Both products are great and both of them offers SAST, DAST and IAST. I think you need to be more specific which solution you are looking for. Are you looking for static application security testing? or Dynamic application security testing? or Interactive Application Security testing?
HPE Fortify, which is now Microfocus Fortify, is the current market leader. However, I think IBM AppScan is also very good one. You can also check out other AST solutions as well. Offerings are different from each other and they are features and strengths are different from one another as well.
IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.
Both products are great and both of them offers SAST, DAST and IAST. I think you need to be more specific which solution you are looking for. Are you looking for static application security testing? or Dynamic application security testing? or Interactive Application Security testing?
HPE Fortify, which is now Microfocus Fortify, is the current market leader. However, I think IBM AppScan is also very good one. You can also check out other AST solutions as well. Offerings are different from each other and they are features and strengths are different from one another as well.