Checkmarx One vs Digital.ai Release comparison

Checkmarx and Digital.ai are both solutions in the DevSecOps category. Checkmarx is ranked #2 with an average rating of 7.8, while Digital.ai is ranked #12 with an average rating of 7.0. Checkmarx holds a 16.3% mindshare in DSO, compared to Digital.ai’s 0.9% mindshare. Additionally, 87% of Checkmarx users are willing to recommend the solution, compared to 100% of Digital.ai users who would recommend it.

Checkmarx One

Read 70 Checkmarx One reviews

1,775 Views
1,136 Comparison Views

87% willing to recommend

Digital.ai Release

Read 4 Digital.ai Release reviews

76 Views
39 Comparison Views

100% willing to recommend

Checkmarx One

Digital.ai Release

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 7, 2025

Checkmarx One and Digital.ai Release are two competing products in the software development industry. Checkmarx One holds an advantage in pricing and support due to its strategic investment in these areas. On the other hand, Digital.ai Release offers comprehensive features, potentially justifying its higher price.

Features: Checkmarx One provides advanced security scanning, comprehensive support for various programming languages, and dynamic testing options. Digital.ai Release specializes in deployment automation, excels in release management, and integrates seamlessly with popular development tools.

Room for Improvement: Checkmarx One could enhance its deployment automation to match Digital.ai's efficiency, improve its integration with external tools, and streamline its complexity for easier use. Digital.ai Release may benefit from reducing its initial setup costs, expanding security capabilities to better match Checkmarx, and offering more flexible pricing plans.

Ease of Deployment and Customer Service: Digital.ai Release focuses on seamless deployment through integration and automation, supported by responsive customer service aiding implementation. Checkmarx One delivers strong support throughout its deployment, focusing on its security framework with moderate complexity.

Pricing and ROI: Checkmarx One typically has a lower setup cost, offering faster ROI through its security-centric features, crucial for vulnerability reduction. Digital.ai Release, despite higher initial costs, provides robust ROI through effective deployment operations and integrations, representing a strategic long-term investment.

To learn more, read our detailed Checkmarx One vs. Digital.ai Release Report (Updated: March 2025).

Buyer's Guide

Checkmarx One vs. Digital.ai Release

March 2025

Download the complete report

Helped 845,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Checkmarx One

Ranking in DevSecOps

2nd

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (21st), Static Code Analysis (2nd), API Security (3rd), Risk-Based Vulnerability Management (8th)

Digital.ai Release

Ranking in DevSecOps

12th

Average Rating

8.2

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Build Automation (17th), Release Automation (12th)

Mindshare comparison

As of April 2025, in the DevSecOps category, the mindshare of Checkmarx One is 16.3%, down from 22.3% compared to the previous year. The mindshare of Digital.ai Release is 0.9%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

DevSecOps

Featured Reviews

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Provides good security analysis and security identification within the source code

We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.

Read full review

Navanath Gajare

DevOps Tech Lead at a financial services firm with 5,001-10,000 employees

Effectively automates deployments and applies one template across applications

Our company uses the solution to handle deployments for new releases. Whenever there is a new release, the solution creates a new provision template for deployment. We also orchestrate and manage all users. We integrate with other tools like GitHub, Jenkins, or Digital.ai Deploy to manage…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It gives the proper code flow of vulnerabilities and the number of occurrences."

"The solution allows us to create custom rules for code checks."

"The main advantage of this solution is its centralized reporting functionality, which lets us track issues, then see and report on the priorities via a web portal."

"One of the most valuable features is it is flexible."

"The most valuable feature of Checkmarx is the user interface, it is very easy to use. We do not need to configure anything, we only have to scan to see the results."

"The user interface is excellent. It's very user friendly."

"The most valuable features of Checkmarx are the SCA module and the code-checking module. Additionally, the solutions are explanatory and helpful."

"The setup is fairly easy. We didn't struggle with the process at all."

More Checkmarx One pros

"The orchestration, building the release, and then just executing it and managing that pipeline — the orchestration capabilities are great for that."

"The time is also reduced because the manual work has tremendously decreased. We just have to click one button, and it will create everything for us."

"The most valuable feature of Digital.ai Release is its ability to communicate with various deployment systems, such as XLD and batch deployments, as well as integrate with tools, such as Flyway and Bamboo. We use Bamboo as our build orchestrator, and Digital.ai Release also integrates with Jira, another Atlassian solution. These capabilities make it a powerful tool for managing workflow, test automation, and other processes."

"The solution can apply one template across multiple applications."

Cons

"Checkmarx needs improvement in its Dynamic Application Security Testing (DAST) and API security features."

"The pricing can get a bit expensive, depending on the company's size."

"The Dynamic Application Security Testing (DAST) feature should be better."

"Checkmarx could improve the solution reports and false positives. The false positives could be reduced. For example, we have alerts that are tagged as vulnerabilities but when you drill down they are not."

"It is an expensive solution."

"Checkmarx is not good because it has too many false positive issues."

"They should make it more container-friendly and optimized for the CI pipeline. They should make it a little less heavy. Right now, it requires a SQL database, and the way the tool works is that it has an engine and then it has an analysis database in which it stores the information. So, it is pretty heavy from that perspective because you have to have a full SQL Server. They're working on something called Checkmarx Light, which is a slim-down version. They haven't released it yet, but that's what we need. There should be something a little more slimmed down that can just run the analysis and output the results in a format that's readable as opposed to having a full, really big, and thick deployment with a full database server."

"We want to have a holistic view of the portfolio-level dashboard and not just an individual technical project level."

More Checkmarx One cons

"Digital.ai Release could improve by having a better plugin that works with Guardian that we use for mainframe migrations. If there could be an interface or plugin for Guardian that would be beneficial."

"Currently, we put artifact details manually. What we could improve, in our case, is the deployment instruction base. Developers input all the information, including which artifact and where it needs to be deployed. What Digital.ai could do is automatically go to the deployment instruction page, take those artifact details, and implement them."

"The solution is a little bit expensive."

"The backfill could be improved, we could automate that. Right now it's subjective — it's up to the lead developer's memory to remember to backfill."

Pricing and Cost Advice

"The solution is costly."

"The solution's price is high and you pay based on the number of users."

"The average deal size was usually anywhere between $120K to $175K on an annual basis, which could be divided across 12 months."

"It is the right price for quality delivery."

"Its price is fair. It is in or around the right spot. Ultimately, if the price is wrong, customers won't commit, but they do tend to commit. It is neither too cheap nor too expensive."

"If you want more, you have to pay more. You have to pay for additional modules or functionalities."

"Checkmarx is comparatively costlier than other products, which is why some of the customers feel reluctant to go for it, though performance-wise, Checkmarx can compete with other products."

"It's relatively expensive."

More Checkmarx One pricing and cost advice

"Overall, the price is just too high; especially considering we're in the middle of a pandemic."

"The solution's license includes all features."

See which vendors are best for you

Use our free recommendation engine to learn which DevSecOps solutions are best for your needs.

See recommendations

845,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

14%

Manufacturing Company

10%

Government

Educational Organization

52%

Financial Services Firm

22%

Computer Software Company

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

See all answers

What do you like most about Digital.ai Release ?

The time is also reduced because the manual work has tremendously decreased. We just have to click one button, and it will create everything for us.

See all answers

What needs improvement with Digital.ai Release ?

There are many areas of improvement. Currently, we put artifact details manually. What we could improve, in our case, is the deployment instruction base. Developers input all the information, inclu...

See all answers

What is your primary use case for Digital.ai Release ?

It helps with creating documentation, release processes, deploying to lower environments, scheduling meetings, and sending emails to stakeholders. The goal is to reduce manual work and save time.

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs Checkmarx One

Compared 43% of the time

Veracode vs Checkmarx One

Compared 12% of the time

Fortify on Demand vs Checkmarx One

Compared 6% of the time

Checkmarx SAST vs Checkmarx One

Compared 5% of the time

OWASP Zap vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Jenkins vs Digital.ai Release

Compared 65% of the time

GitLab vs Digital.ai Release

Compared 35% of the time

More Digital.ai Release Competitors

Product Reports

Buyer's Guide

Checkmarx One

March 2025

Download Checkmarx One product report

Buyer's Guide

Digital.ai Release

March 2025

Download Digital.ai Release product report

Also Known As

No data available

XL Release, XebiaLabs XL Release

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

Automate, orchestrate, and gain visibility into your release pipelines at scale using Digital.ai Release, a release management tool that is designed for enterprises. Control and track releases, standardize processes, and bake compliance and security into your software release pipelines.

Digital.ai

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

3M, GE, John Deere, Deutsche Telekom, Cable & Wireless, Xerox, and Société Générale, Liberty Mutual, EA, Rabobank

Buyer's Guide

Checkmarx One vs. Digital.ai Release

March 2025

Free Report: Checkmarx One vs. Digital.ai Release

Find out what your peers are saying about Checkmarx One vs. Digital.ai Release and other solutions. Updated: March 2025.

DOWNLOAD NOW

845,406 professionals have used our research since 2012.

See our Checkmarx One vs. Digital.ai Release report.

See our list of best DevSecOps vendors.

We monitor all DevSecOps reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.