OpenText Dynamic Application Security Testing vs PortSwigger Burp Suite Enterprise Edition comparison

OpenText Dynamic Application Security Testing vs. PortSwigger Burp Suite Enterprise Edition

Download the complete report

Helped 869,952 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

OpenText Dynamic Applicatio...

Ranking in Dynamic Application Security Testing (DAST)

3rd

Average Rating

7.2

Reviews Sentiment

6.1

Number of Reviews

Ranking in other categories

DevSecOps (9th)

PortSwigger Burp Suite Ente...

Ranking in Dynamic Application Security Testing (DAST)

6th

Average Rating

8.0

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Vulnerability Management (24th)

Mindshare comparison

As of October 2025, in the Dynamic Application Security Testing (DAST) category, the mindshare of OpenText Dynamic Application Security Testing is 17.7%, down from 21.6% compared to the previous year. The mindshare of PortSwigger Burp Suite Enterprise Edition is 9.2%, up from 4.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Dynamic Application Security Testing (DAST) Market Share Distribution
Product	Market Share (%)
OpenText Dynamic Application Security Testing	17.7%
PortSwigger Burp Suite Enterprise Edition	9.2%
Other	73.1%

Dynamic Application Security Testing (DAST)

Featured Reviews

Navin N

Global ISO 27001 Program Lead at DXC Technology

Effective scanning of diverse file extensions with fast reporting and issue resolution

We develop software packages for clients, and these clients are mostly in the BFSI sector. The packages need to be scanned, and we engage Fortify WebInspect for this. Customers typically perform their own application pen tests, but in some cases, we have engagements where customers want us to scan…

Read full review

Mustufa Bhavnagarwala

CyberRisk Solution Advisor at Deloitte

With a super easy initial setup phase, the tool also offers regular updates

PortSwigger Burp Suite Enterprise Edition's new features released in the last two years are really good, so I won't say that I am not looking at any new features. The product's latest feature, which was really good, but had an issue since it allowed us in our company to put the proxy in the browser and then connect it with PortSwigger Burp Suite Enterprise Edition to get the calls resolved with the help of setup allowing for browser features inside PortSwigger Burp Suite Enterprise Edition. I want PortSwigger Burp Suite Enterprise Edition to be available on the cloud, though my concerns stem from the fact that I don't know how an application hosted on the cloud can do a proxy for an application. I can't recall what needs to be added to the solution to make it better, but I have seen that when I use the product, I feel that the tool needs to have a few elements added to it. The cost per license per user could be cheaper, specifically for individual licensing.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is easy to use, and its reporting is fairly simple."

"Good at scanning and finding vulnerabilities."

"Guided Scan option allows us to easily scan and share reports."

"The solution's technical support was very helpful."

"The solution is able to detect a wide range of vulnerabilities. It's better at it than other products."

"The most valuable feature of this solution is the ability to make our customers more secure."

"Reporting, centralized dashboard, and bird's eye view of all vulnerabilities are the most valuable features."

"It is scalable and very easy to use."

More OpenText Dynamic Application Security Testing pros

"This tool helps identify vulnerabilities. We then provide the report to the developers, who address the issues identified automatically. Its most valuable feature is CI/CD integration."

"The product's initial setup phase was super easy."

"We are in the early stage of using the solution making it difficult to fully determine the best features. However, we have noticed the CMDB and device discovery features look valuable at this time."

"The solution's extensions really expand the capabilities and features offered by the installation."

"The initial setup is straightforward."

"I like normal dynamic scanning, general web applications scanning, and vulnerability assessments."

"The product is easy to use."

"The most appreciated functionality of PortSwigger Burp Suite is its ability to perform brute force attacks automatically."

More PortSwigger Burp Suite Enterprise Edition pros

Cons

"Our biggest complaint about this product is that it freezes up, and literally doesn't work for us."

"We have often encountered scanning errors."

"The solution needs better integration with Microsoft's Azure Cloud or an extension of Azure DevOps. In fact, it should better integrate with any cloud provider. Right now, it's quite difficult to integrate with that solution, from the cloud perspective."

"Fortify WebInspect's shortcoming stems from the fact that it is a very expensive product in Korea, which makes it difficult for its potential customers to introduce the product in their IT environment."

"The scanner could be better."

"I'm not sure licensing, but on the pricing, it's a bit costly. It's a bit overpriced. Though it is an enterprise tool, there are other tools also with similar functionalities."

"The installation could be a bit easier. Usually it's simple to use, but the installation is painful and a bit laborious and complex."

"I want to enhance automation. Currently, Fortify WebInspect can scan and find vulnerabilities, but users with specific skills need to interpret the results and understand how to address them."

More OpenText Dynamic Application Security Testing cons

"From my personal experience, the solution's performance could be improved."

"There's definitely room for improvement. There are lots of false positives. Once I do the manual assessment, it comes as a false positive. They need to improve the Enterprise Edition, especially the part that gives false positives."

"The solution is a bit expensive."

"Scalability could be better."

"PortSwigger Burp Suite Enterprise Edition should incorporate a static code analysis feature. One main issue we encounter is false positives. False positives can be challenging for developers."

"It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively."

"It would be better if the solution is cloud-based."

"There are features or functionality missing, but PortSwigger Burp Suite Enterprise Edition does try to update frequently to alleviate the shortcomings."

More PortSwigger Burp Suite Enterprise Edition cons

Pricing and Cost Advice

"It’s a fair price for the solution."

"The price is okay."

"This solution is very expensive."

"Fortify WebInspect is a very expensive product."

"The pricing is not clear and while it is not high, it is difficult to understand."

"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."

"Our licensing is such that you can only run one scan at a time, which is inconvenient."

"The tool's pricing is reasonable and costs around 400 dollars per year."

"For Professional, it's about $400 per year."

"PortSwigger Burp Suite Enterprise Edition is expensive compared to other solutions."

"Although the solution can be a bit expensive for small companies, its pricing is fairly reasonable for its capabilities."

"PortSwigger Burp Suite Enterprise Edition is neither a cheap nor an expensive product. PortSwigger Burp Suite Enterprise Edition is a good tool for companies."

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

869,952 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Government

14%

Manufacturing Company

12%

Computer Software Company

Financial Services Firm

18%

Computer Software Company

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	2
Large Enterprise	7

Questions from the Community

What is your experience regarding pricing and costs for Fortify WebInspect?

While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs between $15,000 to $19,000. In comparison, Burp Suite costs approximately $500 to ...

What needs improvement with Fortify WebInspect?

WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applications, where it requires approximately 20-24 hours to crawl and audit but produ...

What is your primary use case for Fortify WebInspect?

I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite from PortSwigger. For API testing, I use Postman with Burp Suite or WebInspect fo...

What do you like most about PortSwigger Burp Suite Enterprise Edition?

Parallel scans can be done with PortSwigger Burp Suite Enterprise Edition.

What is your experience regarding pricing and costs for PortSwigger Burp Suite Enterprise Edition?

I am using the Community Edition, which is free, however, I understand there might be extra expenses for additional features or services.

What needs improvement with PortSwigger Burp Suite Enterprise Edition?

It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively.

PortSwigger Burp Suite Professional vs OpenText Dynamic Application Security Testing

Comparisons

Compared 18% of the time

OWASP Zap vs OpenText Dynamic Application Security Testing

Compared 11% of the time

Veracode vs OpenText Dynamic Application Security Testing

Compared 9% of the time

HCL AppScan vs OpenText Dynamic Application Security Testing

Compared 7% of the time

Contrast Security Assess vs OpenText Dynamic Application Security Testing

Compared 5% of the time

More OpenText Dynamic Application Security Testing Competitors

Seal Security vs PortSwigger Burp Suite Enterprise Edition

Compared 26% of the time

Acunetix vs PortSwigger Burp Suite Enterprise Edition

Compared 18% of the time

Tenable Nessus vs PortSwigger Burp Suite Enterprise Edition

Compared 8% of the time

Rapid7 Metasploit vs PortSwigger Burp Suite Enterprise Edition

Compared 6% of the time

Tenable Vulnerability Management vs PortSwigger Burp Suite Enterprise Edition

Compared 6% of the time

More PortSwigger Burp Suite Enterprise Edition Competitors

Product Reports

OpenText Dynamic Application Security Testing

Download OpenText Dynamic Application Security Testing product report

OpenText Dynamic Application Security Testing report

PortSwigger Burp Suite Enterprise Edition

Download PortSwigger Burp Suite Enterprise Edition product report

PortSwigger Burp Suite Enterprise Edition report

Also Known As

Micro Focus WebInspect, WebInspect

No data available

Overview

OpenText Dynamic Application Security Testing offers robust scalability, ease of use, and high accuracy in scanning, making it a valuable tool for enterprises.

This security testing platform is known for its centralized dashboard, guided scans, and comprehensive reporting. It integrates seamlessly with tools like Fortify code scanner and supports extensive vulnerability detection and analysis, enhancing efficiency in security management. Despite its strengths, users suggest improvements in cloud integration, cost-effectiveness, and installation processes. Faster scans, reduced false positives, and improved mobile testing features are also desired.

What are the key features of OpenText Dynamic Application Security Testing?

Scalability: Easily adapts to changing enterprise needs.
Ease of Use: User-friendly interface with guided scans.
Comprehensive Reporting: Detailed vulnerability analysis and reporting.
Integration Capabilities: Works with Fortify code scanner and user authentication scanning.
Wide Vulnerability Detection: Identifies extensive security vulnerabilities.

What benefits should users expect from reviews?

Efficient Vulnerability Management: Streamlines security management in development environments.
Detailed Analysis: Provides in-depth insights into security issues.
Quick Setup: Easy to deploy within existing systems.
Enterprise Preference: Supports enterprise environments efficiently.

In industries like BFSI, OpenText Dynamic Application Security Testing is employed for performance network application testing, dynamic and static application security testing, and code checks. Security and QA teams use it in development processes to ensure application security prior to release, proving integral in both enterprise and testing environments.

OpenText

Burp Suite Enterprise Edition is an automated web vulnerability scanner, designed to enable enterprises to scale security across their web portfolios and achieve DevSecOps. Automate trusted Burp scans, integrate web security testing with development, and free your application security to support software development.

PortSwigger

Sample Customers

Aaron's

Nasa, Disney, Dow Jones, Iberia Bank, IBM, Ernest and Young, Apple, Ryanair, Thyssenkrupp, Delivery Hero

OpenText Dynamic Application Security Testing vs. PortSwigger Burp Suite Enterprise Edition