Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Fortify WebInspect by OpenText View product | StackHawk HawkScan by StackHawk View product |
|---|---|---|
| Overview | ||
| What it is | Looking for Application Security Testing software? Fortify WebInspect by OpenText provides IAST agent for API security validation. Compare features and alternatives. | StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives. |
| Product type | Dynamic Application Security Testing (DAST) Platform | Containerized Dynamic Security Scanning Engine |
| Best for | Financial Services, E-commerce, Healthcare, Government, Tech, Banking & Finance, Enterprise IT | Software Developers, DevOps Teams, Technology Startups |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | Cloud |
| Deployment details | On-premises Desktop/Server; Cloud SaaS; On-premises Desktop/Server; Enterprise Server; Cloud SaaS | Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI Binary |
| Data residency | Customer-hosted scanning data sovereignty | Local Workstation / Pipeline Host |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Running Web ApplicationsWeb ServicesRESTful APIsSPAs | Containerized CI PipelinesDeveloper Workstations |
| Compliance | PCI-DSS 4.0OWASP Top 10HIPAAISO 27001FedRAMP | SOC 2 Type II |
| Integrations & coverage | ||
| Integrations | Fortify SSCJenkinsAzure DevOpsJiraSwagger/OpenAPIPostman | DockerKubernetesGitGitHubGitLabBitbucket |
| Industries | Financial ServicesE-commerceHealthcareGovernmentTechBanking & Finance+1 more | Software DevelopersDevOps TeamsTechnology Startups |
| Regions | Global enterprise deployments | Global |
| Vendor | ||
| Company | OpenText | StackHawk |
| Headquarters | Waterloo, Ontario, Canada | Denver, Colorado, USA |
| Company size | 20,000+ | 51-200 |
| Founded | 1991 | 2019 |
Overview
What it is
Fortify WebInspect
Looking for Application Security Testing software? Fortify WebInspect by OpenText provides IAST agent for API security validation. Compare features and alternatives.StackHawk HawkScan
StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.Product type
Fortify WebInspect
Dynamic Application Security Testing (DAST) PlatformStackHawk HawkScan
Containerized Dynamic Security Scanning EngineBest for
Fortify WebInspect
Financial Services, E-commerce, Healthcare, Government, Tech, Banking & Finance, Enterprise ITStackHawk HawkScan
Software Developers, DevOps Teams, Technology StartupsPricing
Pricing model
Fortify WebInspect
Contact VendorStackHawk HawkScan
Contact VendorFree trial
Fortify WebInspect
Free trial: yesStackHawk HawkScan
Free trial: yesDeployment
Deployment options
Fortify WebInspect
StackHawk HawkScan
Deployment details
Fortify WebInspect
On-premises Desktop/Server; Cloud SaaS; On-premises Desktop/Server; Enterprise Server; Cloud SaaSStackHawk HawkScan
Docker Container; CLI; CI/CD Pipeline; Docker Container; CLI BinaryData residency
Fortify WebInspect
Customer-hosted scanning data sovereigntyStackHawk HawkScan
Local Workstation / Pipeline HostKey features
What it offers
Fortify WebInspect
- Dynamic Application Security Testing (DAST)
- Modern SPA crawling engine
- REST/SOAP API testing
- Automated attack simulation
- Login macro recorder
- IAST agent
- Black-box vulnerability assessment
- API security validation
StackHawk HawkScan
- Containerized DAST engine
- Hawkscan.yml configuration as code
- OpenAPI parsing
- Custom script injection
- Local terminal output
- Containerized DAST execution
- Configuration-as-code vulnerability scanning
- Local debugging
Platform & access
API access
Fortify WebInspect
API access: yesStackHawk HawkScan
API access: yesSingle sign-on (SSO)
Fortify WebInspect
SSO: yesStackHawk HawkScan
SSO: yesRole-based access (RBAC)
Fortify WebInspect
RBAC: yesStackHawk HawkScan
RBAC: yesMulti-tenant
Fortify WebInspect
Multi-tenant: yesStackHawk HawkScan
Multi-tenant: yesMobile app
Fortify WebInspect
Mobile app: noStackHawk HawkScan
Mobile app: noSupported platforms
Fortify WebInspect
StackHawk HawkScan
Compliance
Fortify WebInspect
StackHawk HawkScan
Integrations & coverage
Integrations
Fortify WebInspect
StackHawk HawkScan
Industries
Fortify WebInspect
StackHawk HawkScan
Regions
Fortify WebInspect
StackHawk HawkScan
Vendor
Company
Fortify WebInspect
OpenTextStackHawk HawkScan
StackHawkHeadquarters
Fortify WebInspect
Waterloo, Ontario, CanadaStackHawk HawkScan
Denver, Colorado, USACompany size
Fortify WebInspect
20,000+StackHawk HawkScan
51-200Founded
Fortify WebInspect
1991StackHawk HawkScan
2019