CAST Highlight vs Checkmarx One comparison

The compared CAST and Checkmarx solutions aren't in the same category. CAST is ranked #15 in SCA , with an average rating of 8.0, and holds a 1.0% mindshare in the category. Checkmarx is ranked #3 in AS , with an average rating of 7.9, and holds a 12.1% mindshare. Additionally, 100% of CAST users are willing to recommend the solution, compared to 87% of Checkmarx users who would recommend it.

CAST Highlight

Read 6 CAST Highlight reviews

448 Views
323 Comparison Views

100% willing to recommend

Checkmarx One

Read 70 Checkmarx One reviews

24,681 Views
16,235 Comparison Views

87% willing to recommend

CAST Highlight

Checkmarx One

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CAST Highlight and Checkmarx One based on real PeerSpot user reviews.

Find out in this report how the two Software Composition Analysis (SCA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed CAST Highlight vs. Checkmarx One Report (Updated: September 2022).

Buyer's Guide

CAST Highlight vs. Checkmarx One

September 2022

Download the complete report

Helped 831,265 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CAST Highlight

Average Rating

8.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Software Composition Analysis (SCA) (15th)

Checkmarx One

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (20th), Static Code Analysis (2nd), API Security (2nd), DevSecOps (2nd), Risk-Based Vulnerability Management (7th)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. CAST Highlight is designed for Software Composition Analysis (SCA) and holds a mindshare of 1.0%, up 0.9% compared to last year.
Checkmarx One, on the other hand, focuses on Application Security Tools, holds 12.1% mindshare, down 15.3% since last year.

Software Composition Analysis (SCA)

Application Security Tools

Featured Reviews

Chris Van Poele

Owner at a comms service provider with 501-1,000 employees

Offers efficient portfolio management through enhanced application insights

One of the advantages of using CAST Highlight is that it provides a clear overview of the entire portfolio. It allows me to see the overall quality of my environment and determine where improvements are needed. It also aids in the early detection of trends and can be useful in managing applications within the organization.

Read full review

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Provides good security analysis and security identification within the source code

We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"CAST Highlight is easy to use and has a good dashboard."

"The most valuable features of CAST Highlight are automation and speed."

"It offers good performance."

"CAST Highlight provides a clear overview of the role portfolio and allows users to assess the overall quality of the environment. Users can see where improvements are needed and follow up on trends of the application."

"The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable. It works seamlessly with most languages."

"The most valuable features of the CAST Highlight are the interface and there are three notations that are very simple to understand and communicate with."

"The UI is very intuitive and simple to use."

"It is a stable product."

"The user interface is excellent. It's very user friendly."

"What I like best about Checkmarx is that it has fewer false positives than other products, giving you better results."

"The most valuable feature is the simple user interface."

"The reports are very good because they include details on the code level, and make suggestions about how to fix the problems."

"The value you can get out of the speedy production may be worth the price tag."

"Overall, the ability to find vulnerabilities in the code is better than the tool that we were using before."

More Checkmarx One pros

Cons

"There could be potential improvements or additional features added to CAST Highlight to make it better."

"The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user."

"The ease of configuration and customization could be improved in CAST Highlight."

"There's a bit of a learning curve at the outset."

"Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. I would expect CAST Highlight to have the Help dashboard and the Engineering dashboard. These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time."

"CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves."

"Its user interface could be improved and made more friendly."

"C, C++, VB and T-SQL are not supported by this product. Although, C and C++ were advertised as being supported."

"The pricing can get a bit expensive, depending on the company's size."

"The resolutions should also be provided. For example, if the user faces any problem regarding an installation due to the internal security policies of their company, there should be a resolution offered."

"Checkmarx being Windows only is a hindrance. Another problem is: why can't I choose PostgreSQL?"

"The solution's user interface could be improved because it seems outdated."

"If it is a very large code base then we have a problem where we cannot scan it."

"They can support the remaining languages that are currently not supported. They can also create a different model that can identify zero-day attacks. They can work on different patterns to identify and detect zero-day vulnerability attacks."

More Checkmarx One cons

Pricing and Cost Advice

"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."

"CAST Highlight is an expensive solution."

"Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."

"It is a pretty costly tool. A lot of customers are resistant to using it."

"It is a good product but a little overpriced."

"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."

"Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."

"The tool's pricing is fine."

"For around 250 users or committers, the cost is approximately $500,000."

"Be cautious of the one-year subscription date. Once it expires, your price will go up."

"If you want more, you have to pay more. You have to pay for additional modules or functionalities."

"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."

More Checkmarx One pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.

See recommendations

831,265 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

22%

Computer Software Company

18%

Insurance Company

Manufacturing Company

Financial Services Firm

22%

Computer Software Company

15%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about CAST Highlight?

The most valuable features of CAST Highlight are automation and speed.

See all answers

What is your experience regarding pricing and costs for CAST Highlight?

The pricing of CAST Highlight was not considered expensive or cheap, and no specific comment was made about the setup cost.

See all answers

What needs improvement with CAST Highlight?

There could be potential improvements or additional features added to CAST Highlight to make it better.

See all answers

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs CAST Highlight

Compared 67% of the time

Black Duck vs CAST Highlight

Compared 6% of the time

Veracode vs CAST Highlight

Compared 5% of the time

GitLab vs CAST Highlight

Compared 5% of the time

JFrog Xray vs CAST Highlight

Compared 4% of the time

More CAST Highlight Competitors

SonarQube Server (formerly SonarQube) vs Checkmarx One

Compared 47% of the time

Veracode vs Checkmarx One

Compared 13% of the time

Fortify on Demand vs Checkmarx One

Compared 5% of the time

Coverity vs Checkmarx One

Compared 4% of the time

Snyk vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Product Reports

Buyer's Guide

CAST Highlight

January 2025

Download CAST Highlight product report

Buyer's Guide

Checkmarx One

January 2025

Download Checkmarx One product report

Learn More

CAST

Checkmarx

Overview

CAST Highlight is a SaaS software intelligence product for performing rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Software Composition Analysis (Open Source risks), Resiliency, and Technical Debt. Objective software insights from automated source code analysis combined with built-in qualitative surveys for business context enable more informed decision-making about application portfolios.

CAST is the software intelligence category leader. CAST technology can see inside custom applications with MRI-like precision, automatically generating intelligence about their inner workings - composition, architecture, transaction flows, cloud readiness, structural flaws, legal and security risks. It’s becoming essential for faster modernization for cloud, raising the speed and efficiency of Software Engineering, better open source risk control, and accurate technical due diligence. CAST operates globally with offices in North America, Europe, India, China. Visit www.castsoftware.com.

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Sample Customers

Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Buyer's Guide

CAST Highlight vs. Checkmarx One

September 2022

Free Report: CAST Highlight vs. Checkmarx One

Find out what your peers are saying about CAST Highlight vs. Checkmarx One and other solutions. Updated: September 2022.

DOWNLOAD NOW

831,265 professionals have used our research since 2012.

See our CAST Highlight vs. Checkmarx One report.

We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.