Checkmarx One vs GitHub comparison

Read 88 GitHub reviews

2,766 Views
1,116 Comparison Views

100% willing to recommend

Checkmarx One

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 29, 2024

Checkmarx One and GitHub are leading tools in the software development and security industry. While Checkmarx One excels in pricing and support, GitHub's extensive features make it a superior choice for many users.

Features: Checkmarx One offers robust security scanning, detailed vulnerability reporting, and strong focus on security. GitHub provides collaboration tools, integration capabilities, and comprehensive code management features.

Room for Improvement: Checkmarx One needs better integration with third-party tools, improved learning curve, and enhanced extensibility. GitHub requires stronger security features, more flexible pricing plans, and enhanced user support.

Ease of Deployment and Customer Service: Checkmarx One has a straightforward deployment process with strong customer support, while GitHub offers a flexible deployment model but receives mixed reviews on customer service responsiveness and effectiveness.

Pricing and ROI: Checkmarx One is noted for competitive setup costs and favorable ROI due to its focus on security outcomes. GitHub, though more expensive, is valued for its comprehensive features that justify the higher cost for many users.

To learn more, read our detailed Checkmarx One vs. GitHub Report (Updated: October 2024).

Download the complete report

Checkmarx One vs. GitHub

October 2024

Helped 816,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Customer Service

Sentiment score

7.4

Checkmarx One's support is generally rated positively for knowledgeability and quick responses, despite occasional delays and unresolved issues.

Sentiment score

8.3

GitHub's community support is valued for responsiveness, but official support receives mixed reviews on consistency and responsiveness.

No quotes available

For more quotes and insights, download the Checkmarx One report

The technical support from GitHub is generally good, and they communicate effectively.

For more quotes and insights, download the GitHub report

Senior DevOps Engineer at Simplify3x Software Private Limited

Room For Improvement

Sentiment score

4.7

Checkmarx One needs better accuracy, language support, integration, flexibility, UI customization, documentation, dynamic testing, and API security features.

Sentiment score

6.9

GitHub users seek enhanced integrations, security, user interface, DevOps, AI, search, navigation, project management, reporting, and compliance features.

No quotes available

For more quotes and insights, download the Checkmarx One report

I would like to see some AI functionality included in GitHub, similar to the features seen in GitLab, to enhance productivity.

For more quotes and insights, download the GitHub report

Senior DevOps Engineer at Simplify3x Software Private Limited

Scalability Issues

Sentiment score

7.3

Checkmarx One is favored for its scalability and efficiency, though licensing and resource challenges are sometimes noted.

Sentiment score

6.8

GitHub efficiently scales for small to large teams, managing thousands of developers, extensive code, and complex deployments seamlessly.

No quotes available

For more quotes and insights, download the Checkmarx One report

No quotes available

For more quotes and insights, download the GitHub report

Setup Cost

Sentiment score

6.4

Checkmarx One is costly but valued for its robust security, despite complexity in setup and licensing options.

Sentiment score

6.4

Enterprise users find GitHub cost-effective despite challenging license management and tier-based pricing, with extra support incurring additional charges.

No quotes available

For more quotes and insights, download the Checkmarx One report

No quotes available

For more quotes and insights, download the GitHub report

Stability Issues

Sentiment score

7.2

Checkmarx One is stable for most, but large codebase handling can cause crashes, memory issues, and configuration dependence.

Sentiment score

8.7

GitHub is stable and reliable, effectively managing workloads with few issues, praised for high availability and suitability for companies.

No quotes available

For more quotes and insights, download the Checkmarx One report

It provides a reliable environment for code management.

For more quotes and insights, download the GitHub report

Senior DevOps Engineer at Simplify3x Software Private Limited

Valuable Features

Sentiment score

8.4

Checkmarx One enhances secure coding with user-friendly interface, automation, and multi-language support, making it ideal for developers.

Sentiment score

8.7

GitHub provides advanced code management, collaboration, and security features, integrating seamlessly with tools to support development needs efficiently.

No quotes available

For more quotes and insights, download the Checkmarx One report

GitHub Actions allow for creating multiple jobs that run in different stages such as build, test, and deploy, which enable better visibility and control over the deployment pipeline.

For more quotes and insights, download the GitHub report

Senior DevOps Engineer at Simplify3x Software Private Limited

Categories and Ranking

Checkmarx One

Ranking in Application Security Tools

3rd

Average Rating

7.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (3rd), Vulnerability Management (16th), Static Code Analysis (2nd), API Security (2nd), DevSecOps (2nd), Risk-Based Vulnerability Management (5th)

GitHub

Ranking in Application Security Tools

7th

Average Rating

8.8

Reviews Sentiment

7.6

Number of Reviews

Ranking in other categories

Version Control (3rd)

Mindshare comparison

As of November 2024, in the Application Security Tools category, the mindshare of Checkmarx One is 12.9%, down from 15.0% compared to the previous year. The mindshare of GitHub is 0.9%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Provides good security analysis and security identification within the source code

We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.

Read full review

AjayKrishna

Senior Software Engineer at a transportation company with 10,001+ employees

Reduces project delivery times and costs

I think one area where GitHub could improve is its search and navigation functionality within repositories. For example, we use IDEs like IntelliJ or Visual Studio Code when developing code. These IDEs allow us to easily navigate from one piece of code to another file where a method is being called. It would be really helpful if the solution could add this navigation feature. It would allow us to move from one class file to another more easily, helping us search quicker and follow the code flow completely within GitHub. This would be more convenient than having to import the code into our local IDE to look at the code flow and navigate through it. Adding this kind of IDE-like navigation within the tool would make the user experience more seamless and efficient.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

816,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

15%

Manufacturing Company

10%

Government

Manufacturing Company

13%

Computer Software Company

12%

Financial Services Firm

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

What do you like most about GitHub?

The control is the most valuable feature as developers can work on a single code.

What is your experience regarding pricing and costs for GitHub?

I have not paid for GitHub as I use the free version for personal projects. Organizations may take separate servers from GitHub based on their needs, yet I am unaware of the pricing details.

What needs improvement with GitHub?

GitHub could improve in resolving conflicts when multiple developers modify the same line of code. Introducing a feature to manage and resolve conflicts directly within the application rather than ...

SonarQube Server (formerly SonarQube) vs Checkmarx One

Comparisons

Compared 49% of the time

Veracode vs Checkmarx One

Compared 13% of the time

Fortify on Demand vs Checkmarx One

Compared 6% of the time

Coverity vs Checkmarx One

Compared 4% of the time

Snyk vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Snyk vs GitHub

Compared 18% of the time

Fortify on Demand vs GitHub

Compared 18% of the time

AWS CodeCommit vs GitHub

Compared 14% of the time

Bitbucket vs GitHub

Compared 12% of the time

Atlassian SourceTree vs GitHub

Compared 6% of the time

More GitHub Competitors

Product Reports

Download Checkmarx One product report

Checkmarx One

November 2024

Download GitHub product report

November 2024

Learn More

Checkmarx

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

GitHub is a web-based Git repository hosting service. It offers all of the distributed revision control and source code management (SCM) functionality of Git as well as adding its own features. Unlike Git, which is strictly a command-line tool, GitHub provides a Web-based graphical interface and desktop as well as mobile integration. It also provides access control and several collaboration features such as bug tracking, feature requests, task management, and wikis for every project.

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent