Try our new research platform with insights from 80,000+ expert users

Fortify WebInspect pros and cons

Vendor: OpenText

3.6 out of 5

21 reviews
82% willing to recommend

182 followers

Pros & Cons summary

Fortify WebInspect is a powerful tool known for its dynamic application scanning capabilities and robust vulnerability detection. It offers scalability with an easy-to-use, centralized dashboard and is backed by highly regarded technical support. While it excels in security assessments, integration with Microsoft Azure and other clouds needs improvement, and installation is complex. Report creation and scanning can be slow, and its high pricing makes it expensive compared to similar tools.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

This tool allows for guided scans and easy report sharing, proving useful for various applications.

Fortify WebInspect offers effective technical support and a valuable centralized dashboard.

Its ability to detect a wide range of vulnerabilities surpasses other products, enhancing security capabilities.

The static analysis feature has been highlighted as particularly valuable for dynamic application scanning.

The platform's comprehensive assessments and ease of use streamline vulnerability management and ensure secure applications.

CONS

Fortify WebInspect lacks a cloud-based platform and better integration with cloud providers, particularly Microsoft's Azure Cloud.

The pricing of Fortify WebInspect is considered too high, making it less accessible for potential customers, especially in Korea.

The setup is complex, with the installation process being laborious and time-consuming.

Scanning errors are frequently encountered, and the scanning process heavily utilizes system resources, requesting up to 32 GB RAM for enterprise web applications.

There is a need for automation enhancement, as users require specific skills to interpret scanning results and address vulnerabilities.

Fortify WebInspect Pros review quotes

MS

Information Security Architect at a real estate/law firm with 1,001-5,000 employees

Nov 11, 2021

Reporting, centralized dashboard, and bird's eye view of all vulnerabilities are the most valuable features.

Read full review

TN

Theeradach Noisaeng

Director at Eguardian lanka

Jun 11, 2024

The feature that has been most influential in identifying vulnerabilities is its ability to crawl the website, understand the structure, and analyze the network packets sent and received.

Read full review

MS

Information Security Architect at a real estate/law firm with 1,001-5,000 employees

Jun 24, 2019

I've found the centralized dashboard the most valuable. For the management, it helps a lot to have abilities at the central level.

Read full review

Fortify WebInspect

Free Report: Fortify WebInspect Reviews and More

Learn what your peers think about Fortify WebInspect. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.

847,862 professionals have used our research since 2012.

Ilyas Sadibekov

Consulting Engineer at a consultancy with 11-50 employees

Mar 21, 2023

There are lots of small settings and tools, like an HTTP editor, that are very useful.

Read full review

Services Project Lead, Information Technology at IGT Solutions

Oct 28, 2024

The tool provides comprehensive vulnerability assessments which help ensure our deliverables are as free from vulnerabilities as possible. It has also streamlined our web application vulnerability assessments, assisting us in delivering secure applications to our clients.

Read full review

General Manager at Inexion Co.

Aug 18, 2023

The solution's technical support was very helpful.

Read full review

FP

Senior Manager - IT Security & ISMS at Ericsson

Apr 25, 2023

Good at scanning and finding vulnerabilities.

Read full review

Global ISO 27001 Program Lead at DXC Technology

Sep 16, 2024

It is easy to use, and its reporting is fairly simple.

Read full review

Security Engineer at Secure Network

Oct 29, 2020

The solution is easy to use.

Read full review

reviewer1268340

Assoc. Director at Cognizant

Feb 9, 2020

It is scalable and very easy to use.

Read full review

Show 10 more reviews (out of 21)

Fortify WebInspect Cons review quotes

MS

Information Security Architect at a real estate/law firm with 1,001-5,000 employees

Nov 11, 2021

It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application.

Read full review

TN

Theeradach Noisaeng

Director at Eguardian lanka

Jun 11, 2024

I want to enhance automation. Currently, Fortify WebInspect can scan and find vulnerabilities, but users with specific skills need to interpret the results and understand how to address them.

Read full review

MS

Information Security Architect at a real estate/law firm with 1,001-5,000 employees

Jun 24, 2019

I'm not sure licensing, but on the pricing, it's a bit costly. It's a bit overpriced. Though it is an enterprise tool, there are other tools also with similar functionalities.

Read full review

Fortify WebInspect

Free Report: Fortify WebInspect Reviews and More

Learn what your peers think about Fortify WebInspect. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.

847,862 professionals have used our research since 2012.

Ilyas Sadibekov

Consulting Engineer at a consultancy with 11-50 employees

Mar 21, 2023

We have had a problem with authentification.

Read full review

Services Project Lead, Information Technology at IGT Solutions

Oct 28, 2024

I would like WebInspect's scanning capability to be quicker.

Read full review

General Manager at Inexion Co.

Aug 18, 2023

Fortify WebInspect's shortcoming stems from the fact that it is a very expensive product in Korea, which makes it difficult for its potential customers to introduce the product in their IT environment.

Read full review

FP

Senior Manager - IT Security & ISMS at Ericsson

Apr 25, 2023

Not sufficiently compatible with some of our systems.

Read full review

Global ISO 27001 Program Lead at DXC Technology

Sep 16, 2024

There are some file extensions, like .SER, that Fortify WebInspect doesn't scan.

Read full review

Security Engineer at Secure Network

Oct 29, 2020

The scanner could be better.

Read full review

reviewer1268340

Assoc. Director at Cognizant

Feb 9, 2020

The installation could be a bit easier. Usually it's simple to use, but the installation is painful and a bit laborious and complex.

Read full review

Show 10 more reviews (out of 20)

Product Categories

Product Categories

Dynamic Application Security Testing (DAST)

Popular Comparisons

Popular Comparisons

HCL AppScan vs Fortify WebInspect

Invicti vs Fortify WebInspect

Rapid7 InsightAppSec vs Fortify WebInspect

PortSwigger Burp Suite Enterprise Edition vs Fortify WebInspect

WhiteHat Dynamic vs Fortify WebInspect

Appknox vs Fortify WebInspect

StackHawk vs Fortify WebInspect

See all alternatives

Product Categories

Product Categories

Dynamic Application Security Testing (DAST)

Popular Comparisons

Popular Comparisons

HCL AppScan vs Fortify WebInspect

Invicti vs Fortify WebInspect

Rapid7 InsightAppSec vs Fortify WebInspect

PortSwigger Burp Suite Enterprise Edition vs Fortify WebInspect

WhiteHat Dynamic vs Fortify WebInspect

Appknox vs Fortify WebInspect

StackHawk vs Fortify WebInspect

See all alternatives

Related questions

54

What alternatives are there for Fortify WebInspect and Fortify SCA?

19

Which solution do you prefer: Fortify WebInspect or HCL AppScan?

6

When evaluating Dynamic Application Security Testing (DAST), what aspect do you think is the most important to look for?

4

Why is Dynamic Application Security Testing (DAST) important for companies?