Checkmarx One vs CloudBees comparison

Checkmarx One and CloudBees compete in the application security and CI/CD automation space. Checkmarx One appears to have the upper hand in static security scanning with its vulnerability detection, while CloudBees excels in CI/CD orchestration and pipeline management.

Features: Checkmarx One includes pre-compiled and compiled code scanning, vulnerability identification, and integration with various repositories. It minimizes false positives and supports comprehensive vulnerability detection, enhancing secure coding skills among developers. CloudBees provides scalability, advanced security, and extensive integration capabilities, focusing on CI/CD automation and ease of application deployment, offering a user-friendly interface for managing complex pipelines.

Room for Improvement: Checkmarx One requires better management of false positives, improved language support, and integration with dynamic testing tools. Users seek clarity and flexibility in its licensing model. CloudBees users encounter slow performance and complex plugin management, with calls for enhancements in infrastructure stability and license tracking, as well as more AI integration for simplifying the user experience.

Ease of Deployment and Customer Service: Checkmarx One is primarily deployed on-premises with hybrid options, receiving mixed reviews for technical assistance but generally positive for customer support. CloudBees integrates well within private and public clouds, earning high marks for customer service, despite occasional service response delays.

Pricing and ROI: Checkmarx One is seen as expensive, with costs dependent on user count and language support. Despite the high price, long-term security benefits and reduced vulnerability management costs are appreciated. CloudBees, though not cheap, is valued for its ROI in accelerating secure application delivery, though specific pricing details are less discussed.