Checkmarx One vs Polyspace Code Prover comparison

Checkmarx and MathWorks are both solutions in the Application Security Tools category. Checkmarx is ranked #3 with an average rating of 7.8, while MathWorks is ranked #19 with an average rating of 7.8. Checkmarx holds a 10.7% mindshare in AS, compared to MathWorks’s 1.2% mindshare. Additionally, 87% of Checkmarx users are willing to recommend the solution, compared to 83% of MathWorks users who would recommend it.

Checkmarx One

Read 70 Checkmarx One reviews

21,297 Views
14,284 Comparison Views

87% willing to recommend

Polyspace Code Prover

Read 6 Polyspace Code Prover reviews

1,615 Views
1,024 Comparison Views

83% willing to recommend

Checkmarx One

Polyspace Code Prover

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Checkmarx One and Polyspace Code Prover deliver robust solutions for software security and verification. Polyspace Code Prover slightly edges out in advanced static code analysis, though Checkmarx One is favored for affordability and support services.

Features: Checkmarx One integrates well and offers comprehensive security scanning, advantageous for DevOps teams. Polyspace Code Prover excels in sophisticated static analysis and proving code correctness without execution while also providing precise identification of coding flaws.

Room for Improvement: Checkmarx One could enhance its scanning speed and the navigation intuitiveness of its tools. Polyspace Code Prover could improve scalability and parallel processing capabilities. Checkmarx needs quicker scanning, contrasting with Polyspace's scalability needs.

Ease of Deployment and Customer Service: Checkmarx One ensures straightforward deployment and reliable customer service, aiding smoother integration. Polyspace Code Prover demands more setup time, but offers responsive and knowledgeable support. Checkmarx offers seamless initial experiences, while Polyspace requires significant setup effort but maintains high support quality.

Pricing and ROI: Checkmarx One is seen as budget-friendly, offering better pricing options for users seeking value. Polyspace Code Prover’s advanced features justify its higher setup costs, delivering long-term cost-effectiveness for thorough code analysis.

To learn more, read our detailed Checkmarx One vs. Polyspace Code Prover Report (Updated: March 2025).

Buyer's Guide

Checkmarx One vs. Polyspace Code Prover

March 2025

Download the complete report

Helped 845,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Checkmarx One

Ranking in Application Security Tools

3rd

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (3rd), Vulnerability Management (21st), Static Code Analysis (2nd), API Security (3rd), DevSecOps (2nd), Risk-Based Vulnerability Management (8th)

Polyspace Code Prover

Ranking in Application Security Tools

19th

Average Rating

7.8

Reviews Sentiment

8.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of April 2025, in the Application Security Tools category, the mindshare of Checkmarx One is 10.7%, down from 15.1% compared to the previous year. The mindshare of Polyspace Code Prover is 1.2%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Provides good security analysis and security identification within the source code

We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.

Read full review

Aman Singla

Senior Engineer at a manufacturing company with 10,001+ employees

Easy to setup with reliable outputs and good reliability

It is easy to set up the solution. We can actually modify it using script also. It's pretty easy to link it with our in-house toolchain with the Polyspace configuration settings. If we have small amounts of data, it's quick and you can set it up within ten to 15 minutes. However, depending on the size of the data and the variables, it could take a while since you have to provide a range for all variables. If you have, for example, 500 variables, you'll be configuring a lot. However, the input extremes can be fed using an Excel file or some other format.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is a stable product."

"The most valuable features of Checkmarx are its integration with multiple SCM solutions and CICD tools, its ability to scale according to user licenses, and the quick scanning process."

"Checkmarx pinpoints the vulnerability in the code and also presents the flow of malicious input across the application."

"The most valuable feature is the simple user interface."

"The solution is always updating to continuously add items that create a level of safety from vulnerabilities. It's one of the key features they provide that's an excellent selling point. They're always ahead of the game when it comes to finding any vulnerabilities within the database."

"It's not an obstacle for developers. They can easily write their code and make it more secure with Checkmarx."

"It allows for SAST scanning of uncompiled code. Further, it natively integrates with all key repos formats (Git, TFS, SVN, Perforce, etc)."

"It gives the proper code flow of vulnerabilities and the number of occurrences."

More Checkmarx One pros

"The outputs are very reliable."

"Polyspace Code Prover is a very user-friendly tool."

"When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts, and null pointer dereferences."

"The product detects memory corruptions."

"Polyspace Code Prover has made me realize it differs from other static code analysis tools because it runs the code. So it's quite distinct in that aspect."

Cons

"They could work to improve the user interface. Right now, it really is lacking."

"Checkmarx could be improved with more integration with third-party software."

"The cost per user is high and should be reduced."

"Licensing models and Swift language support are the aspects in which this product needs to improve. Swift is a new language, in which major customers require support for lower prices."

"With Checkmarx, normally you need to use one tool for quality and you need to use another tool for security. I understand that Checkmarx is not in the parity space because it's totally different, but they could include some free features or recommendations too."

"I would like to see the tool’s pricing improved."

"The product can be improved by continuing to expand the application languages and frameworks that can be scanned for vulnerabilities. This includes expanded coverage for mobile applications as well as open-source development tools."

"As the solution becomes more complex and feature rich, it takes more time to debug and resolve problems. Feature-wise, we have no complaints, but Checkmarx becomes harder to maintain as the product becomes more complex. When I talk to support, it takes them longer to fix the problem than it used to."

More Checkmarx One cons

"I'd like the data to be taken from any format."

"Using Code Prover on large applications crashes sometimes."

"Automation could be a challenge."

"One of the main disadvantages is the time it takes to initiate the first run."

"The tool has some stability issues."

Pricing and Cost Advice

"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."

"Its price is fair. It is in or around the right spot. Ultimately, if the price is wrong, customers won't commit, but they do tend to commit. It is neither too cheap nor too expensive."

"It is an expensive solution."

"The pricing was not very good. This is just a framework which shouldn’t cost so much."

"It is a good product but a little overpriced."

"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."

"Checkmarx is comparatively costlier than other products, which is why some of the customers feel reluctant to go for it, though performance-wise, Checkmarx can compete with other products."

"Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."

More Checkmarx One pricing and cost advice

"We use the paid version."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

845,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

15%

Manufacturing Company

10%

Government

Manufacturing Company

39%

Computer Software Company

12%

Transportation Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

See all answers

What do you like most about Polyspace Code Prover?

When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts,...

See all answers

What is your experience regarding pricing and costs for Polyspace Code Prover?

We use the paid version.

See all answers

What needs improvement with Polyspace Code Prover?

I'm still trying to use constraints with range propagation, but I can't get it to work properly, and I haven't found any documentation. It require support. There could be an issue with range propag...

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs Checkmarx One

Compared 43% of the time

Veracode vs Checkmarx One

Compared 12% of the time

Fortify on Demand vs Checkmarx One

Compared 6% of the time

Checkmarx SAST vs Checkmarx One

Compared 5% of the time

OWASP Zap vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Coverity vs Polyspace Code Prover

Compared 30% of the time

SonarQube Server (formerly SonarQube) vs Polyspace Code Prover

Compared 26% of the time

Klocwork vs Polyspace Code Prover

Compared 17% of the time

CodeSonar vs Polyspace Code Prover

Compared 9% of the time

Snyk vs Polyspace Code Prover

Compared 2% of the time

More Polyspace Code Prover Competitors

Product Reports

Buyer's Guide

Checkmarx One

March 2025

Download Checkmarx One product report

Buyer's Guide

Polyspace Code Prover

March 2025

Download Polyspace Code Prover product report

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

Polyspace Code Prover is a sound static analysis tool that proves the absence of overflow, divide-by-zero, out-of-bounds array access, and certain other run-time errors in C and C++ source code. It produces results without requiring program execution, code instrumentation, or test cases. Polyspace Code Prover uses semantic analysis and abstract interpretation based on formal methods to verify software interprocedural, control, and data flow behavior. You can use it on handwritten code, generated code, or a combination of the two. Each operation is color-coded to indicate whether it is free of run-time errors, proven to fail, unreachable, or unproven.

MathWorks

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Alenia Aermacchi, CSEE Transport, Delphi Diesel Systems, EADS, Institute for Radiological Protection and Nuclear Safety, Korean Air, KOSTAL, Miracor, NASA Ames Research Center

Buyer's Guide

Checkmarx One vs. Polyspace Code Prover

March 2025

Free Report: Checkmarx One vs. Polyspace Code Prover

Find out what your peers are saying about Checkmarx One vs. Polyspace Code Prover and other solutions. Updated: March 2025.

DOWNLOAD NOW

845,406 professionals have used our research since 2012.

See our Checkmarx One vs. Polyspace Code Prover report.

See our list of best Application Security Tools vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.