Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | AppScan 360 by HCLSoftware View product | Fortify on Demand by OpenText View product |
|---|---|---|
| Overview | ||
| What it is | AppScan 360 offers unified AppSec platform and SAST, DAST, IAST, and SCA correlation. Use it for compliance auditing. See Application Security Testing alternatives. | Fortify on Demand: Application Security Testing as a Service and SAST and DAST scans. Built for CI/CD security gating. Compare Application Security Testing alternatives. |
| Product type | Unified Application Security Testing (AST) Platform | Application Security Testing as a Service (ASTaaS) |
| Best for | Financial Services, Healthcare, High Tech, Government, Automotive, Public Sector | Financial Services, Healthcare, Government, High Tech, Retail, Public Sector, Technology |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | SaaSCloud |
| Deployment details | Cloud SaaS; On-Premises; Hybrid Private Cloud; Cloud SaaS; On-Premises Kubernetes; Private Cloud | Cloud SaaS / Managed Cloud Testing; Cloud SaaS; Managed Cloud Scanning |
| Data residency | Customer-hosted code sovereignty; Cloud SaaS options | Multi-region cloud hosting; Global sovereign options |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Source CodeRunning Web AppsREST APIsContainerized Apps | Web ApplicationsMobile Apps (iOS/Android)APIsMicroservices |
| Compliance | PCI-DSS 4.0OWASP Top 10ISO 27001SOC 2NIST SP 800-53 | PCI-DSS 4.0OWASP Top 10HIPAAISO 27001FedRAMP |
| Integrations & coverage | ||
| Integrations | GitHubGitLabJenkinsJiraAzure DevOpsKubernetesOpenShift | GitHubGitLabAzure DevOpsJenkinsJiraVisual StudioEclipse |
| Industries | Financial ServicesHealthcareHigh TechGovernmentAutomotivePublic Sector | Financial ServicesHealthcareGovernmentHigh TechRetailPublic Sector+1 more |
| Regions | Global enterprise deployments | Global cloud regions |
| Vendor | ||
| Company | HCLSoftware | OpenText |
| Headquarters | Noida, India | Waterloo, Ontario, Canada |
| Company size | 10,000+ | 20,000+ |
| Founded | 2017 | 1991 |
Overview
What it is
AppScan 360
AppScan 360 offers unified AppSec platform and SAST, DAST, IAST, and SCA correlation. Use it for compliance auditing. See Application Security Testing alternatives.Fortify on Demand
Fortify on Demand: Application Security Testing as a Service and SAST and DAST scans. Built for CI/CD security gating. Compare Application Security Testing alternatives.Product type
AppScan 360
Unified Application Security Testing (AST) PlatformFortify on Demand
Application Security Testing as a Service (ASTaaS)Best for
AppScan 360
Financial Services, Healthcare, High Tech, Government, Automotive, Public SectorFortify on Demand
Financial Services, Healthcare, Government, High Tech, Retail, Public Sector, TechnologyPricing
Pricing model
AppScan 360
Contact VendorFortify on Demand
Contact VendorFree trial
AppScan 360
Free trial: yesFortify on Demand
Free trial: yesDeployment
Deployment options
AppScan 360
SaaSCloudHybridOn-Premise
Fortify on Demand
SaaSCloud
Deployment details
AppScan 360
Cloud SaaS; On-Premises; Hybrid Private Cloud; Cloud SaaS; On-Premises Kubernetes; Private CloudFortify on Demand
Cloud SaaS / Managed Cloud Testing; Cloud SaaS; Managed Cloud ScanningData residency
AppScan 360
Customer-hosted code sovereignty; Cloud SaaS optionsFortify on Demand
Multi-region cloud hosting; Global sovereign optionsKey features
What it offers
AppScan 360
- Unified AppSec platform
- SAST, DAST, IAST, and SCA correlation
- Kubernetes/OpenShift deployment
- Machine learning triage
- CI/CD pipeline security gates
- Unified application security testing
- DevSecOps pipeline automation
- Open-source supply chain risk mitigation
Fortify on Demand
- Application Security Testing as a Service
- SAST and DAST scans
- Software Composition Analysis
- Expert vulnerability triage
- IDE and CI/CD integration
- Cloud application security testing
- CI/CD security gating
- Open-source risk analysis
Platform & access
API access
AppScan 360
API access: yesFortify on Demand
API access: yesSingle sign-on (SSO)
AppScan 360
SSO: yesFortify on Demand
SSO: yesRole-based access (RBAC)
AppScan 360
RBAC: yesFortify on Demand
RBAC: yesMulti-tenant
AppScan 360
Multi-tenant: yesFortify on Demand
Multi-tenant: yesMobile app
AppScan 360
Mobile app: noFortify on Demand
Mobile app: noSupported platforms
AppScan 360
Source CodeRunning Web AppsREST APIsContainerized Apps
Fortify on Demand
Web ApplicationsMobile Apps (iOS/Android)APIsMicroservices
Compliance
AppScan 360
PCI-DSS 4.0OWASP Top 10ISO 27001SOC 2NIST SP 800-53
Fortify on Demand
PCI-DSS 4.0OWASP Top 10HIPAAISO 27001FedRAMP
Integrations & coverage
Integrations
AppScan 360
GitHubGitLabJenkinsJiraAzure DevOpsKubernetesOpenShift
Fortify on Demand
GitHubGitLabAzure DevOpsJenkinsJiraVisual StudioEclipse
Industries
AppScan 360
Financial ServicesHealthcareHigh TechGovernmentAutomotivePublic Sector
Fortify on Demand
Financial ServicesHealthcareGovernmentHigh TechRetailPublic Sector+1 more
Regions
AppScan 360
Global enterprise deployments
Fortify on Demand
Global cloud regions
Vendor
Company
AppScan 360
HCLSoftwareFortify on Demand
OpenTextHeadquarters
AppScan 360
Noida, IndiaFortify on Demand
Waterloo, Ontario, CanadaCompany size
AppScan 360
10,000+Fortify on Demand
20,000+Founded
AppScan 360
2017Fortify on Demand
1991