Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs Fortify Application Defender comparison

Checkmarx and OpenText are both solutions in the Application Security Tools category. Checkmarx is ranked #3 with an average rating of 7.9, while OpenText is ranked #33 with an average rating of 7.0. Checkmarx holds a 12.9% mindshare in AS, compared to OpenText’s 0.7% mindshare. Additionally, 86% of Checkmarx users are willing to recommend the solution, compared to 81% of OpenText users who would recommend it.
Checkmarx One
Read 70 Checkmarx One reviews
  • 27,270 Views
  • 17,669 Comparison Views
86% willing to recommend
Fortify Application Defender
Read 11 Fortify Application Defender reviews
  • 1,253 Views
  • 1,032 Comparison Views
81% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Oct 8, 2024

Checkmarx One and Fortify Application Defender are two competitive solutions in the application security sector. Fortify has an edge with its comprehensive features and advanced analytics, making it a worthwhile investment for users prioritizing in-depth security.

Features: Checkmarx One is known for its integration capabilities, automated scanning, and early vulnerability detection. Fortify Application Defender offers real-time threat protection, robust analytics, and detailed insights into potential vulnerabilities.

Room for Improvement: Checkmarx One users suggest reporting enhancements, better customization options, and a less steep learning curve. Fortify Application Defender could improve its initial setup process, scalability, and onboarding experience.

Ease of Deployment and Customer Service: Checkmarx One is recognized for smooth deployment and responsive customer service, with exceptional support. Fortify’s deployment is complex but reliable once operational, with effective support.

Pricing and ROI: Checkmarx One offers competitive pricing, leading to good ROI. Though Fortify Application Defender is costlier, it delivers ROI through advanced features and long-term efficiency. Users find Checkmarx more budget-friendly; Fortify attracts with potential security advancements.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Checkmarx One vs. Fortify Application Defender Report (Updated: October 2024).
Buyer's Guide
Checkmarx One vs. Fortify Application Defender
October 2024
Download the complete report
Helped 816,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Customer Service

Sentiment score
7.4
Checkmarx One's support is generally rated positively for knowledgeability and quick responses, despite occasional delays and unresolved issues.
Sentiment score
4.3
Fortify Application Defender's support feedback varies, with helpful responses but issues in knowledge, speed, and communication post-HP acquisition.
 

Room For Improvement

Sentiment score
4.7
Checkmarx One needs better accuracy, language support, integration, flexibility, UI customization, documentation, dynamic testing, and API security features.
Sentiment score
4.8
Fortify Application Defender needs better old compiler support, language coverage, scan speed, integration, interface, licensing, and technical support.
 

Scalability Issues

Sentiment score
7.3
Checkmarx One is favored for its scalability and efficiency, though licensing and resource challenges are sometimes noted.
Sentiment score
4.7
Users find Fortify Application Defender scalable but note challenges with infrastructure, licensing, and handling complex codes effectively.
 

Setup Cost

Sentiment score
6.4
Checkmarx One is costly but valued for its robust security, despite complexity in setup and licensing options.
No sentiment score available
Fortify Application Defender's pricing is complex and costly, with fees ranging from $900 to over $200,000 annually.
 

Stability Issues

Sentiment score
7.2
Checkmarx One is stable for most, but large codebase handling can cause crashes, memory issues, and configuration dependence.
Sentiment score
9.0
Fortify Application Defender is praised for its stability and effectiveness, consistently receiving high user ratings and satisfaction.
 

Valuable Features

Sentiment score
8.4
Checkmarx One enhances secure coding with user-friendly interface, automation, and multi-language support, making it ideal for developers.
Sentiment score
7.9
Fortify Application Defender offers real-time analysis, ease of use, integration, and effective security defect identification and elimination.
 

Categories and Ranking

Checkmarx One
Ranking in Application Security Tools
3rd
Average Rating
7.6
Reviews Sentiment
7.1
Number of Reviews
70
Ranking in other categories
Static Application Security Testing (SAST) (3rd), Vulnerability Management (16th), Static Code Analysis (2nd), API Security (2nd), DevSecOps (2nd), Risk-Based Vulnerability Management (5th)
Fortify Application Defender
Ranking in Application Security Tools
33rd
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
11
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2024, in the Application Security Tools category, the mindshare of Checkmarx One is 12.9%, down from 15.0% compared to the previous year. The mindshare of Fortify Application Defender is 0.7%, down from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Q&A Highlights

Shiva - PeerSpot reviewer
Dec 17, 2019
What is the Biggest Difference Between Checkmarx and Fortify?
Checkmarx SAST is a product supporting 20+ languages, including the modern ones (GoLang, Kotlin, Swift, Scala, Typescript, React). Its language support is constantly kept up with the current versions of the respective languages/frameworks (e.g. .NET Core 2.x etc.). Unlike Fortify, Checkmarx analyses raw (uncompiled) source code, which makes it less susceptible to changes in the built environment (e.g. no dependency on the specific version of XCode). Finally, the Checkmarx solution is available both as an on-premise and in the cloud (hosted) solution with the same capabilities. Fortify on demand (which is the cloud-only solution) is different from the on-prem one.
See all answers
 

Featured Reviews

Rohit Kesharwani - PeerSpot reviewer
Provides good security analysis and security identification within the source code
We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.
Read full review
Saroj-Patnaik - PeerSpot reviewer
Reliable solution with excellent machine learning algorithms but expensive and lacking support
I primarily use Fortify Application Defender to assess whether our products can defend against applications Fortify Application Defender's most valuable features are machine learning algorithms, real-time remediation, and automatic vulnerability notifications. Fortify Application Defender gives…
Read full review
report
See which vendors are best for you
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
See recommendations
816,406 professionals have used our research since 2012.
 

Answers from the Community

Shiva - PeerSpot reviewer
Dec 17, 2019
Dec 17, 2019
What is the Biggest Difference Between Checkmarx and Fortify?
Checkmarx SAST is a product supporting 20+ languages, including the modern ones (GoLang, Kotlin, Swift, Scala, Typescript, React). Its language support is constantly kept up with the current versions of the respective languages/frameworks (e.g. .NET Core 2.x etc.). Unlike Fortify, Checkmarx analyses raw (uncompiled) source code, which makes it less susceptible to changes in the built environme...
2 out of 5 answers
AP
Dec 16, 2019
The major difference is that Checkmarx scans the code without compiling the code. This has a great advantage as code building issues are eliminated, scan time is very less and false positive is less to some extent. One more major this is Checkmarx learns as you eliminate false positives and does not show the same issue again. We can perform incremental scans on the codebase where the old issue is nicely marked as "Recurring" and new ones in Red as NEW. Checkmarx has a highly customizable filter creation where you can create a filter that can eliminate the common recurring issues in scans. This feature is very flexible and you can write your own filters and also, write specific patterns that are found in manual review which is a great help as coding styles differ form teams to teams.
Read full answer
it_user1242723 - PeerSpot reviewer
Dec 16, 2019
Looking at the Gartner report I would say that Checkmarx is way easier to set up (initial setup) compared to Micro Focus Fortify. Also, the financial strength of the Micro Focus Fortify spin/merger is a concern so investments could be at risk.
Read full answer
See all 5 answers
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Computer Software Company
15%
Manufacturing Company
10%
Government
5%
Financial Services Firm
22%
Computer Software Company
14%
Manufacturing Company
13%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
See all answers
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
See all answers
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
See all answers
What do you like most about Fortify Application Defender?
I find the configuration of rules in Fortify Application Defender useful. Its integration is also easy.
See all answers
What needs improvement with Fortify Application Defender?
The product should integrate industry-standard code review tools internally with its system. This would streamline the coding process, as developers wouldn't need multiple tools for code review and...
See all answers
What is your primary use case for Fortify Application Defender?
We use the solution for fast code review. It is integrated into our DevOps pipeline.
See all answers
 

Comparisons

SonarQube Server (formerly SonarQube) vs Checkmarx One Logo
SonarQube Server (formerly SonarQube) vs Checkmarx One
Compared 49% of the time
Veracode vs Checkmarx One Logo
Veracode vs Checkmarx One
Compared 13% of the time
Fortify on Demand vs Checkmarx One Logo
Fortify on Demand vs Checkmarx One
Compared 6% of the time
Coverity vs Checkmarx One Logo
Coverity vs Checkmarx One
Compared 4% of the time
SonarQube Cloud (formerly SonarCloud) vs Checkmarx One Logo
SonarQube Cloud (formerly SonarCloud) vs Checkmarx One
Compared 2% of the time
More Checkmarx One Competitors
CAST Application Intelligence Platform vs Fortify Application Defender Logo
CAST Application Intelligence Platform vs Fortify Application Defender
Compared 13% of the time
Qualys Web Application Scanning vs Fortify Application Defender Logo
Qualys Web Application Scanning vs Fortify Application Defender
Compared 13% of the time
SonarQube Server (formerly SonarQube) vs Fortify Application Defender Logo
SonarQube Server (formerly SonarQube) vs Fortify Application Defender
Compared 9% of the time
Coverity vs Fortify Application Defender Logo
Coverity vs Fortify Application Defender
Compared 7% of the time
Veracode vs Fortify Application Defender Logo
Veracode vs Fortify Application Defender
Compared 6% of the time
More Fortify Application Defender Competitors
 

Product Reports

Buyer's Guide
Checkmarx One
November 2024
Checkmarx One reportDownload Checkmarx One product report
Buyer's Guide
Application Security Tools
November 2024
Fortify Application Defender reportDownload Fortify Application Defender product report
 

Also Known As

No data available
HPE Fortify Application Defender, Micro Focus Fortify Application Defender
 

Learn More

Checkmarx
OpenText
 

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

  • Static Application Security Testing (SAST)
  • Software Composition Analysis (SCA)
  • API security
  • Dynamic Application Security Testing (DAST)
  • Container security
  • IaC security
  • Correlation, prioritization, and risk management
  • Codebashing secure code training
  • AI security
  • Tech partnerships extending AppSec into runtime analysis
  • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Micro Focus Security Fortify Application Defender is a runtime application self-protection (RASP) solution that helps you manage and mitigate risk from homegrown or third-party applications. It provides centralized visibility into application use and abuse while protecting from software vulnerability exploits and other violations in real time.

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
ServiceMaster, Saltworks, SAP
Buyer's Guide
Checkmarx One vs. Fortify Application Defender
October 2024
Free Report: Checkmarx One vs. Fortify Application Defender
Find out what your peers are saying about Checkmarx One vs. Fortify Application Defender and other solutions. Updated: October 2024.
DOWNLOAD NOW
816,406 professionals have used our research since 2012.
See our Checkmarx One vs. Fortify Application Defender report.
See our list of best Application Security Tools vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.