Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs CrowdStrike Falcon Cloud Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Checkmarx One
Ranking in Application Security Tools
3rd
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
70
Ranking in other categories
Static Application Security Testing (SAST) (3rd), Vulnerability Management (24th), Static Code Analysis (2nd), API Security (4th), DevSecOps (2nd), Risk-Based Vulnerability Management (10th)
CrowdStrike Falcon Cloud Se...
Ranking in Application Security Tools
12th
Average Rating
8.2
Reviews Sentiment
7.5
Number of Reviews
29
Ranking in other categories
Container Security (6th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (7th), Cloud-Native Application Protection Platforms (CNAPP) (7th), Cloud Infrastructure Entitlement Management (CIEM) (2nd), Application Security Posture Management (ASPM) (3rd)
 

Mindshare comparison

As of May 2025, in the Application Security Tools category, the mindshare of Checkmarx One is 10.3%, down from 14.8% compared to the previous year. The mindshare of CrowdStrike Falcon Cloud Security is 0.8%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Rohit Kesharwani - PeerSpot reviewer
Provides good security analysis and security identification within the source code
We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.
Saif Ullah Khan - PeerSpot reviewer
Boosts security by automatically blocking applications or activities, but query responses have been slower recently
For the past six months, we have been facing some issues. Because it is a cloud-based infrastructure, it has been getting slower. There are no bugs because they release updates continuously. We highly appreciate that, but during hunting or running a query on different logs, the time frame has increased in the past six months. It takes longer to give us the results. Another issue is the lack of proper documentation. During investigations, there is no proper documentation available. This is a problem because many people are saying there should be proper documentation explaining what CrowdStrike captures from the machine and the meaning of it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The setup is very easy. There is a lot of information in the documents which makes the install not difficult at all."
"The ability to track the vulnerabilities inside the code (origin and destination of weak variables or functions)."
"The features and technologies are very good. The flexibility and the roadmap have also been very good. They're at the forefront of delivering the additional capabilities that are required with cloud delivery, etc. Their ability to deliver what customers require and when they require is very important."
"Checkmarx has helped us deliver more secure products. We are able to do static code analysis with the tool before shipping our code to production. When the integration is in the pipeline, this tool gives us early notifications on code fixes."
"It's not an obstacle for developers. They can easily write their code and make it more secure with Checkmarx."
"The product's most valuable feature is static code and supply chain effect analysis. It provides a lot of visibility."
"The solution communicates where to fix the issue for the purpose of less iterations."
"The only thing I like is that Checkmarx does not need to compile."
"Falcon is a cloud-based technology, so its resource usage is light. You deploy the agents to your endpoints, but the processing is done on the cloud, so you're CPU utilization is only about 2 percent. Some others solutions use between 30 to 60 percent."
"The alerts are clearer, and the capabilities are much better than the others."
"The solution has login features like multi factor authentication."
"It helps us by automatically blocking certain applications or activities."
"The most valuable features of CrowdStrike Falcon Cloud Security are Cloud Security Posture Management and Cloud Workload Protection, offering more visibility and protection across our cloud environment."
"The most valuable feature is the auto-detection capability for threat hunting and issuing advisories on remedies."
"Technical support is helpful."
"The initial setup is easy ."
 

Cons

"We would like to be able to run scans from our local system, rather than having to always connect to the product server, which is a longer process."
"The plugins for the development environment have room for improvements such as for Android Studio and X code."
"One area for improvement in Checkmarx is pricing, as it's more expensive than other products."
"The validation process needs to be sped up."
"Checkmarx reports many false positives that we need to manually segregate and mark “Not exploitable”."
"In terms of dashboarding, the solution could provide a little more flexibility in terms of creating more dashboards. It has some of its own dashboards that come out of the box. However, if I have to implement my own dashboards that are aligned to my organization's requirements, that dashboarding feature has limited capability right now."
"I think the CxAudit tool has room for improvement. At the beginning you can choose a scan of a project, but in any event the project must be scanned again (wasting time)."
"Checkmarx could improve by reducing the price."
"The CrowdStrike dashboard currently lacks a username field."
"It would be more convenient if there was an easier way to install CrowdStrike, perhaps through better integration with Active Directory."
"It gets the work done, but the main problem with the solution is that if you remediate anything, it takes 45 days for you to get any of the features displayed on the dashboard. This is the real weakness of CrowdStrike. Their customer support is also not ready to help with it. If you remediate any cloud vulnerability that they are giving you, such as removing a host from your organization, it takes around 45 days for them to remove it from their console."
"I think the UI could be improved, but the technical support said CrowdStrike will improve the UI in the near future. But right now, it’s so messy."
"Different file options should be available, and clients should be able to select from the options."
"The CrowdStrike partner portal documentation could be improved to provide proper instructions for integrating their products."
"The only suggestion for improvement would be the pricing."
"Incorporating threat intelligence into the system would be a valuable addition."
 

Pricing and Cost Advice

"The price of Checkmarx could be reduced to match their competitors, it is expensive."
"The pricing was not very good. This is just a framework which shouldn’t cost so much."
"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."
"Most of my customers opted for a perpetual license. They prefer to pay the highest amount up front for the perpetual license and then pay for additional support annually."
"It's relatively expensive."
"The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."
"We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
"The pricing is fair for what you get. I'd rate them a solid nine out of ten in terms of pricing."
"Its price is moderate."
"CrowdStrike Falcon Cloud Security is pricy."
"It's an expensive package but does what it says it will do."
"The price is not too high, it is okay."
"It is expensive, but it adds value."
"I am not the one who handled the pricing. A different team worked on it, but it is pretty expensive."
"CrowdStrike Falcon Cloud Security is very expensive for us. Last month, we had a big issue that took much time and money to resolve. It slowed down our business and required our management team to get involved. We had a problem similar to the "Blue Screen of Death" issue many US companies faced. This incident used up many of our IT resources in just a few months. That's why we're looking for a replacement tool now."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
850,671 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Computer Software Company
14%
Manufacturing Company
10%
Government
5%
Computer Software Company
15%
Financial Services Firm
15%
Manufacturing Company
8%
Insurance Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What do you like most about CrowdStrike Falcon Cloud Security?
It's easy to gather insights and conduct analysis about existing threats.
What is your experience regarding pricing and costs for CrowdStrike Falcon Cloud Security?
It's an expensive product. The solution costs around $60 for a single user on a yearly basis. I would rate the pricing a four out of ten.
What needs improvement with CrowdStrike Falcon Cloud Security?
I am not part of the current monitoring team, so I do not know how they feel about the tool. I am sharing information related to the tool based on the feedback and on my experience deploying it fou...
 

Also Known As

No data available
CrowdStrike Falcon ASPM
 

Overview

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Information Not Available
Find out what your peers are saying about Checkmarx One vs. CrowdStrike Falcon Cloud Security and other solutions. Updated: April 2025.
850,671 professionals have used our research since 2012.