Checkmarx One vs F5 BIG-IP Local Traffic Manager (LTM) comparison

Cancel
You must select at least 2 products to compare!
Checkmarx Logo
34,421 views|22,385 comparisons
86% willing to recommend
F5 Logo
10,290 views|8,518 comparisons
83% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Checkmarx One and F5 BIG-IP Local Traffic Manager (LTM) based on real PeerSpot user reviews.

Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Checkmarx One vs. F5 BIG-IP Local Traffic Manager (LTM) Report (Updated: March 2019).
772,649 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Checkmarx pinpoints the vulnerability in the code and also presents the flow of malicious input across the application.""We use the solution to validate the source code and do SAST and security analysis.""The SAST component was absolutely 100% stable.""The product's most valuable feature is static code and supply chain effect analysis. It provides a lot of visibility.""Most valuable features include: ease of use, dashboard. interface and the ability to report.""The setup is fairly easy. We didn't struggle with the process at all.""It gives the proper code flow of vulnerabilities and the number of occurrences.""From my point of view, it is the best product on the market."

More Checkmarx One Pros →

"It is a fast and available solution.""Good application firewall.""F5 Big-IP Local Traffic Manager has better modular features especially LTM, which according to the clients, is very beneficial. Most of the users opt for a combination of big IP LTM and WAF which helps them to leverage application load balancing and enhance application security many-fold.""If I were to choose one key feature in particular, perhaps it would be the iRule feature. It’s a really versatile tool.""The iRule feature is very useful for inspecting HTTP. Sometimes, we use it for modifying the headers of the HTTP.""It is a scalable solution.""It provides first-tier firewalling, for you application. And it provides server load-balancing, it provides optimization, and it provides a proxy feature, where your users cannot directly access your server. It acts as a fully proxy architecture. It has client-side and server-side connections, both, and they're separate.""It is an easy way to build application policies (graphical)."

More F5 BIG-IP Local Traffic Manager (LTM) Pros →

Cons
"The pricing can get a bit expensive, depending on the company's size.""The statistics module has a function that allows you to show some statistics, but I think it's limited. Maybe it needs more information.""You can't use it in the continuous delivery pipeline because the scanning takes too much time.""Checkmarx could improve the solution reports and false positives. The false positives could be reduced. For example, we have alerts that are tagged as vulnerabilities but when you drill down they are not.""We have received some feedback from our customers who are receiving a large number of false positives.""It would be really helpful if the level of confidence was included, with respect to identified issues.""When we first ran it on a big project, there wasn't enough memory on the computer. It originally ran with eight gigabytes, and now it runs with 32. The software stopped at some point, and while I don't think it said it ran out of memory, it just said "stopped" and something else. We had to go to the logs and send them to the integrator, and eventually, they found a memory issue in the logs and recommended increasing the memory. We doubled it once, and it didn't seem enough. We doubled it again, and it helped.""Creating and editing custom rules in Checkmarx is difficult because the license for the editor comes at an additional cost, and there is a steep learning curve."

More Checkmarx One Cons →

"I think the logging could be improved.""Internet and cloud support could be improved.""Its scalability and deployment should be better. It should be more scalable, and it should be easier to deploy.""The deployment could be simplified.""In terms of pricing, it could be more competitive.""Right now, there are a lot of products within F5's portfolio. They acquired a couple of companies like NGINX and Volterra. Some features and technologies overlapped when this acquisition occurred. They need to refine it and come up with a single, proper solution. F5 should focus more on zero trust network access (ZTNA).They should be more focused on that framework because the industry is moving towards that. Everyone is talking about SASE and zero trust.""There are issues with F5 BIG-IP but they are minor issues not affecting production and services. Sometimes the operations and the facility systems fail. However, there is an alert action from the windows. An ordeal for the manager.""An expensive solution for the minimal features we use."

More F5 BIG-IP Local Traffic Manager (LTM) Cons →

Pricing and Cost Advice
  • "It is the right price for quality delivery."
  • "I believe pricing is better compared to other commercial tools."
  • "The pricing was not very good. This is just a framework which shouldn’t cost so much."
  • "The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
  • "It is a good product but a little overpriced."
  • "The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
  • "​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
  • "We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
  • More Checkmarx One Pricing and Cost Advice →

  • "Though functionality is high, its cost can be considered slightly higher than its competitors​."
  • "The licensing pricing seems relatively easy enough to get your head around. I would advise anyone to ensure that you have a conversation with an F5 consultant before purchasing, as you would with most products."
  • "Take a look at the modules that you are going to use. Look into the best bundles for them."
  • "The only area that has room for improvement would be pricing, so its competitors do not have a say."
  • "If your IT budget is good, go for it."
  • "This product is costly from a licensing perspective considering its competitors."
  • "Check other vendors like Cisco, Citrix or A10 Networks. There are plenty in the market with which you can achieve same thing."
  • "Great product for the money. But they can get really expensive, so get what meets your needs."
  • More F5 BIG-IP Local Traffic Manager (LTM) Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
    772,649 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
    Top Answer:Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
    Top Answer:The solution's price is high and you pay based on the number of users.
    Top Answer:The support from F5 BIG-IP LTM is good.
    Top Answer:There are a few licensing options available for F5 BIG-IP LTM. You can have a perpetual license which is a lifetime license. You then only need to renew the support, if you choose to open a ticket… more »
    Top Answer:The pricing must be more flexible. We get billed for firewalls based on the usage. It will be helpful if the solution provides such flexibility.
    Ranking
    Views
    34,421
    Comparisons
    22,385
    Reviews
    21
    Average Words per Review
    508
    Rating
    7.7
    Views
    10,290
    Comparisons
    8,518
    Reviews
    29
    Average Words per Review
    485
    Rating
    8.4
    Comparisons
    Also Known As
    F5 BIG-IP, BIG-IP LTM, F5 ASM, Viprion, F5 BIG-IP Virtual Edition , Crescendo Networks Application Delivery Controller, BIG IP
    Learn More
    Overview

    Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

    Checkmarx One offers comprehensive application scanning across the SDLC:

    • Static Application Security Testing (SAST)
    • Software Composition Analysis (SCA)
    • API security
    • Dynamic Application Security Testing (DAST)
    • Container security
    • IaC security
    • Correlation, prioritization, and risk management
    • Codebashing secure code training
    • AI security
    • Tech partnerships extending AppSec into runtime analysis
    • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

    Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

    F5 BIG-IP LTM optimizes the speed and reliability of your apps via both network and application layers. Using real-time protocol and traffic management decisions based on app and server and connection management conditions, and TCP and content offloading, BIG-IP LTM dramatically improves application and infrastructure responsiveness. BIG-IP LTM's architecture includes protocol awareness to control traffic for the most important applications. BIG-IP LTM tracks the dynamic performance levels of servers and delivers SSL performance and visibility for inbound and outbound traffic, to protect the user experience by encrypting everything from the client to the server.

    BIG-IP LTM provides enterprise-class Application Delivery Controller (ADC). You get granular layer 7 control, SSL offloading and acceleration capabilities, and advanced scaling technologies that deliver performance and reliability on-demand. The highly optimized TCP/IP stack combines TCP/IP techniques and improvements in the latest RFCs with extensions to minimize the effect of congestion and packet loss and recovery. Independent testing tools and customer experiences show LTM's TCP stack delivers up to a 2x performance gain for users and a 4x increase in bandwidth efficiency.

    Sample Customers
    YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
    Riken, TransUnion, Tepco Systems Administration, Daejeon University, G&T Bank, Danamon, CyberAgent Inc.
    Top Industries
    REVIEWERS
    Computer Software Company31%
    Financial Services Firm19%
    Comms Service Provider9%
    Manufacturing Company9%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company15%
    Manufacturing Company9%
    Insurance Company5%
    REVIEWERS
    Comms Service Provider20%
    Financial Services Firm15%
    Computer Software Company15%
    Media Company6%
    VISITORS READING REVIEWS
    Financial Services Firm17%
    Computer Software Company15%
    Government9%
    Comms Service Provider6%
    Company Size
    REVIEWERS
    Small Business38%
    Midsize Enterprise13%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise12%
    Large Enterprise71%
    REVIEWERS
    Small Business33%
    Midsize Enterprise17%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise14%
    Large Enterprise68%
    Buyer's Guide
    Checkmarx One vs. F5 BIG-IP Local Traffic Manager (LTM)
    March 2019
    Find out what your peers are saying about Checkmarx One vs. F5 BIG-IP Local Traffic Manager (LTM) and other solutions. Updated: March 2019.
    772,649 professionals have used our research since 2012.

    Checkmarx One is ranked 3rd in Application Security Tools with 67 reviews while F5 BIG-IP Local Traffic Manager (LTM) is ranked 1st in Application Delivery Controllers (ADC) with 116 reviews. Checkmarx One is rated 7.6, while F5 BIG-IP Local Traffic Manager (LTM) is rated 8.2. The top reviewer of Checkmarx One writes "The report function is a great, configurable asset but sometimes yields false positives". On the other hand, the top reviewer of F5 BIG-IP Local Traffic Manager (LTM) writes "Reduces maintenance downtime and has a strong user community". Checkmarx One is most compared with SonarQube, Veracode, Fortify on Demand, Snyk and Coverity, whereas F5 BIG-IP Local Traffic Manager (LTM) is most compared with Citrix NetScaler, Fortinet FortiADC, Microsoft Azure Application Gateway, NGINX Plus and A10 Networks Thunder ADC. See our Checkmarx One vs. F5 BIG-IP Local Traffic Manager (LTM) report.

    We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.