Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

A contemporary application security solution that effortlessly integrates within DevOps frameworks, enabling the delivery of secure applications from inception to end-user. The current application environment has evolved significantly, with modern applications consisting of microservices that operate in containers, interact through APIs, and are deployed using automated CI/CD pipelines. It is essential for DevOps teams to incorporate security measures approved by the security team throughout distributed systems without compromising release speed or system performance. NGINX App Protect serves as an effective security solution tailored for modern applications, functioning as both a robust WAF and a defense against application-level DoS attacks, ultimately facilitating the secure delivery of applications from their initial code stage to the final customer. It integrates seamlessly with NGINX Plus and NGINX Ingress Controller, providing strong security controls that safeguard against a wide range of sophisticated threats and evasive attacks. This solution minimizes complexity and reduces tool sprawl while supporting the development of modern applications. By employing NGINX App Protect, organizations can create, secure, and manage adaptive applications that not only lower costs but also enhance operational efficiency and provide improved protection for users against emerging threats. Ultimately, this empowers teams to focus more on innovation and less on security concerns.

Description

OpenText Static Application Security Testing (SAST) provides precise identification and remediation of application security flaws directly within source code, helping organizations reduce risks early in development. The platform supports over 33 major programming languages and frameworks, enabling broad language coverage for diverse development environments. It integrates smoothly with widely used CI/CD pipelines and developer tools such as Jenkins, Atlassian Bamboo, Azure DevOps, and Microsoft Visual Studio, ensuring security fits naturally into existing workflows. AI-driven analysis prioritizes vulnerabilities and dramatically reduces false positives by customizing rules and scan depths, speeding up development cycles by up to 25%. OpenText SAST meets compliance benchmarks like OWASP 1.2b, offering developers detailed guidance to efficiently fix issues and improve code quality. Its flexible deployment options include multi-tenant SaaS, private cloud, and on-premises installations, allowing organizations to scale securely and according to their infrastructure needs. Backed by a dedicated Software Security Research team, the solution receives agile updates to stay current with emerging threats. Customers praise the tool for reducing manual code review efforts while increasing vulnerability detection accuracy.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Amazon Web Services (AWS) Yes 
Ansible Yes 
Bamboo No 
Black Duck No 
Debian Yes 
GitHub No 
Google Cloud Platform Yes 
Jenkins No 
Jira No 
Maverix No 
Mend.io No 
Nucleus No 
Oobeya No 
OpenText Software Delivery Management No 
Phoenix Security No 
Red Hat Enterprise Linux Yes 
Red Hat OpenShift Yes 
Selenium No 
Slack No 
Tromzo No 

Integrations

Amazon Web Services (AWS) Yes 
Ansible No 
Bamboo Yes 
Black Duck Yes 
Debian No 
GitHub Yes 
Google Cloud Platform No 
Jenkins Yes 
Jira Yes 
Maverix Yes 
Mend.io Yes 
Nucleus Yes 
Oobeya Yes 
OpenText Software Delivery Management Yes 
Phoenix Security Yes 
Red Hat Enterprise Linux No 
Red Hat OpenShift No 
Selenium Yes 
Slack Yes 
Tromzo Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

F5

Founded

1996

Country

United States

Website

www.f5.com/products/nginx/nginx-app-protect

Vendor Details

Company Name

OpenText

Founded

1991

Country

Canada

Website

www.opentext.com/products/static-application-security-testing

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Static Code Analysis

Analytics / Reporting No 
Code Standardization / Validation No 
Multiple Programming Language Support No 
Provides Recommendations No 
Standard Security/Industry Libraries No 
Vulnerability Management No 

Alternatives

Alternatives

NGINX Reviews

NGINX

F5
SonarQube Cloud Reviews

SonarQube Cloud

SonarSource