Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs PyCharm comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 19, 2024
 

Categories and Ranking

Checkmarx One
Ranking in Static Code Analysis
2nd
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
70
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (20th), API Security (2nd), DevSecOps (2nd), Risk-Based Vulnerability Management (6th)
PyCharm
Ranking in Static Code Analysis
5th
Average Rating
8.8
Reviews Sentiment
7.1
Number of Reviews
10
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Rohit Kesharwani - PeerSpot reviewer
Provides good security analysis and security identification within the source code
We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.
Srujan Panuganti - PeerSpot reviewer
Convenient to use and surely increases the effectiveness of software development
The solution does not support some features of OpenCV even though it is part of a PyCharm package. Open CV is used to develop software that involves computer vision tasks. It seems the solution is not fully updated to use the latest PyCharm packages. I would like even more support toward robotics-related software tools. For example, support of ROS, ROS 1, and ROS 2 development would ensure that I continue to use the solution.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features of Checkmarx are difficult to pinpoint because of the way the functionalities and the features are intertwined, it's difficult to say which part of them I prefer most. You initiate the scan, you have a scan, you have the review set, and reporting, they all work together as one whole process. It's not like accounting software, where you have the different features, et cetera."
"Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%."
"The setup is fairly easy. We didn't struggle with the process at all."
"The most valuable feature is the simple user interface."
"The SAST component was absolutely 100% stable."
"It gives the proper code flow of vulnerabilities and the number of occurrences."
"We were using HPE Security Fortify to scan code for security vulnerabilities, but it can scan only after a successful compile. If the code has dependencies or build errors, the scan fails. With Checkmarx, pre-compile scanning is seamless. This allows us to scan more code."
"Less false positive errors as compared to any other solution."
"The product's IDE feature is quite user-friendly."
"It is an excellent, fully integrated IDE with smart code analysis capability and a built-in debugger. It is a fantastic tool."
"The solution has a nice environment and extensions that make it easy to develop software."
"The integrated code structure makes coding more organized and manageable compared to using Python alone."
"The best feature of PyCharm is that it gives you hints whenever it detects any issues while you are coding. This is important because it helps us code faster and without any errors."
"The solution has a great debugging feature."
"Good syntax highlighting and very it's very customizable."
"The automated package installation is helpful. I like the code highlighting features. A huge library of plugins is available, including AI coding tools, though I don't use those myself. The debugging tools are good, showing errors and problem lines."
 

Cons

"Updating and debugging of queries is not very convenient."
"They should make it more container-friendly and optimized for the CI pipeline. They should make it a little less heavy. Right now, it requires a SQL database, and the way the tool works is that it has an engine and then it has an analysis database in which it stores the information. So, it is pretty heavy from that perspective because you have to have a full SQL Server. They're working on something called Checkmarx Light, which is a slim-down version. They haven't released it yet, but that's what we need. There should be something a little more slimmed down that can just run the analysis and output the results in a format that's readable as opposed to having a full, really big, and thick deployment with a full database server."
"The integration could improve by including, for example, DevSecOps."
"I would like to see the DAST solution in the future."
"Checkmarx could improve by reducing the price."
"The pricing can get a bit expensive, depending on the company's size."
"It would be really helpful if the level of confidence was included, with respect to identified issues."
"We want to have a holistic view of the portfolio-level dashboard and not just an individual technical project level."
"Customizing the tool can make it complicated."
"Notebooks in PyCharm is not as intuitive as it could be."
"PyCharm's use of system resources can get pretty heavy. Loading, in particular, takes longer than I would like and I think they should optimize it so that it's a bit lighter on the system."
"The user interface and overall user experience could be more intuitive to make it easier for users to navigate and utilize the software effectively."
"The solution is heavy because running it on laptops consumes a lot of memory and power. Typically, a laptop battery might last about eight to nine hours, but with the tool running, it reduces to two hours or one and a half hours at most. It is designed to handle large projects and heavy tasks, making it resource-intensive. For smaller projects, use IDEs like Visual Studio Code."
"There is room for improvement in memory usage. It uses too much memory. It can get a bit heavy, especially when you have too many open files and the system becomes very slow."
"There should be support for the RUST plugin in the Community edition for debugging."
"The navigation can be better."
 

Pricing and Cost Advice

"Be cautious of the one-year subscription date. Once it expires, your price will go up."
"The solution's price is high and you pay based on the number of users."
"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."
"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."
"I believe pricing is better compared to other commercial tools."
"The interface used to create custom rules comes at an additional cost."
"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."
"Most of my customers opted for a perpetual license. They prefer to pay the highest amount up front for the perpetual license and then pay for additional support annually."
"The community edition is free, which is good."
"The community edition is free and the professional edition has a licensing fee."
"I use the free community version, so I'm saving money there."
"The price is reasonable."
"They have a free Community edition, and they also have a licensed version. They definitely have an annual license. They probably also have a monthly license. Its pricing is good and reasonable. It is a little bit more expensive than the others, but it is well worth it. I would rate it a four out of five in terms of pricing."
"I don't have much info on the pricing, but I would say it is somewhat competitive."
report
Use our free recommendation engine to learn which Static Code Analysis solutions are best for your needs.
824,053 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
22%
Computer Software Company
15%
Manufacturing Company
10%
Government
6%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What do you like most about PyCharm?
The integrated code structure makes coding more organized and manageable compared to using Python alone.
What needs improvement with PyCharm?
Customizing the tool can make it complicated.
What is your primary use case for PyCharm?
I use PyCharm as my main IDE for Python coding.
 

Comparisons

No data available
 

Learn More

Video not available
 

Overview

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Information Not Available
Find out what your peers are saying about Checkmarx One vs. PyCharm and other solutions. Updated: December 2024.
824,053 professionals have used our research since 2012.