Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs CrowdStrike Falcon Cloud Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex Cloud by Palo Alto N...
Sponsored
Ranking in Application Security Posture Management (ASPM)
10th
Average Rating
9.6
Reviews Sentiment
4.3
Number of Reviews
2
Ranking in other categories
Vulnerability Management (36th), Cloud Workload Protection Platforms (CWPP) (18th), Cloud Security Posture Management (CSPM) (22nd), Cloud-Native Application Protection Platforms (CNAPP) (15th), Data Security Posture Management (DSPM) (13th), Software Supply Chain Security (14th), Cloud Infrastructure Entitlement Management (CIEM) (7th), Cloud Detection and Response (CDR) (9th)
Checkmarx One
Ranking in Application Security Posture Management (ASPM)
3rd
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
71
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (4th), Vulnerability Management (24th), Container Security (23rd), Static Code Analysis (3rd), API Security (8th), Dynamic Application Security Testing (DAST) (2nd), DevSecOps (5th), Risk-Based Vulnerability Management (9th)
CrowdStrike Falcon Cloud Se...
Ranking in Application Security Posture Management (ASPM)
4th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
30
Ranking in other categories
Application Security Tools (11th), Container Security (4th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud Security Posture Management (CSPM) (7th), Cloud-Native Application Protection Platforms (CNAPP) (6th), Cloud Infrastructure Entitlement Management (CIEM) (2nd)
 

Featured Reviews

Nuno-Santos - PeerSpot reviewer
Has improved real-time threat detection and unified cloud protection through AI and automation
Cortex Cloud by Palo Alto Networks is creating some confusion in terms of names because this is recent. They changed the names of the products and are now clarifying their offer. The family of the products is not easy to follow because it's very recent. Regarding the generative AI security tool, I know for sure it's Agentic. Based on my experience with Palo Alto, I can suggest what Cortex Cloud by Palo Alto Networks could make better or what additional functions could be added. This is the best tool in the market. It's not the time to tell what they could do better because it's a recent tool. The market is now adopting it. Our experience doesn't show that they need to do more.
Syed Hasan - PeerSpot reviewer
Partner experiences excellent technical support and seamless initial setup
In my opinion, if we are able to extract or show the report, and because everything is going towards agent tech and GenAI, it would be beneficial if it could get integrated with our code base and do the fix automatically. It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from. This would be really helpful.
Chethan R - PeerSpot reviewer
Has improved threat detection accuracy and helped monitor endpoints across hybrid environments
The most valuable capabilities of CrowdStrike Falcon Cloud Security relate to preventing attacks caused by human error, such as when someone plugs in a USB device or downloads something without caution. It automatically blocks duplication and activities that could result in data loss, effectively preventing unintended copying of data to personal devices. Deduplication prevention is definitely the most valuable feature. CrowdStrike Falcon Cloud Security excels in threat detection with a vast investigation structure, allowing us to verify suspicious activities to identify root causes. It helps us trace back to the origin and fix issues, making it a user-friendly tool for this kind of detection. CrowdStrike Falcon Cloud Security is built on AI and ML technology, enabling it to detect various threats and block suspicious activities immediately, which is particularly effective compared to traditional AVs and EDRs. The analytics provided by CrowdStrike Falcon Cloud Security is key for maintaining a proactive security posture. Its AI and ML foundations offer extensive information on threats and suspicious activities, making it renowned for analysis in the industry.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The AI and automation features in detecting and responding to high-risk threats are impressive; it's one of the best tools regarding AI technology and unifies security in one platform in real-time, improving vulnerability analysis, incident response, and compliance reporting."
"Overall, Cortex Cloud by Palo Alto Networks is a technically strong product, and I rate it ten out of ten."
"The most valuable features of Checkmarx are the SCA module and the code-checking module. Additionally, the solutions are explanatory and helpful."
"The ability to track the vulnerabilities inside the code (origin and destination of weak variables or functions)."
"The feature that I have found most valuable is that its number of false positives is less than the other security application platforms. Its ease of use is another good feature. It also supports most of the languages."
"From my point of view, it is the best product on the market."
"It can integrate very well with DAST solutions. So both of them are combined into an integrated solution for customers running application security."
"The main advantage of this solution is its centralized reporting functionality, which lets us track issues, then see and report on the priorities via a web portal."
"It is very useful because it fits our requirements. It is also easy to use. It is not complex, and we are satisfied with the results."
"Apart from software scanning, software composition scanning is valuable."
"The threat intelligence is the most vital feature"
"I find the easy installation process, quick detection capabilities, and the cloud-based console very useful for this solution."
"The scalability of the product has been great."
"The threat detection capability of CrowdStrike Falcon Cloud Security has always been the major seller, and it works effectively."
"Technical support is helpful."
"The most valuable feature of CrowdStrike Falcon Cloud Security is its lightweight sensor, taking minimal space and not impacting server performance."
"I have contacted customer service, and they are fast."
"The most valuable feature of Falcon Cloud Security is its comprehensive threat-hunting ability."
 

Cons

"Cortex Cloud by Palo Alto Networks is creating some confusion in terms of names because this is recent."
"Some aspects of the GUI can be confusing and make it difficult for me to find certain options or navigate where needed."
"Checkmarx being Windows only is a hindrance. Another problem is: why can't I choose PostgreSQL?"
"We have received some feedback from our customers who are receiving a large number of false positives."
"This product requires you to create your own rulesets. You have to do a lot of customization."
"We are trying to find out if there is a way to identify the run-time null values. I am analyzing different tools to check if there is any tool that supports run-time null value identification, but I don't think any of the tools in the market currently supports this feature. It would be helpful if Checkmarx can identify and throw an exception for a null value at the run time. It would make things a lot easier if there is a way for Checkmarx to identify nullable fields or hard-coded values in the code. The accessibility for customized Checkmarx rules is currently limited and should be improved. In addition, it would be great if Checkmarx can do static code and dynamic code validation. It does a lot of security-related scanning, and it should also do static code and dynamic code validation. Currently, for security-related validation, we are using Checkmarx, and for static code and dynamic code validation, we are using some other tools. We are spending money on different tools. We can pay a little extra money and use Checkmarx for everything."
"The validation process needs to be sped up."
"They could work to improve the user interface. Right now, it really is lacking."
"The product can be improved by continuing to expand the application languages and frameworks that can be scanned for vulnerabilities. This includes expanded coverage for mobile applications as well as open-source development tools."
"It provides us with quite a handful of false positive issues. If Checkmarx could reduce this number, it would be a great tool to use."
"For the past six months, we have been facing some issues. Because it is a cloud-based infrastructure, it has been getting slower."
"There should be cloud storage scanning. We would like to have cloud storage vulnerability and threat management on any cloud storage."
"The CrowdStrike dashboard currently lacks a username field."
"I would not say the tool's integration capabilities were straightforward because the complexity depends on the volume of the data."
"The UI part needs to be improved."
"The SIEM needs to be more developed."
"Incorporating threat intelligence into the system would be a valuable addition."
"The tool's scalability is low."
 

Pricing and Cost Advice

Information not available
"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."
"The average deal size was usually anywhere between $120K to $175K on an annual basis, which could be divided across 12 months."
"It's relatively expensive."
"We have purchased an annual license to use this solution. The price is reasonable."
"The number of users and coverage for languages will have an impact on the cost of the license."
"Its price is fair. It is in or around the right spot. Ultimately, if the price is wrong, customers won't commit, but they do tend to commit. It is neither too cheap nor too expensive."
"It is a good product but a little overpriced."
"Most of my customers opted for a perpetual license. They prefer to pay the highest amount up front for the perpetual license and then pay for additional support annually."
"The price is not too high, it is okay."
"The pricing is reasonable, neither overly expensive nor excessively cheap, making it competitive compared to other market options."
"CrowdStrike Falcon Cloud Security is pricy."
"Its price is moderate."
"It's an expensive package but does what it says it will do."
"CrowdStrike Falcon is very expensive."
"CrowdStrike Falcon Cloud Security is very expensive for us. Last month, we had a big issue that took much time and money to resolve. It slowed down our business and required our management team to get involved. We had a problem similar to the "Blue Screen of Death" issue many US companies faced. This incident used up many of our IT resources in just a few months. That's why we're looking for a replacement tool now."
"It's an expensive product"
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
873,085 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Performing Arts
13%
Financial Services Firm
9%
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
19%
Computer Software Company
13%
Manufacturing Company
10%
Government
6%
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
7%
Insurance Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise9
Large Enterprise38
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise6
Large Enterprise12
 

Questions from the Community

What is your experience regarding pricing and costs for Cortex Cloud by Palo Alto Networks?
The solution is costly, with high-end capabilities suitable for enterprises. It is less affordable for startups or sm...
What needs improvement with Cortex Cloud by Palo Alto Networks?
Some aspects of the GUI can be confusing and make it difficult for me to find certain options or navigate where needed.
What is your primary use case for Cortex Cloud by Palo Alto Networks?
The solution helps me to understand misconfigurations in AWS or Azure cloud environments. It detects misconfiguration...
What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as ...
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What do you like most about CrowdStrike Falcon Cloud Security?
It's easy to gather insights and conduct analysis about existing threats.
What is your experience regarding pricing and costs for CrowdStrike Falcon Cloud Security?
It's an expensive product. The solution costs around $60 for a single user on a yearly basis. I would rate the pricin...
What needs improvement with CrowdStrike Falcon Cloud Security?
I am not part of the current monitoring team, so I do not know how they feel about the tool. I am sharing information...
 

Also Known As

No data available
No data available
CrowdStrike Falcon ASPM
 

Overview

 

Sample Customers

Information Not Available
YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Information Not Available
Find out what your peers are saying about Checkmarx One vs. CrowdStrike Falcon Cloud Security and other solutions. Updated: October 2025.
873,085 professionals have used our research since 2012.