Fortify on Demand vs GitHub comparison

Read 92 GitHub reviews

2,615 Views
1,126 Comparison Views

100% willing to recommend

Fortify on Demand

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 29, 2024

Fortify on Demand and GitHub compete in the security and development solutions category. GitHub seems to have the upper hand due to its extensive features and perceived higher ROI.

Features: Fortify on Demand users highlight powerful security scanning features, integration capabilities, and reasonable setup costs. GitHub users value its collaboration tools, extensive integrations, and code review features such as automated security alerts, project management tools, and a marketplace for third-party apps.

Room for Improvement: Fortify on Demand users suggest enhanced automation, more comprehensive reporting, and better user interface. GitHub users mention the need for improved security features, better documentation, and more responsive support channels.

Ease of Deployment and Customer Service: Fortify on Demand users cite straightforward deployment processes and responsive customer service. GitHub users also find deployment easy but occasionally face delays in support response.

Pricing and ROI: Fortify on Demand users report reasonable setup costs and positive ROI. GitHub users find its pricing to be higher but justify it with better ROI due to its feature set.

To learn more, read our detailed Fortify on Demand vs. GitHub Report (Updated: December 2024).

Fortify on Demand vs. GitHub

Download the complete report

Helped 823,795 peers since 2012

Categories and Ranking

Fortify on Demand

Ranking in Application Security Tools

9th

Average Rating

8.0

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (8th)

GitHub

Ranking in Application Security Tools

7th

Average Rating

8.8

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Version Control (3rd)

Mindshare comparison

As of December 2024, in the Application Security Tools category, the mindshare of Fortify on Demand is 5.0%, up from 4.8% compared to the previous year. The mindshare of GitHub is 0.8%, down from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Jonathan Steyn

Principal Technical Consultant at EOH

Source code analyzer, FPR file generation, reduction of false positives and generates compliance reports, for in-depth analysis

Not challenges with the product itself. The product is very reliable. It does have a steep learning curve. But, again, one thing that Fortify or OpenText does very well is training. There are a lot of free resources and training in the community forums, free training as well as commercial training where users can train on how to use the back-end systems and the scanning engines and how to use command-line arguments because some of the procedures or some of the tools do require a bit of a learning curve. That's the only challenge I've really seen for customers because you have to learn how to use the tool effectively. But Fortify has, in fact, improved its user interface and the way users engage the dashboards and the interfaces. It is intuitive. It's easy to understand. But in some regards, the cybersecurity specialist or AppSec would need a bit of training to engage the user interface and to understand how it functions. But from the point of the reliability index and how powerful the tool is, there's no challenge there. But it's just from a learning perspective; users might need a bit more skill to use the tool. The user interface isn't that tedious. It's not that difficult to understand. When I initially learned how to use the interfaces, I was able to master it within a week and was able to use it quite effectively. So training is required. All skills are needed to learn how to use the tool. I would like to see more enhancements in the dashboards. Dashboards are available. They do need some configuration and settings. But I would like to see more business intelligence capabilities within the tool. It's not particularly a cybersecurity function, but, for instance, business impact analysis or other features where you can actually use business intelligence capabilities within your security tool. That would be remarkable because not only do you have a cybersecurity tool, but you also have a tool that can give you business impact analysis and some other measurements. A bit more intelligence in terms of that from a cybersecurity perspective would be remarkable.

Read full review

AjayKrishna

Senior Software Engineer at a transportation company with 10,001+ employees

Reduces project delivery times and costs

I think one area where GitHub could improve is its search and navigation functionality within repositories. For example, we use IDEs like IntelliJ or Visual Studio Code when developing code. These IDEs allow us to easily navigate from one piece of code to another file where a method is being called. It would be really helpful if the solution could add this navigation feature. It would allow us to move from one class file to another more easily, helping us search quicker and follow the code flow completely within GitHub. This would be more convenient than having to import the code into our local IDE to look at the code flow and navigate through it. Adding this kind of IDE-like navigation within the tool would make the user experience more seamless and efficient.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of Micro Focus Fortify on Demand is the information it can provide. There is quite a lot of information. It can pinpoint right down to where the problem is, allowing you to know where to fix it. Overall the features are easy to use, you don't have to be a coder. You can be a manager, or in IT operations, et cetera, anyone can use it. It is quite a well-rounded functional solution."

"Its ability to perform different types of scans, keep everything in one place, and track the triage process in Fortify SSC stands out."

"The solution scans our code and provides us with a dashboard of all the vulnerabilities and the criticality of the vulnerabilities. It is very useful that they provide right then and there all the information about the vulnerability, including possible fixes, as well as some additional documentation and links to the authoritative sources of why this is an issue and what's the correct way to deal with it."

"The licensing was good."

"The most valuable features are the server, scanning, and it has helped identify issues with the security analysis."

"It helps deploy and track changes easily as per time-to-time market upgrades."

"Fortify supports most languages. Other tools are limited to Java and other typical languages. IBM's solutions aren't flexible enough to support any language. Fortify also integrates with lots of tools because it has API support."

"The user interface is good."

More Fortify on Demand pros

"For branching, it works well, especially in an agile environment."

"The most valuable features are the speed, low latency, and the clear, concise set of commands."

"The tool is valuable because it helps us work in a distributed environment with multiple people across different locations and time zones. We have a common repository that everyone works on, which would be tough to manage manually. GitHub helps us maintain this single source of truth. Everyone can check out their own branches, which is important for our branching strategies. We can fork, check out feature branches, work on our code, and merge back into parent branches for deployment. This is crucial when multiple people are working on the same codebase."

"GitHub is very straightforward. I really appreciate the versioning capabilities, ease of use, and the ability to host code."

"Has great integration with third-party tools."

"The most valuable feature of the solution is the version control field."

"I appreciate saving from Visual Studio Code that implements changes directly on GitHub."

"The solution is scalable."

More GitHub pros

Cons

"The technical support is actually a problem that needs to be addressed. Since the acquisition and merger with Hewlett Packard, it has been really hard to know who the technical or salesperson to talk to."

"We want a user-based control and role-based access for developers. We want to give limited access to developers so that it only pertains to the code that they write and scanning of the codes for any vulnerabilities as they're progressing with writing the code. As of now, the interface to give restricted access to the developers is not the best. It gives them more access than what is basically required, but we don't want over-provisioning and over-access."

"It could have a little bit more streamlined installation procedure. Based on the things that I've done, it could also be a bit more automated. It is kind of taking a bunch of different scanners, and SSC is just kind of managing the results. The scanning doesn't really seem to be fully integrated into the SSC platform. More automation and any kind of integration in the SSC platform would definitely be good. There could be a way to initiate scans from SSC and more functionality on the server-side to initiate desk scans if it is not already available."

"There are lots of limitations with code technology. It cannot scan .net properly either."

"This solution would be improved if the code-quality perspective were added to it, on top of the security aspect."

"Reporting could be improved."

"Temenos's (T-24) info basic is a separate programming interface, and such proprietary platforms and programming interfaces were not easily supported by the out-of-the-box versions of Fortify."

"There were some regulated compliances, which were not there."

More Fortify on Demand cons

"The development team pushes the code into a repository, and the CI/CD pipeline will perform the build. We need open-source libraries to perform the builds. It would be helpful to have the ability to link to open-source libraries like npm libraries. I don't know if GitHub Actions provides this. I would like to see that in GitHub Actions if they don't."

"The descriptions within Github could be more user-friendly to show the trees of Gitflow."

"GitHub should work on enhancing its search capability. The tool should add some more features and functionalities."

"GitHub should provide more integration in their next release, including integrating with Jenkins, CI/CD and Jira."

"GitHub could improve in resolving conflicts when multiple developers modify the same line of code."

"It would be better if the amount of storage were increased."

"I think one area where GitHub could improve is its search and navigation functionality within repositories. For example, we use IDEs like IntelliJ or Visual Studio Code when developing code. These IDEs allow us to easily navigate from one piece of code to another file where a method is being called. It would be really helpful if the solution could add this navigation feature."

"I would want to see some form of code security scanning implemented."

More GitHub cons

Pricing and Cost Advice

"The solution is expensive and the price could be reduced."

"It is quite expensive. Pricing and the licensing model could be improved."

"It is not more expensive than other solutions, but the pricing is competitive."

"It is cost-effective."

"The pricing model it's based on how many applications you wish to scan."

"Fortify on Demand is affordable, and its licensing comes with a year of support."

"The pricing can be improved because it is complex when compared to the competition."

"Fortify on Demand is more expensive than Burpsuite. I rate its pricing a nine out of ten."

More Fortify on Demand pricing and cost advice

"If I consider the market standards, the product's price is pocket-friendly."

"We are currently paying nothing for GitHub."

"You don't have to pay for a license if you are using the free version."

"We have an enterprise licensing agreement, and I am not part of the finance department so I can't say how much it costs."

"GitHub is a cost-effective solution."

"The price of this solution is reasonable."

"The basic licensing model is free, and if you need to have technical support and such things, then it does cost something. You only need to pay extra if you need technical support."

"I haven't had to pay anything for GitHub, I use the free version."

More GitHub pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

823,795 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

20%

Manufacturing Company

15%

Computer Software Company

12%

Government

Manufacturing Company

13%

Computer Software Company

12%

Financial Services Firm

12%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Micro Focus Fortify on Demand?

It helps deploy and track changes easily as per time-to-time market upgrades.

What is your experience regarding pricing and costs for Micro Focus Fortify on Demand?

In comparison with other tools, they're competitive. It is not more expensive than other solutions, but their pricing is competitive. The licenses for Fortify On Demand are generally bought in unit...

What needs improvement with Micro Focus Fortify on Demand?

What do you like most about GitHub?

The control is the most valuable feature as developers can work on a single code.

What is your experience regarding pricing and costs for GitHub?

I'm not aware of the costs associated with GitHub. I simply appreciate its efficiency in managing code and collaborating with team members.

What needs improvement with GitHub?

I would like to see some AI functionality included in GitHub, similar to the features seen in GitLab, to enhance productivity. Additionally, offering limited free access to features like Copilot co...

SonarQube Server (formerly SonarQube) vs Fortify on Demand

Comparisons

Compared 19% of the time

Veracode vs Fortify on Demand

Compared 16% of the time

Checkmarx One vs Fortify on Demand

Compared 12% of the time

Coverity vs Fortify on Demand

Compared 10% of the time

Tenable.io Web Application Scanning vs Fortify on Demand

Compared 2% of the time

More Fortify on Demand Competitors

Snyk vs GitHub

Compared 18% of the time

AWS CodeCommit vs GitHub

Compared 14% of the time

Bitbucket vs GitHub

Compared 12% of the time

Checkmarx One vs GitHub

Compared 10% of the time

Atlassian SourceTree vs GitHub

Compared 5% of the time

More GitHub Competitors

Product Reports

Fortify on Demand

Download Fortify on Demand product report

Download GitHub product report

Also Known As

Micro Focus Fortify on Demand

No data available

Learn More

OpenText

Overview

Fortify on Demand is a web application security testing tool that enables continuous monitoring. The solution is designed to help you with security testing, vulnerability management and tailored expertise, and is able to provide the support needed to easily create, supplement, and expand a software security assurance program without the need for additional infrastructure or resources.

Fortify on Demand Features

Fortify on Demand has many valuable key features. Some of the most useful ones include:

Deployment flexibility
Scalability
Built for DevSecOps
Ease of use
Supports 27+ languages
Real-time vulnerability identification with
Security Assistant
Actionable results in less than 1 hour for most applications with DevOps automation
Expanded coverage, accuracy and remediation details with IAST runtime agent
Continuous application monitoring of production applications
Virtual patches
Supports iOS and Android mobile applications
Security vulnerability identification
Behavioral and reputation analysis

Fortify on Demand Benefits

There are several benefits to implementing Fortify on Demand. Some of the biggest advantages the solution offers include:

Fast remediation: With Fortify on Demand you can achieve fast remediation throughout the software lifecycle with robust assessments by a team of security experts.

Easy integration: The solution’s integration ecosystem is easy to use, creating a more secure software supply chain.

Security testing: Fortify on Demand covers in-depth mobile app security testing, open-source analysis, and vendor application security management, in addition to static and dynamic testing.

Reviews from Real Users

Below are some reviews and helpful feedback written by PeerSpot users currently using the Fortify on Demand solution.

Dionisio V., Senior System Analyst at Azurian, says, "One of the top features is the source code review for vulnerabilities. When we look at source code, it's hard to see where areas may be weak in terms of security, and Fortify on Demand's source code review helps with that." He goes on to add, “Another reason I like Fortify on Demand is because our code often includes open source libraries, and it's important to know when the library is outdated or if it has any known vulnerabilities in it. This information is important to us when we're developing our solutions and Fortify on Demand informs us when it detects any vulnerable open source libraries.”

A Security Systems Analyst at a retailer mentions, “Being able to reduce risk overall is a very valuable feature for us.”

Jayashree A., Executive Manager at PepsiCo, comments, “Once we have our project created with our application pipeline connected to the test scanning, it only takes two minutes. The report explaining what needs to be modified related to security and vulnerabilities in our code is very helpful. We are able to do static and dynamic code scanning. When we are exploring some of the endpoints this solution identifies many loopholes that hackers could utilize for an attack. This has been very helpful and surprising how many vulnerabilities there can be.”

A Principal Solutions Architect at a security firm explains, “Its ability to perform different types of scans, keep everything in one place, and track the triage process in Fortify SSC stands out.”

PeerSpot user Mamta J., Co-Founder at TechScalable, states, "Almost all the features are good. This solution has simplified designing and architecting for our solutions. We were early adopters of microservices. Their documentation is good. You don't need to put in much effort in setting it up and learning stuff from scratch and start using it. The learning curve is not too much."

GitHub is a web-based Git repository hosting service. It offers all of the distributed revision control and source code management (SCM) functionality of Git as well as adding its own features. Unlike Git, which is strictly a command-line tool, GitHub provides a Web-based graphical interface and desktop as well as mobile integration. It also provides access control and several collaboration features such as bug tracking, feature requests, task management, and wikis for every project.

Sample Customers

SAP, Aaron's, British Gas, FICO, Cox Automative, Callcredit Information Group, Vital and more.

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent

Fortify on Demand vs. GitHub