most valuable features are the server, scanning, and it has helped identify issues with the security analysis."
"What stands out to me is the user-friendliness of each feature."
"Fortify on Demand's best feature is that there's no need to install and configure it locally since it's on the cloud."
 

Cons

"The integration of this solution could be improved."
"The overall coverage of rules could be improved in the CAST Application Intelligence Platform because it does not cater to or cover all. For example, 2022 CWE coverage is still not available in the CAST Application Intelligence Platform. The solution also covers some NIST rules, but it does not cater to all rules. An additional feature I'd like to see in the next update of the CAST Application Intelligence Platform is for it to provide source code developer and contributor details, especially information on which areas of code were touched. This would be a good insight as the CAST Application Intelligence Platform looks into the source code."
"It has very few plugins to access different code repositories, so source code has to be fed."
"Implementation could be made more simpler as it is complex."
"Areas for improvement in CAST AIP include enhancing support for implementation in complex environments and improving technical support to address organizational challenges alongside engineering issues."
"We would like a reduction in the time frame of scans. It takes us three to five days to run a scan now. We would like that reduced to under three days."
"We want a user-based control and role-based access for developers. We want to give limited access to developers so that it only pertains to the code that they write and scanning of the codes for any vulnerabilities as they're progressing with writing the code. As of now, the interface to give restricted access to the developers is not the best. It gives them more access than what is basically required, but we don't want over-provisioning and over-access."
"There were some regulated compliances, which were not there."
"The biggest deficiency is the integration with bug tracker systems. It might be better if the configuration screen presented for accessing the bug tracking systems could provide some flexibility."
"Takes up a lot of resources which can slow things down."
"An improvement would be the ability to get vulnerabilities flowing automatically into another system."
"Micro Focus Fortify on Demand cannot be run from a Linux Agent. When we are coding the endpoint it will not work, we have to use Windows Agent. This is something they could improve."
"The Visual Studio plugin seems to hang when a scan is run on big projects. I would expect some improvements there."
 

Pricing and Cost Advice

"I do know how the CAST Application Intelligence Platform is licensed, but I'm not able to give the cost because the price is not listed. My company works with individual vendors, so pricing is on a case-to-case basis, but the vendors give specialized pricing because of the enterprise deployment, though my team is aware of product pricing based on lines of code, based on the number of applications, etc., I'm unable to give the exact licensing costs of the CAST Application Intelligence Platform. My company doesn't have to pay extra for some features or services because all are included as part of the enterprise license. On a scale of one to five, with five being very cheap and one being very expensive, I would rate the CAST Application Intelligence Platform as three out of five."
"There are different costs for Micro Focus Fortify on Demand depending on the assessments you want to use. There is only a standard license needed to use the solution."
"Despite being on the higher end in terms of cost, the biggest value lies in its abilities, including robust features, seamless integration, and high-quality findings."
"Fortify on Demand is affordable, and its licensing comes with a year of support."
"The solution is expensive and the price could be reduced."
"The licensing was good because the licenses have the heavy centralized server."
"Their subscriptions could use a little bit of a reworking, but I am very happy with what they're able to provide."
"Fortify on Demand is more expensive than Burpsuite. I rate its pricing a nine out of ten."
"We are still using the trial version at this point but I can already see from the trial version alone that it is a good product. For others, I would say that Fortify on Demand might look expensive at the beginning, but it is very powerful and so you shouldn't be put off by the price."
report
Use our free recommendation engine to learn which Software Development Analytics solutions are best for your needs.
831,265 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
29%
Manufacturing Company
12%
Computer Software Company
12%
Insurance Company
11%
Financial Services Firm
20%
Manufacturing Company
15%
Computer Software Company
12%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about CAST Application Intelligence Platform?
CAST's risk and security flow detection capabilities are highly effective, particularly in identifying security vulnerabilities. It is one of the most important and valuable features of the platfor...
What needs improvement with CAST Application Intelligence Platform?
Areas for improvement in CAST AIP include enhancing support for implementation in complex environments and improving technical support to address organizational challenges alongside engineering iss...
What is your primary use case for CAST Application Intelligence Platform?
CAST AIP is a valuable solution for quality metrics and application security. It is beneficial for software architecture detection.
What do you like most about Micro Focus Fortify on Demand?
It helps deploy and track changes easily as per time-to-time market upgrades.
What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?
In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...
What needs improvement with Micro Focus Fortify on Demand?
Not challenges with the product itself. The product is very reliable. It does have a steep learning curve. But, again, one thing that Fortify or OpenText does very well is training. There are a lot...
 

Also Known As

CAST AIP
Micro Focus Fortify on Demand
 

Learn More

 

Overview

 

Sample Customers

Steria, T-Systems MMS, Atos Origin, Accenture, Capgemini
SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.