Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Fortify on Demand by OpenText View product | StackHawk HawkScan by StackHawk View product |
|---|---|---|
| Overview | ||
| What it is | Fortify on Demand: Application Security Testing as a Service and SAST and DAST scans. Built for CI/CD security gating. Compare Application Security Testing alternatives. | StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives. |
| Product type | Application Security Testing as a Service (ASTaaS) | Containerized Dynamic Security Scanning Engine |
| Best for | Financial Services, Healthcare, Government, High Tech, Retail, Public Sector, Technology | Software Developers, DevOps Teams, Technology Startups |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloud | Cloud |
| Deployment details | Cloud SaaS / Managed Cloud Testing; Cloud SaaS; Managed Cloud Scanning | Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI Binary |
| Data residency | Multi-region cloud hosting; Global sovereign options | Local Workstation / Pipeline Host |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Web ApplicationsMobile Apps (iOS/Android)APIsMicroservices | Containerized CI PipelinesDeveloper Workstations |
| Compliance | PCI-DSS 4.0OWASP Top 10HIPAAISO 27001FedRAMP | SOC 2 Type II |
| Integrations & coverage | ||
| Integrations | GitHubGitLabAzure DevOpsJenkinsJiraVisual StudioEclipse | DockerKubernetesGitGitHubGitLabBitbucket |
| Industries | Financial ServicesHealthcareGovernmentHigh TechRetailPublic Sector+1 more | Software DevelopersDevOps TeamsTechnology Startups |
| Regions | Global cloud regions | Global |
| Vendor | ||
| Company | OpenText | StackHawk |
| Headquarters | Waterloo, Ontario, Canada | Denver, Colorado, USA |
| Company size | 20,000+ | 51-200 |
| Founded | 1991 | 2019 |
Overview
What it is
Fortify on Demand
Fortify on Demand: Application Security Testing as a Service and SAST and DAST scans. Built for CI/CD security gating. Compare Application Security Testing alternatives.StackHawk HawkScan
StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.Product type
Fortify on Demand
Application Security Testing as a Service (ASTaaS)StackHawk HawkScan
Containerized Dynamic Security Scanning EngineBest for
Fortify on Demand
Financial Services, Healthcare, Government, High Tech, Retail, Public Sector, TechnologyStackHawk HawkScan
Software Developers, DevOps Teams, Technology StartupsPricing
Pricing model
Fortify on Demand
Contact VendorStackHawk HawkScan
Contact VendorFree trial
Fortify on Demand
Free trial: yesStackHawk HawkScan
Free trial: yesDeployment
Deployment options
Fortify on Demand
StackHawk HawkScan
Deployment details
Fortify on Demand
Cloud SaaS / Managed Cloud Testing; Cloud SaaS; Managed Cloud ScanningStackHawk HawkScan
Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI BinaryData residency
Fortify on Demand
Multi-region cloud hosting; Global sovereign optionsStackHawk HawkScan
Local Workstation / Pipeline HostKey features
What it offers
Fortify on Demand
- Application Security Testing as a Service
- SAST and DAST scans
- Software Composition Analysis
- Expert vulnerability triage
- IDE and CI/CD integration
- Cloud application security testing
- CI/CD security gating
- Open-source risk analysis
StackHawk HawkScan
- Containerized DAST engine
- Hawkscan.yml configuration as code
- OpenAPI parsing
- Custom script injection
- Local terminal output
- Containerized DAST execution
- Configuration-as-code vulnerability scanning
- Local debugging
Platform & access
API access
Fortify on Demand
API access: yesStackHawk HawkScan
API access: yesSingle sign-on (SSO)
Fortify on Demand
SSO: yesStackHawk HawkScan
SSO: yesRole-based access (RBAC)
Fortify on Demand
RBAC: yesStackHawk HawkScan
RBAC: yesMulti-tenant
Fortify on Demand
Multi-tenant: yesStackHawk HawkScan
Multi-tenant: yesMobile app
Fortify on Demand
Mobile app: noStackHawk HawkScan
Mobile app: noSupported platforms
Fortify on Demand
StackHawk HawkScan
Compliance
Fortify on Demand
StackHawk HawkScan
Integrations & coverage
Integrations
Fortify on Demand
StackHawk HawkScan
Industries
Fortify on Demand
StackHawk HawkScan
Regions
Fortify on Demand
StackHawk HawkScan
Vendor
Company
Fortify on Demand
OpenTextStackHawk HawkScan
StackHawkHeadquarters
Fortify on Demand
Waterloo, Ontario, CanadaStackHawk HawkScan
Denver, Colorado, USACompany size
Fortify on Demand
20,000+StackHawk HawkScan
51-200Founded
Fortify on Demand
1991StackHawk HawkScan
2019