Try our new research platform with insights from 80,000+ expert users

Checkmarx One pros and cons

Vendor: Checkmarx

3.8 out of 5

70 reviews
87% willing to recommend

4,276 followers

Pros & Cons summary

Checkmarx One offers seamless SAST scanning of uncompiled code, integrates with key repository formats, and ensures efficient identification of software vulnerabilities. The platform supports custom rule creation and integrates well with DAST solutions, but needs enhancements in language support including C, C++, and Swift. Reports can improve in addressing false positives. Users desire better SDLC integration, notably with tools like SonarQube and improved support for mobile applications and open-source tools.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Checkmarx One allows for Static Application Security Testing (SAST) scanning of uncompiled code, facilitating seamless pre-compile scanning.

It provides integration with key repository formats such as Git, TFS, SVN, and Perforce.

Checkmarx One identifies vulnerabilities more effectively compared to previous tools, leading to a significant reduction in workload.

The feature of custom rules for code checks is valuable for users looking to tailor security analyses.

Integration with multiple SCM solutions and CICD tools, along with its scalable licensing and quick scanning process, are key advantages of Checkmarx One.

CONS

Checkmarx One requires improvements in its licensing models and Swift language support, which are essential for major customers.

False positives in Checkmarx One reports require manual segregation, which can be time-consuming for users.

Scalability issues with Checkmarx One limit its effectiveness for large enterprise companies.

Checkmarx One lacks support for several languages such as C, C++, VB, and T-SQL, despite some being advertised as supported.

Checkmarx One's high cost and complex pricing model are areas of concern for users, making it more expensive than competing products.

Checkmarx One Pros review quotes

DR

Software Configuration Manager at a tech vendor with 501-1,000 employees

Jun 19, 2019

Overall, the ability to find vulnerabilities in the code is better than the tool that we were using before.

Read full review

reviewer1523667

Penetration Tester & Information Security Expert at a comms service provider with 11-50 employees

Feb 7, 2024

The solution improved the efficiency of our code security reviews. It helps tremendously because it finds hundreds of potential problems sometimes.

Read full review

Senior regional manager at AppDome

Jul 27, 2022

The SAST component was absolutely 100% stable.

Read full review

Free Report: Checkmarx One Reviews and More

Learn what your peers think about Checkmarx One. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.

831,020 professionals have used our research since 2012.

MD

Milind Dharmadhikari

Practice Head - IT Risk & Security Management Services at Suma Soft Private Limited

May 16, 2019

The main benefit to using this solution is that we find vulnerabilities in our software before the development cycle is complete.

Read full review

CEO at a tech services company with 11-50 employees

Jun 18, 2020

The most valuable features are the easy to understand interface, and it 's very user-friendly.

Read full review

DK

Vice President at Arisglobal Software Pvt Ltd

Jun 15, 2020

The solution is always updating to continuously add items that create a level of safety from vulnerabilities. It's one of the key features they provide that's an excellent selling point. They're always ahead of the game when it comes to finding any vulnerabilities within the database.

Read full review

reviewer1711191

Cybersecurity at a transportation company with 1,001-5,000 employees

May 3, 2022

I like that you don't have to compile the code in order to execute static code analysis. So, it's very handy.

Read full review

Cuneyt KALPAKOGLU Phd.

Founder & Chairman at Endpoint-labs Cyber Security R&D

Sep 6, 2020

From my point of view, it is the best product on the market.

Read full review

NH

Naveen Hariharan Vijaya

Security Consultant at IBM Thailand

Feb 9, 2024

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

Read full review

EB

Director and Co-Founder at Ushiro-tec

Apr 17, 2019

The most valuable features of Checkmarx are the Best Fix Location and the Payments option because you can save a lot of time trying to mitigate the configuration. Using these tools can save you a lot of time.

Read full review

Show 10 more reviews (out of 66)

Checkmarx One Cons review quotes

DR

Software Configuration Manager at a tech vendor with 501-1,000 employees

Jun 19, 2019

Checkmarx being Windows only is a hindrance. Another problem is: why can't I choose PostgreSQL?

Read full review

reviewer1523667

Penetration Tester & Information Security Expert at a comms service provider with 11-50 employees

Feb 7, 2024

When we first ran it on a big project, there wasn't enough memory on the computer. It originally ran with eight gigabytes, and now it runs with 32. The software stopped at some point, and while I don't think it said it ran out of memory, it just said "stopped" and something else. We had to go to the logs and send them to the integrator, and eventually, they found a memory issue in the logs and recommended increasing the memory. We doubled it once, and it didn't seem enough. We doubled it again, and it helped.

Read full review

Senior regional manager at AppDome

Jul 27, 2022

The interactive application security testing, or IAST, the interactive part where you're looking at an application that lives in a runtime environment on a server or virtual machine, needs improvement.

Read full review

Free Report: Checkmarx One Reviews and More

Learn what your peers think about Checkmarx One. Get advice and tips from experienced pros sharing their opinions. Updated: January 2025.

831,020 professionals have used our research since 2012.

MD

Milind Dharmadhikari

Practice Head - IT Risk & Security Management Services at Suma Soft Private Limited

May 16, 2019

The reports are good, but they still need to be improved considering what the UI offers.

Read full review

CEO at a tech services company with 11-50 employees

Jun 18, 2020

We have received some feedback from our customers who are receiving a large number of false positives.

Read full review

DK

Vice President at Arisglobal Software Pvt Ltd

Jun 15, 2020

In terms of dashboarding, the solution could provide a little more flexibility in terms of creating more dashboards. It has some of its own dashboards that come out of the box. However, if I have to implement my own dashboards that are aligned to my organization's requirements, that dashboarding feature has limited capability right now.

Read full review

reviewer1711191

Cybersecurity at a transportation company with 1,001-5,000 employees

May 3, 2022

They should make it more container-friendly and optimized for the CI pipeline. They should make it a little less heavy. Right now, it requires a SQL database, and the way the tool works is that it has an engine and then it has an analysis database in which it stores the information. So, it is pretty heavy from that perspective because you have to have a full SQL Server. They're working on something called Checkmarx Light, which is a slim-down version. They haven't released it yet, but that's what we need. There should be something a little more slimmed down that can just run the analysis and output the results in a format that's readable as opposed to having a full, really big, and thick deployment with a full database server.

Read full review

Cuneyt KALPAKOGLU Phd.

Founder & Chairman at Endpoint-labs Cyber Security R&D

Sep 6, 2020

Micro-services need to be included in the next release.

Read full review

NH

Naveen Hariharan Vijaya

Security Consultant at IBM Thailand

Feb 9, 2024

We can run only one project at a time.

Read full review

EB

Director and Co-Founder at Ushiro-tec

Apr 17, 2019

With Checkmarx, normally you need to use one tool for quality and you need to use another tool for security. I understand that Checkmarx is not in the parity space because it's totally different, but they could include some free features or recommendations too.

Read full review

Show 10 more reviews (out of 66)

Related questions

259

What is the biggest difference between Veracode and Checkmarx?

52

Checkmarx or Veracode. Which should we choose?

1,270

What is the Biggest Difference Between Checkmarx and Fortify?

128

What is the biggest difference between Checkmarx and SonarQube?

174

Checkmarx vs SonarQube; SonarQube interoperability with Checkmarx or Veracode

877

If you had to both encrypt and compress data during transmission, which would you do first and why?

79

When evaluating Application Security, what aspect do you think is the most important to look for?

158

What are the Top 5 cybersecurity trends in 2022?

166

What are the threats associated with using ‘bogus’ cybersecurity tools?

22

Which application security solutions include both vulnerability scans and quality checks?