This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Head-to-head · Interactive Application Security Testing Software

OpenText Fortify on Demand vs Waratek IAST

Updated Oct 2026
Both researched from official sources
4 checks side by side

Higher score OpenText Fortify on Demand #7 in Interactive Application Security Testing Software 8.5/10 Pricing on request ✓ 3 of 3 features Visit OpenText

Waratek IAST #8 in Interactive Application Security Testing Software 8.2/10 Paid ✓ 1 of 3 features Visit Waratek

OpenText Fortify on Demand leads on 0 checks, Waratek IAST on 0, and 4 are even. Who comes out ahead on the 4 yes/no, price and count checks where we have data for both products. The editor score weighs everything else too.

Our verdict

Highest scoreOpenText Fortify on Demand · 8.5/10
Most featuresOpenText Fortify on Demand · 3 of 3

OpenText Fortify on Demand scores higher on our rubric for interactive application security testing software: 8.5 against 8.2 out of 10; our editors rank them #7 and #8.

On deployment, Waratek IAST gives you Hybrid where OpenText Fortify on Demand offers Saas.

OpenText Fortify on Demand is the better fit for mature enterprises needing broad AppSec. Waratek IAST is the better fit for java teams needing self-hosted IAST.

OpenText Fortify on Demand fits best
Mature enterprises needing broad AppSec
Waratek IAST fits best
Java teams needing self-hosted IAST

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Show only differences

Feature	OpenText Fortify on Demand 8.5/10 Visit ↗	Waratek IAST 8.2/10 Visit ↗
At a glance
Editor score	8.5	8.2
Ranking	#7 in Interactive Application Security Testing Software	#8 in Interactive Application Security Testing Software
Best for	Mature enterprises needing broad AppSec	Java teams needing self-hosted IAST
Pricing model	Paid	Paid
Starting price	Pricing on request	—
Free plan	Not checked yet	—
Free trial	—	—
Deployment	Cloud	Cloud, Self-hosted
Platforms	Web	Web, Linux, Windows
Support	Live chat, Tickets, Docs · 24/7	Email, Live chat, Docs
Compliance	2FA	GDPR, HIPAA, PCI DSS, SSO/SAML
Integrations	10 integrations	4 integrations
Built for	Small business, Mid-market, Enterprise	Small business, Mid-market, Enterprise
Features OpenText Fortify on Demand 3/3 · Waratek IAST 1/3
Authenticated testing	✓ (best)	Not checked yet
API testing	✓ (best)	Not checked yet
CI/CD integration	✓	✓
Specs
Runtime targets	Web	Not checked yet
Deployment	Saas	Hybrid
Instrumentation	Agent	Agent
Language coverage	Java, .NET	Java
Our review
Pros	Combines IAST, SAST, DAST, SCA, and mobile testing Supports authenticated testing, APIs, CI/CD tools, and bug trackers Provides vulnerability reporting, remediation guidance, and expert review	Runtime analysis with execution paths, stack traces, and remediation guidance Agent instrumentation supports deployment without source-code changes CI/CD, JUnit, Selenium, Jira, Slack, and OWASP Benchmark support
Cons	Pricing requires contacting OpenText Language coverage is limited to Java and .NET Its broad scope may exceed the needs of smaller teams	Java-only coverage limits language and application breadth Team pricing is $2,499 per month Some Jira, Slack, and advanced CI/CD capabilities are coming soon
Our verdict	OpenText Fortify on Demand is a cloud-based application security service for development, security, and compliance teams. It brings together interactive application security testing with active runtime agents, static and dynamic testing,… Read the review →	Waratek IAST analyzes Java applications during runtime and functional testing to identify exploitable vulnerabilities with code-level execution context. It is aimed at software engineers, security teams, QA teams, and organizations… Read the review →

O OpenText Fortify on DemandInteractive Application Security Testing Software 8.5Pricing on request
Waratek IASTInteractive Application Security Testing Software 8.2Paid

Compare the top tools in

Strengths and trade-offs

OpenText Fortify on Demand — where it wins
- Combines IAST, SAST, DAST, SCA, and mobile testing
- Supports authenticated testing, APIs, CI/CD tools, and bug trackers
- Provides vulnerability reporting, remediation guidance, and expert review
Where it doesn't
- Pricing requires contacting OpenText
- Language coverage is limited to Java and .NET
- Its broad scope may exceed the needs of smaller teams
Waratek IAST — where it wins
- Runtime analysis with execution paths, stack traces, and remediation guidance
- Agent instrumentation supports deployment without source-code changes
- CI/CD, JUnit, Selenium, Jira, Slack, and OWASP Benchmark support
Where it doesn't
- Java-only coverage limits language and application breadth
- Team pricing is $2,499 per month
- Some Jira, Slack, and advanced CI/CD capabilities are coming soon

OpenText Fortify on Demand8.5/10 · Pricing on request
Broad SaaS AppSec coverage for mature enterprises, with contact-sales pricing and Java/.NET support.
Visit OpenText Full verdict →
Waratek IAST8.2/10 · Paid
A Java-focused, self-hosted IAST option with strong runtime context but limited breadth.
Visit Waratek Full verdict →

More comparisons

All interactive application security testing software comparisons → · Full ranking →

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Last updated 7 Oct 2026 · How we research and update