CAST Highlight vs Checkmarx One comparison

CAST Highlight
Read 5 CAST Highlight reviews
  • 447 Views
  • 312 Comparison Views
100% willing to recommend
Checkmarx One
Read 67 Checkmarx One reviews
  • 33,068 Views
  • 21,374 Comparison Views
86% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between CAST Highlight and Checkmarx One based on real PeerSpot user reviews.

Find out in this report how the two Software Composition Analysis (SCA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed CAST Highlight vs. Checkmarx One Report (Updated: September 2022).
Buyer's Guide
CAST Highlight vs. Checkmarx One
September 2022
Download the complete report
Helped 787,061 peers since 2012
 

Categories and Ranking

CAST Highlight
Average Rating
7.8
Number of Reviews
5
Ranking in other categories
Software Composition Analysis (SCA) (13th)
Checkmarx One
Average Rating
7.6
Number of Reviews
67
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (11th), Static Code Analysis (2nd), API Security (4th), DevSecOps (2nd), Risk-Based Vulnerability Management (5th)
 

Market share comparison

As of June 2024, in the Software Composition Analysis (SCA) category, the market share of CAST Highlight is 0.5% and it decreased by 35.9% compared to the previous year. The market share of Checkmarx One is 3.3% and it decreased by 68.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Composition Analysis (SCA)
Unique Categories:
No other categories found
Application Security Tools
13.2%
Static Application Security Testing (SAST)
10.2%
 

Featured Reviews

VG
Nov 15, 2022
Excellent support, works seamlessly with most languages, and useful for knowing about the readiness of the codebase for cloud migration
Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. Both are licensed separately. As per CAST, Highlight is for RAPID prototyping and AIP is for in depth detailed analysis. But then there are areas which Highlights covers (Cloud Adoption) which AIP does not. Our experience in using AIP is that it also does not look at entire tech stack and does not provide the list of all technologies present in your application and then flag what is supported and what is not so that customer has clear view. Highlight probably does that. They need to simplify it for customers. I would expect CAST Highlight to have lighter version of the Health dashboard and the Engineering dashboards . These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time.
Read full review
PG
Sep 10, 2022
A good compliance solution that is best suited to small scale applications, and suffers from stability issues
Our main uses of this solution are to ensure our required compliance policies are met, and that we are applying best practice This solution helps to remediate the compliance requirements we have.  The product also increases the quality of the code the developers are able to implement.  The main…
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features of the CAST Highlight are the interface and there are three notations that are very simple to understand and communicate with."
"CAST Highlight is easy to use and has a good dashboard."
"The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable. It works seamlessly with most languages."
"The most valuable features of CAST Highlight are automation and speed."
"It offers good performance."
"The user interface is excellent. It's very user friendly."
"The solution improved the efficiency of our code security reviews. It helps tremendously because it finds hundreds of potential problems sometimes."
"The value you can get out of the speedy production may be worth the price tag."
"The administration in Checkmarx is very good."
"The solution allows us to create custom rules for code checks."
"The SAST component was absolutely 100% stable."
"The most valuable features of Checkmarx are the Best Fix Location and the Payments option because you can save a lot of time trying to mitigate the configuration. Using these tools can save you a lot of time."
"The main thing we find valuable about Checkmarx is the ease of use. It's easy to initiate scans and triage defects."
More Checkmarx One pros
 

Cons

"CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves."
"The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user."
"Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. I would expect CAST Highlight to have the Help dashboard and the Engineering dashboard. These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time."
"There's a bit of a learning curve at the outset."
"The ease of configuration and customization could be improved in CAST Highlight."
"It is an expensive solution."
"Checkmarx has a slightly difficult compilation with the CI/CD pipeline."
"Integration into the SDLC (i.e. support for last version of SonarQube) could be added."
"The reports are good, but they still need to be improved considering what the UI offers."
"I would like to see the DAST solution in the future."
"Checkmarx could improve by reducing the price."
"The tool is currently quite static in terms of finding security vulnerabilities. It would be great if it was more dynamic and we had even more tools at our disposal to keep us safe. It would help if there was more scanning or if the process was more automated."
"The cost per user is high and should be reduced."
More Checkmarx One cons
 

Pricing and Cost Advice

"Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."
"It is a pretty costly tool. A lot of customers are resistant to using it."
"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."
"CAST Highlight is an expensive solution."
"Be cautious of the one-year subscription date. Once it expires, your price will go up."
"The number of users and coverage for languages will have an impact on the cost of the license."
"The average deal size was usually anywhere between $120K to $175K on an annual basis, which could be divided across 12 months."
"If you want more, you have to pay more. You have to pay for additional modules or functionalities."
"We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
"It is an expensive solution."
"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."
"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."
More Checkmarx One pricing and cost advice
report
See which vendors are best for you
Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
See recommendations
787,061 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Computer Software Company
16%
Insurance Company
10%
Manufacturing Company
9%
Financial Services Firm
21%
Computer Software Company
15%
Manufacturing Company
9%
Insurance Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about CAST Highlight?
The most valuable features of CAST Highlight are automation and speed.
See all answers
What is your experience regarding pricing and costs for CAST Highlight?
CAST Highlight is an expensive solution. On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight or nine out of ten.
See all answers
What needs improvement with CAST Highlight?
The ease of configuration and customization could be improved in CAST Highlight.
See all answers
What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
See all answers
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
See all answers
What is your experience regarding pricing and costs for Checkmarx?
The solution's price is high and you pay based on the number of users.
See all answers
 

Comparisons

SonarQube vs CAST Highlight Logo
SonarQube vs CAST Highlight
Compared 73% of the time
Snyk vs CAST Highlight Logo
Snyk vs CAST Highlight
Compared 5% of the time
Veracode vs CAST Highlight Logo
Veracode vs CAST Highlight
Compared 5% of the time
Black Duck vs CAST Highlight Logo
Black Duck vs CAST Highlight
Compared 5% of the time
Sonatype Lifecycle vs CAST Highlight Logo
Sonatype Lifecycle vs CAST Highlight
Compared 3% of the time
More CAST Highlight Competitors
SonarQube vs Checkmarx One Logo
SonarQube vs Checkmarx One
Compared 52% of the time
Veracode vs Checkmarx One Logo
Veracode vs Checkmarx One
Compared 13% of the time
Fortify on Demand vs Checkmarx One Logo
Fortify on Demand vs Checkmarx One
Compared 6% of the time
Snyk vs Checkmarx One Logo
Snyk vs Checkmarx One
Compared 4% of the time
Coverity vs Checkmarx One Logo
Coverity vs Checkmarx One
Compared 3% of the time
More Checkmarx One Competitors
 

Product Reports

Buyer's Guide
CAST Highlight
June 2024
CAST Highlight reportDownload CAST Highlight product report
Buyer's Guide
Checkmarx One
June 2024
Checkmarx One reportDownload Checkmarx One product report
 

Learn More

CAST
Checkmarx
 

Overview

CAST Highlight is a SaaS software intelligence product for performing rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Software Composition Analysis (Open Source risks), Resiliency, and Technical Debt. Objective software insights from automated source code analysis combined with built-in qualitative surveys for business context enable more informed decision-making about application portfolios.

CAST is the software intelligence category leader. CAST technology can see inside custom applications with MRI-like precision, automatically generating intelligence about their inner workings - composition, architecture, transaction flows, cloud readiness, structural flaws, legal and security risks. It’s becoming essential for faster modernization for cloud, raising the speed and efficiency of Software Engineering, better open source risk control, and accurate technical due diligence. CAST operates globally with offices in North America, Europe, India, China. Visit www.castsoftware.com.

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

  • Static Application Security Testing (SAST)
  • Software Composition Analysis (SCA)
  • API security
  • Dynamic Application Security Testing (DAST)
  • Container security
  • IaC security
  • Correlation, prioritization, and risk management
  • Codebashing secure code training
  • AI security
  • Tech partnerships extending AppSec into runtime analysis
  • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

 

Sample Customers

Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF
YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Buyer's Guide
CAST Highlight vs. Checkmarx One
September 2022
Free Report: CAST Highlight vs. Checkmarx One
Find out what your peers are saying about CAST Highlight vs. Checkmarx One and other solutions. Updated: September 2022.
DOWNLOAD NOW
787,061 professionals have used our research since 2012.
See our CAST Highlight vs. Checkmarx One report.

We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.