Checkmarx One vs GitHub comparison

Read 92 GitHub reviews

2,551 Views
1,117 Comparison Views

100% willing to recommend

Checkmarx One

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 5, 2025

Checkmarx One and GitHub compete in the software development and security space. Checkmarx holds an advantage in code vulnerability scanning and remediation guidance, while GitHub excels in collaboration and code management.

Features: Checkmarx One excels in comprehensive code analysis, integration with development tools, and detailed reporting, enabling developers to enhance secure coding skills. It supports many programming languages and performs security checks across various environments. GitHub is known for its version control and collaboration features, supporting project management through pull requests, code reviews, and actions. It integrates extensively with development lifecycle tools and maintains robust code versioning.

Room for Improvement: Checkmarx One could reduce false positives, expand programming language support, and improve licensing flexibility. Its setup may require complex customization, and users seek clearer documentation and broader tool integrations. GitHub users request better security features, integration with project management tools, and user-friendliness for non-technical members. Handling large files and enhancing automation in workflows are also noted areas for improvement.

Ease of Deployment and Customer Service: Checkmarx One supports on-premises, hybrid, and public cloud setups but faces challenges in complex deployments. Its technical support is responsive but could improve on extended ticket handling. GitHub, primarily cloud-based, is easier to deploy with reliable support and straightforward technical assistance, emphasizing cloud simplicity and user-friendly deployment.

Pricing and ROI: Checkmarx One is viewed as expensive, influenced by user numbers and language support, offering significant ROI through security enhancements. Its pricing model is considered rigid, seen as a premium option. GitHub is cost-effective, especially with its free tier for public repositories, offering competitive rates for private ones. Users find its pricing reasonable, highlighting flexibility and accessibility.

To learn more, read our detailed Checkmarx One vs. GitHub Report (Updated: January 2025).

Checkmarx One vs. GitHub

Download the complete report

Helped 831,265 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Checkmarx One

Ranking in Application Security Tools

3rd

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (3rd), Vulnerability Management (20th), Static Code Analysis (2nd), API Security (2nd), DevSecOps (2nd), Risk-Based Vulnerability Management (7th)

GitHub

Ranking in Application Security Tools

7th

Average Rating

8.8

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Version Control (3rd)

Mindshare comparison

As of January 2025, in the Application Security Tools category, the mindshare of Checkmarx One is 12.1%, down from 15.3% compared to the previous year. The mindshare of GitHub is 0.8%, down from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Provides good security analysis and security identification within the source code

We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.

Read full review

Pervez Roy

Solutions Architect at Small Systems LTD

Very good for collaboration on software projects

We use GitHub for code repository alongside Bitbucket GitHub is very good for collaboration on software projects. We prefer Bitbucket for commercial use, while GitHub is used for open source. You can get the differences, history of changes, and version control for various pull requests. You can…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It shows in-depth code of where actual vulnerabilities are."

"The most valuable features of Checkmarx are the SCA module and the code-checking module. Additionally, the solutions are explanatory and helpful."

"Helps us check vulnerabilities in our SAP Fiori application."

"The user interface is excellent. It's very user friendly."

"The features and technologies are very good. The flexibility and the roadmap have also been very good. They're at the forefront of delivering the additional capabilities that are required with cloud delivery, etc. Their ability to deliver what customers require and when they require is very important."

"The solution communicates where to fix the issue for the purpose of less iterations."

"We use the solution for dynamic application testing."

"The setup is fairly easy. We didn't struggle with the process at all."

More Checkmarx One pros

"GitHub provides the SFH key to protect our passwords and connection."

"The ease of the planning board feature in GitHub is very valuable."

"I'm able to access any repository that I like, whether it's public or private."

"The most valuable feature of GitHub is version control and continuous integration."

"The code sharing and updated history are valuable features."

"We use GitHub as a repository."

"The best feature is the ability to track the history of all code changes, and it's easy to use. Additionally, as it's open source, anyone can use that feature resulting in distributed development. This opens the door to collaboration with different code and developer, feature, and master branches of development."

"A great feature is being able to have different repositories and different kinds of projects in a single solution at a single time. It's just a click away."

More GitHub pros

Cons

"They could work to improve the user interface. Right now, it really is lacking."

"Licensing models and Swift language support are the aspects in which this product needs to improve. Swift is a new language, in which major customers require support for lower prices."

"When we first ran it on a big project, there wasn't enough memory on the computer. It originally ran with eight gigabytes, and now it runs with 32. The software stopped at some point, and while I don't think it said it ran out of memory, it just said "stopped" and something else. We had to go to the logs and send them to the integrator, and eventually, they found a memory issue in the logs and recommended increasing the memory. We doubled it once, and it didn't seem enough. We doubled it again, and it helped."

"Meta data is always needed."

"I would like to see the DAST solution in the future."

"They should make it more container-friendly and optimized for the CI pipeline. They should make it a little less heavy. Right now, it requires a SQL database, and the way the tool works is that it has an engine and then it has an analysis database in which it stores the information. So, it is pretty heavy from that perspective because you have to have a full SQL Server. They're working on something called Checkmarx Light, which is a slim-down version. They haven't released it yet, but that's what we need. There should be something a little more slimmed down that can just run the analysis and output the results in a format that's readable as opposed to having a full, really big, and thick deployment with a full database server."

"Checkmarx needs improvement in its Dynamic Application Security Testing (DAST) and API security features."

"I would like the product to include more debugging and developed tools. It needs to also add enhancements on the coding side."

More Checkmarx One cons

"Could be more user friendly."

"The documentation needs to be more concise and easier for developers to understand."

"The sign in process is a bit difficult."

"One area for improvement in GitHub could be integration with other tools, such as test management or project management tools."

"The solution can improve by adding video guides, official guides, or short courses that cater to beginners who are new to the system. These resources could offer step-by-step guidance on how to use GitHub, including common procedures such as pulling and committing. Currently, many of us have to resort to searching for information on how to do these tasks via Google. An official guide provided by GitHub itself would be a valuable asset to newcomers and would save them time and effort."

"Scalability is an area with a shortcoming, because of which it has room for improvement."

"The storage for this solution could be improved."

"It would be better if the amount of storage were increased."

More GitHub cons

Pricing and Cost Advice

"The price of Checkmarx could be reduced to match their competitors, it is expensive."

"The solution's price is high and you pay based on the number of users."

"We're using a commercial version of Checkmarx, and we paid for the solution for one year. The price is high and could be reduced."

"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."

"It is an expensive solution."

"The interface used to create custom rules comes at an additional cost."

"Checkmarx is comparatively costlier than other products, which is why some of the customers feel reluctant to go for it, though performance-wise, Checkmarx can compete with other products."

"This solution is expensive. The customized package allows you to buy additional users at any time."

More Checkmarx One pricing and cost advice

"The licensing model for GitHub is user-based. Whenever the new developer joins we have to get a new license and register their ID. The overall price of the solution is reasonable."

"We pay a licensing fee for GitHub, which could be cheaper."

"I think, in terms of price, GitHub is okay compared to other tools."

"My company purchased it. Before, we used to receive the free version, but then they purchased some of the features."

"It’s an open-source solution."

"GitHub is an open-source product, but when using the free-to-use version, anyone can see the code we're working on."

"We pay a subscription-based yearly licensing fee for the solution."

"It's cheaper than Bitbucket."

More GitHub pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

831,265 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

22%

Computer Software Company

15%

Manufacturing Company

10%

Government

Manufacturing Company

13%

Financial Services Firm

12%

Computer Software Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

What do you like most about GitHub?

The control is the most valuable feature as developers can work on a single code.

What is your experience regarding pricing and costs for GitHub?

I'm not aware of the costs associated with GitHub. I simply appreciate its efficiency in managing code and collaborating with team members.

What needs improvement with GitHub?

I would like to see some AI functionality included in GitHub, similar to the features seen in GitLab, to enhance productivity. Additionally, offering limited free access to features like Copilot co...

SonarQube Server (formerly SonarQube) vs Checkmarx One

Comparisons

Compared 47% of the time

Veracode vs Checkmarx One

Compared 13% of the time

Fortify on Demand vs Checkmarx One

Compared 5% of the time

Coverity vs Checkmarx One

Compared 4% of the time

Snyk vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Fortify on Demand vs GitHub

Compared 18% of the time

Snyk vs GitHub

Compared 17% of the time

AWS CodeCommit vs GitHub

Compared 15% of the time

Bitbucket vs GitHub

Compared 13% of the time

Mend.io vs GitHub

Compared 6% of the time

More GitHub Competitors

Product Reports

Checkmarx One

Download Checkmarx One product report

Download GitHub product report

Learn More

Checkmarx

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

GitHub is a web-based Git repository hosting service. It offers all of the distributed revision control and source code management (SCM) functionality of Git as well as adding its own features. Unlike Git, which is strictly a command-line tool, GitHub provides a Web-based graphical interface and desktop as well as mobile integration. It also provides access control and several collaboration features such as bug tracking, feature requests, task management, and wikis for every project.

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent

Checkmarx One vs. GitHub