Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Fortify WebInspect by OpenText View product | StackHawk DAST by StackHawk View product |
|---|---|---|
| Overview | ||
| What it is | Looking for Application Security Testing software? Fortify WebInspect by OpenText provides IAST agent for API security validation. Compare features and alternatives. | Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide. |
| Product type | Dynamic Application Security Testing (DAST) Platform | CI/CD Native Dynamic Application Security Testing Platform |
| Best for | Financial Services, E-commerce, Healthcare, Government, Tech, Banking & Finance, Enterprise IT | DevSecOps, Software Engineering, Financial Services, Technology |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | SaaSCloud |
| Deployment details | On-premises Desktop/Server; Cloud SaaS; On-premises Desktop/Server; Enterprise Server; Cloud SaaS | Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLI |
| Data residency | Customer-hosted scanning data sovereignty | United States; Global Cloud |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Running Web ApplicationsWeb ServicesRESTful APIsSPAs | Web ApplicationsMicroservicesCI/CD Runners |
| Compliance | PCI-DSS 4.0OWASP Top 10HIPAAISO 27001FedRAMP | SOC 2 Type IIGDPR |
| Integrations & coverage | ||
| Integrations | Fortify SSCJenkinsAzure DevOpsJiraSwagger/OpenAPIPostman | GitHub ActionsGitLab CICircleCIJenkinsAzure DevOpsJira |
| Industries | Financial ServicesE-commerceHealthcareGovernmentTechBanking & Finance+1 more | DevSecOpsSoftware EngineeringFinancial ServicesTechnology |
| Regions | Global enterprise deployments | Global |
| Vendor | ||
| Company | OpenText | StackHawk |
| Headquarters | Waterloo, Ontario, Canada | Denver, Colorado, USA |
| Company size | 20,000+ | 51-200 |
| Founded | 1991 | 2019 |
Overview
What it is
Fortify WebInspect
Looking for Application Security Testing software? Fortify WebInspect by OpenText provides IAST agent for API security validation. Compare features and alternatives.StackHawk DAST
Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.Product type
Fortify WebInspect
Dynamic Application Security Testing (DAST) PlatformStackHawk DAST
CI/CD Native Dynamic Application Security Testing PlatformBest for
Fortify WebInspect
Financial Services, E-commerce, Healthcare, Government, Tech, Banking & Finance, Enterprise ITStackHawk DAST
DevSecOps, Software Engineering, Financial Services, TechnologyPricing
Pricing model
Fortify WebInspect
Contact VendorStackHawk DAST
Contact VendorFree trial
Fortify WebInspect
Free trial: yesStackHawk DAST
Free trial: yesDeployment
Deployment options
Fortify WebInspect
StackHawk DAST
Deployment details
Fortify WebInspect
On-premises Desktop/Server; Cloud SaaS; On-premises Desktop/Server; Enterprise Server; Cloud SaaSStackHawk DAST
Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLIData residency
Fortify WebInspect
Customer-hosted scanning data sovereigntyStackHawk DAST
United States; Global CloudKey features
What it offers
Fortify WebInspect
- Dynamic Application Security Testing (DAST)
- Modern SPA crawling engine
- REST/SOAP API testing
- Automated attack simulation
- Login macro recorder
- IAST agent
- Black-box vulnerability assessment
- API security validation
StackHawk DAST
- Developer-first DAST
- Automated pull request testing
- Authenticated session fuzzing
- Reproducible curl commands
- CI/CD security quality gates
- Developer-driven dynamic security testing
- Pull-request vulnerability triage
- DevSecOps
Platform & access
API access
Fortify WebInspect
API access: yesStackHawk DAST
API access: yesSingle sign-on (SSO)
Fortify WebInspect
SSO: yesStackHawk DAST
SSO: yesRole-based access (RBAC)
Fortify WebInspect
RBAC: yesStackHawk DAST
RBAC: yesMulti-tenant
Fortify WebInspect
Multi-tenant: yesStackHawk DAST
Multi-tenant: yesMobile app
Fortify WebInspect
Mobile app: noStackHawk DAST
Mobile app: noSupported platforms
Fortify WebInspect
StackHawk DAST
Compliance
Fortify WebInspect
StackHawk DAST
Integrations & coverage
Integrations
Fortify WebInspect
StackHawk DAST
Industries
Fortify WebInspect
StackHawk DAST
Regions
Fortify WebInspect
StackHawk DAST
Vendor
Company
Fortify WebInspect
OpenTextStackHawk DAST
StackHawkHeadquarters
Fortify WebInspect
Waterloo, Ontario, CanadaStackHawk DAST
Denver, Colorado, USACompany size
Fortify WebInspect
20,000+StackHawk DAST
51-200Founded
Fortify WebInspect
1991StackHawk DAST
2019