Burp Suite DAST vs OpenText Fortify DAST

Burp Suite DAST9.3Visit OFOpenText Fortify DAST9.0Visit

Higher score Burp Suite DAST #2 in Web Application Security Scanners 9.3/10 Pricing on request ✓ 0 of 5 features Visit PortSwigger

vs

OF OpenText Fortify DAST #5 in Web Application Security Scanners 9.0/10 Pricing on request ✓ 0 of 5 features Visit OpenText

• Burp Suite DAST fits best

  Enterprise AppSec teams needing broad DAST

• OpenText Fortify DAST fits best

  Large enterprises with compliance requirements

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature	Burp Suite DAST 9.3/10 Visit ↗	OFOpenText Fortify DAST 9.0/10 Visit ↗
At a glance
Editor score	9.3	9.0
Ranking	#2 in Web Application Security Scanners	#5 in Web Application Security Scanners
Best for	Enterprise AppSec teams needing broad DAST	Large enterprises with compliance requirements
Pricing model	Paid	Paid
Starting price	Pricing on request	Pricing on request
Free plan	Not checked yet	Not checked yet
Free trial	—	—
Deployment	Cloud, Self-hosted, Browser extension	Cloud, Self-hosted
Platforms	Web, Windows, Linux	Web, Linux
Support	Email, Tickets, Docs	Email, Phone, Tickets, Community, Docs
Compliance	SSO/SAML, 2FA	PCI DSS, HIPAA, ISO 27001
Integrations	20 integrations	2 integrations
Built for	Small business, Mid-market, Enterprise	Mid-market, Enterprise
Features Burp Suite DAST 0/5 · OpenText Fortify DAST 0/5
Authenticated scans	Not checked yet	Not checked yet
JavaScript crawling	Not checked yet	Not checked yet
Scheduled scans	Not checked yet	Not checked yet
Compliance reports	Not checked yet	Not checked yet
API scanning	Not checked yet	Not checked yet
Specs
Deployment	Not checked yet	Not checked yet
Target limit	Not checked yet	Not checked yet
Our review
Pros	Chromium crawling reaches JavaScript applications and single-page apps Scans Postman, OpenAPI, SOAP, and GraphQL APIs CI/CD, RBAC, audit trails, and broad workflow integrations	Scans authenticated applications, including MFA-enabled workflows Supports REST, SOAP, GraphQL, gRPC, OpenAPI, and Postman APIs Automates CI/CD testing with pipelines, CLI, containers, and REST APIs
Cons	Pricing requires contacting sales Enterprise breadth may exceed narrow scanning needs Deployment spans Cloud, Windows, Linux, and Kubernetes options	Pricing requires contact with sales Its broad feature set may exceed narrow scanning needs Hybrid deployment can require more planning than a single SaaS tool
Our verdict	Burp Suite DAST is an automated dynamic application security testing product from PortSwigger Ltd for security and development teams. It scans web applications and APIs, including JavaScript-heavy applications, authenticated areas, GraphQL… Read the review →	OpenText Fortify DAST is an automated dynamic application security testing solution for DevSecOps teams securing running web applications, APIs, and services. It simulates attacks against live environments without requiring source code or… Read the review →

Strengths and trade-offs

• Burp Suite DAST — where it wins

  • Chromium crawling reaches JavaScript applications and single-page apps
  • Scans Postman, OpenAPI, SOAP, and GraphQL APIs
  • CI/CD, RBAC, audit trails, and broad workflow integrations

  Where it doesn't

  • Pricing requires contacting sales
  • Enterprise breadth may exceed narrow scanning needs
  • Deployment spans Cloud, Windows, Linux, and Kubernetes options

• OpenText Fortify DAST — where it wins

  • Scans authenticated applications, including MFA-enabled workflows
  • Supports REST, SOAP, GraphQL, gRPC, OpenAPI, and Postman APIs
  • Automates CI/CD testing with pipelines, CLI, containers, and REST APIs

  Where it doesn't

  • Pricing requires contact with sales
  • Its broad feature set may exceed narrow scanning needs
  • Hybrid deployment can require more planning than a single SaaS tool

• Burp Suite DAST9.3/10 · Pricing on request

  Broad, enterprise-focused DAST for authenticated web apps, APIs, and CI/CD workflows.

  Visit PortSwiggerFull verdict →
• OFOpenText Fortify DAST9.0/10 · Pricing on request

  A compliance-focused DAST platform for complex web and API environments.

  Visit OpenTextFull verdict →