Try our new research platform with insights from 80,000+ expert users
Checkmarx SAST Logo

Checkmarx SAST Reviews

Vendor: Checkmarx
4.8 out of 5
Start review

What is Checkmarx SAST?

Checkmarx SAST provides advanced static application security testing by identifying vulnerabilities in source code. It's ideal for ISOs, security professionals, and developers striving to secure applications during development.

Get the Static Application Security Testing (SAST) Buyer's Guide and find out what your peers are saying about Checkmarx SAST, GitLab, Checkmarx One and more!
Checkmarx SAST is the #22 ranked solution in AST tools. PeerSpot users give Checkmarx SAST an average rating of 9.6 out of 10. Checkmarx SAST is most commonly compared to GitLab: Checkmarx SAST vs GitLab. Checkmarx SAST is popular among the large enterprise segment, accounting for 69% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 26% of all views.
Buyer's Guide
Static Application Security Testing (SAST)
March 2025
Get the category report
Helped 842,296 peers since 2012
 
 
Key learnings from peers

Valuable Features

  • "The most important feature is that Checkmarx protects our company against attacks."
  • "The most important feature is that Checkmarx protects our company against attacks."
  • "The most important competitive advantage and benefit is the ability to identify vulnerabilities in the source code immediately without needing to complete the coding."

Room for Improvement

  • "We had some issues where Checkmarx did not recognize a vulnerability. We had to talk with the vendor, and they had to include an improvement in the tool to resolve this issue."
  • "We had some issues where Checkmarx did not recognize a vulnerability."
  • "The on-premises version is more expensive compared to the cloud version."
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Static Application Security Testing (SAST) Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews
Financial Services Firm
26%
Computer Software Company
12%
Manufacturing Company
11%
Healthcare Company
7%
Insurance Company
7%
Outsourcing Company
5%
Educational Organization
5%
Consumer Goods Company
4%
Government
3%
Comms Service Provider
3%
Training & Coaching Company
2%
Performing Arts
2%
Retailer
2%
Hospitality Company
2%
Wholesaler/Distributor
1%
Construction Company
1%
Aerospace/Defense Firm
1%
Energy/Utilities Company
1%
Legal Firm
1%
Media Company
1%
Pharma/Biotech Company
1%
Transportation Company
1%
University
1%

Compare Checkmarx SAST with alternative products

Go!

Learn more about Checkmarx SAST

Checkmarx SAST is known for its powerful code scanning capabilities that integrate seamlessly into existing development environments. It supports a wide range of programming languages, which makes it applicable for diverse development projects. Some users suggest improvements in the scan performance speed and enhanced support in handling false positives to further optimize workflow efficiency.

What are the standout features of Checkmarx SAST?
  • Language Support: Offers broad language support catering to multiple coding frameworks.
  • Integration Flexibility: Seamlessly integrates with existing CI/CD pipelines and developer tools.
  • Comprehensive Scanning: Detects security vulnerabilities early in the development process.
  • Detailed Reporting: Provides comprehensive reports that help prioritize remediation efforts.
What benefits and ROI should users consider?
  • Improved Security Posture: Enhances application security by catching vulnerabilities early.
  • Cost Efficiency: Reduces costs associated with post-deployment issue resolution.
  • Developer Empowerment: Allows developers to identify and fix issues independently.
  • Regulatory Compliance: Assists in meeting compliance requirements efficiently.

Implemented across various industries, Checkmarx SAST supports sectors like finance, healthcare, and technology with their stringent security requirements. By integrating seamlessly into existing workflows, it ensures that applications remain secure while not disrupting industry-specific processes.

Checkmarx SAST was previously known as SAST.

Related questions

  • 15
What Application Security Solution Do You Use That Is DevOps Friendly?
  • 75
Which is the most comprehensive open source Web Security Testing tool?
  • 160
What is the best Application Security Testing platform?
  • 7
When evaluating Application Security Testing, what aspect do you think is the most important to look for?
  • 71
SAST vs. DAST: Which is better for application security testing?
  • 78
What tools do you rely on for building a DevSecOps pipeline?
  • 38
What does the Log4j/Log4Shell vulnerability mean for your company?
  • 48
Checkmarx or Veracode. Which should we choose?
  • 68
What are your recommended automated penetration testing tools?
  • 48
What are the OWASP top 10 in 2020?

Product Categories

Product Categories
Static Application Security Testing (SAST)

Popular Comparisons

Popular Comparisons
GitLab vs Checkmarx SAST Logo
GitLab vs Checkmarx SAST
Checkmarx One vs Checkmarx SAST Logo
Checkmarx One vs Checkmarx SAST
Semgrep vs Checkmarx SAST Logo
Semgrep vs Checkmarx SAST
See all alternatives
 

Checkmarx SAST reviews

Sort by:
PeerSpot user
IT Transformation Project Manager at a financial services firm with 10,001+ employees
Verified user of Checkmarx SAST
Dec 16, 2024
Automate security scanning and detect code leakages for good security protection

Pros

"The most important feature is that Checkmarx protects our company against attacks. "

Cons

"We had some issues where Checkmarx did not recognize a vulnerability. "

What is our primary use case?

We integrated Checkmarx with our pipelines in Jenkins. We had it fully automated for static security scanning to protect our company against attacks.

How has it helped my organization?

At the beginning of implementation, Checkmarx found many vulnerabilities, however, by the end, we had none in production.

*Disclosure: I am a real user, and this review is based on my own experience and opinions.
Read full review (411 words)
Cuneyt KALPAKOGLU Phd. - PeerSpot user
Founder & Chairman at Endpoint-labs Cyber Security R&D
Verified user of Checkmarx SAST
Oct 9, 2024
Identifying code vulnerabilities swiftly with no need to complete the coding and offers good security

Pros

"The most important competitive advantage and benefit is the ability to identify vulnerabilities in the source code immediately without needing to complete the coding."

Cons

"The on-premises version is more expensive compared to the cloud version."

What is our primary use case?

The primary use case of Checkmarx SAST is application security, specifically static application security testing. It is essential and the root of this concept.

How has it helped my organization?

I did not find measurable information about the financial benefits or return on investment.

*Disclosure: My company has a business relationship with this vendor other than being a customer:
Read full review (319 words)