CAST Highlight vs Checkmarx One comparison

The compared CAST and Checkmarx solutions aren't in the same category. CAST is ranked #15 in SCA , with an average rating of 8.0, and holds a 1.0% mindshare in the category. Checkmarx is ranked #3 in AS , with an average rating of 7.9, and holds a 12.5% mindshare. Additionally, 100% of CAST users are willing to recommend the solution, compared to 86% of Checkmarx users who would recommend it.

CAST Highlight

Read 6 CAST Highlight reviews

471 Views
329 Comparison Views

100% willing to recommend

Checkmarx One

Read 70 Checkmarx One reviews

26,051 Views
16,857 Comparison Views

86% willing to recommend

CAST Highlight

Checkmarx One

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CAST Highlight and Checkmarx One based on real PeerSpot user reviews.

Find out in this report how the two Software Composition Analysis (SCA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed CAST Highlight vs. Checkmarx One Report (Updated: September 2022).

Buyer's Guide

CAST Highlight vs. Checkmarx One

September 2022

Download the complete report

Helped 824,067 peers since 2012

Categories and Ranking

CAST Highlight

Average Rating

8.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Software Composition Analysis (SCA) (15th)

Checkmarx One

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (20th), Static Code Analysis (2nd), API Security (2nd), DevSecOps (2nd), Risk-Based Vulnerability Management (6th)

Mindshare comparison

While both are Security Software solutions, they serve different purposes. CAST Highlight is designed for Software Composition Analysis (SCA) and holds a mindshare of 1.0%, up 0.9% compared to last year.
Checkmarx One, on the other hand, focuses on Application Security Tools, holds 12.5% mindshare, down 15.2% since last year.

Software Composition Analysis (SCA)

Application Security Tools

Featured Reviews

Chris Van Poele

Owner at a comms service provider with 501-1,000 employees

Offers efficient portfolio management through enhanced application insights

One of the advantages of using CAST Highlight is that it provides a clear overview of the entire portfolio. It allows me to see the overall quality of my environment and determine where improvements are needed. It also aids in the early detection of trends and can be useful in managing applications within the organization.

Read full review

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Provides good security analysis and security identification within the source code

We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"CAST Highlight is easy to use and has a good dashboard."

"The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable. It works seamlessly with most languages."

"The most valuable features of CAST Highlight are automation and speed."

"It offers good performance."

"The most valuable features of the CAST Highlight are the interface and there are three notations that are very simple to understand and communicate with."

"CAST Highlight provides a clear overview of the role portfolio and allows users to assess the overall quality of the environment. Users can see where improvements are needed and follow up on trends of the application."

"The report function is the solution's greatest asset."

"It can integrate very well with DAST solutions. So both of them are combined into an integrated solution for customers running application security."

"The most valuable features of Checkmarx are its integration with multiple SCM solutions and CICD tools, its ability to scale according to user licenses, and the quick scanning process."

"The value you can get out of the speedy production may be worth the price tag."

"The process of remediating software security vulnerabilities can now be performed (ongoing) as portions of the application are being built in advance of being compiled."

"It allows for SAST scanning of uncompiled code. Further, it natively integrates with all key repos formats (Git, TFS, SVN, Perforce, etc)."

"The setup is very easy. There is a lot of information in the documents which makes the install not difficult at all."

"The most valuable feature is the simple user interface."

More Checkmarx One pros

Cons

"There's a bit of a learning curve at the outset."

"The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user."

"The ease of configuration and customization could be improved in CAST Highlight."

"Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. I would expect CAST Highlight to have the Help dashboard and the Engineering dashboard. These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time."

"There could be potential improvements or additional features added to CAST Highlight to make it better."

"CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves."

"I expect application security vendors to cover all aspects of application security, including SAST, DAST, and even mobile application security testing. And it would be much better if they provided an on-premises and cloud option for all these main application security features."

"The tool is currently quite static in terms of finding security vulnerabilities. It would be great if it was more dynamic and we had even more tools at our disposal to keep us safe. It would help if there was more scanning or if the process was more automated."

"I would like the product to include more debugging and developed tools. It needs to also add enhancements on the coding side."

"The interactive application security testing, or IAST, the interactive part where you're looking at an application that lives in a runtime environment on a server or virtual machine, needs improvement."

"I can't create a business case with multiple-factor authentication."

"They could work to improve the user interface. Right now, it really is lacking."

"Its user interface could be improved and made more friendly."

"Checkmarx reports many false positives that we need to manually segregate and mark “Not exploitable”."

More Checkmarx One cons

Pricing and Cost Advice

"CAST Highlight is an expensive solution."

"Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."

"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."

"It is a pretty costly tool. A lot of customers are resistant to using it."

"The solution's price is high and you pay based on the number of users."

"The tool's pricing is fine."

"We're using a commercial version of Checkmarx, and we paid for the solution for one year. The price is high and could be reduced."

"The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."

"It is a good product but a little overpriced."

"The interface used to create custom rules comes at an additional cost."

"We have purchased an annual license to use this solution. The price is reasonable."

"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."

More Checkmarx One pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.

See recommendations

824,067 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

18%

Manufacturing Company

Insurance Company

Financial Services Firm

22%

Computer Software Company

15%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about CAST Highlight?

The most valuable features of CAST Highlight are automation and speed.

See all answers

What is your experience regarding pricing and costs for CAST Highlight?

The pricing of CAST Highlight was not considered expensive or cheap, and no specific comment was made about the setup cost.

See all answers

What needs improvement with CAST Highlight?

There could be potential improvements or additional features added to CAST Highlight to make it better.

See all answers

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs CAST Highlight

Compared 70% of the time

Black Duck vs CAST Highlight

Compared 6% of the time

Veracode vs CAST Highlight

Compared 5% of the time

GitLab vs CAST Highlight

Compared 5% of the time

Snyk vs CAST Highlight

Compared 3% of the time

More CAST Highlight Competitors

SonarQube Server (formerly SonarQube) vs Checkmarx One

Compared 48% of the time

Veracode vs Checkmarx One

Compared 13% of the time

Fortify on Demand vs Checkmarx One

Compared 5% of the time

Coverity vs Checkmarx One

Compared 4% of the time

Snyk vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Product Reports

Buyer's Guide

CAST Highlight

December 2024

Download CAST Highlight product report

Buyer's Guide

Checkmarx One

December 2024

Download Checkmarx One product report

Learn More

CAST

Checkmarx

Overview

CAST Highlight is a SaaS software intelligence product for performing rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Software Composition Analysis (Open Source risks), Resiliency, and Technical Debt. Objective software insights from automated source code analysis combined with built-in qualitative surveys for business context enable more informed decision-making about application portfolios.

CAST is the software intelligence category leader. CAST technology can see inside custom applications with MRI-like precision, automatically generating intelligence about their inner workings - composition, architecture, transaction flows, cloud readiness, structural flaws, legal and security risks. It’s becoming essential for faster modernization for cloud, raising the speed and efficiency of Software Engineering, better open source risk control, and accurate technical due diligence. CAST operates globally with offices in North America, Europe, India, China. Visit www.castsoftware.com.

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Sample Customers

Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Buyer's Guide

CAST Highlight vs. Checkmarx One

September 2022

Free Report: CAST Highlight vs. Checkmarx One

Find out what your peers are saying about CAST Highlight vs. Checkmarx One and other solutions. Updated: September 2022.

DOWNLOAD NOW

824,067 professionals have used our research since 2012.

See our CAST Highlight vs. Checkmarx One report.

We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.