Checkmarx One vs SentinelOne Singularity Cloud Security comparison

Checkmarx and SentinelOne are both solutions in the Vulnerability Management category. Checkmarx is ranked #15 with an average rating of 7.8, while SentinelOne is ranked #6 with an average rating of 8.6. Additionally, 86% of Checkmarx users are willing to recommend the solution, compared to 98% of SentinelOne users who would recommend it.

Checkmarx One

Read 69 Checkmarx One reviews

342 Views
304 Comparison Views

86% willing to recommend

SentinelOne Singularity Clo...

Read 88 SentinelOne Singularity Cloud Security reviews

1,737 Views
454 Comparison Views

98% willing to recommend

Checkmarx One

SentinelOne Singularity Clo...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Checkmarx One and SentinelOne Singularity Cloud Security based on real PeerSpot user reviews.

Find out in this report how the two Vulnerability Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Checkmarx One vs. SentinelOne Singularity Cloud Security Report (Updated: September 2024).

Buyer's Guide

Checkmarx One vs. SentinelOne Singularity Cloud Security

September 2024

Download the complete report

Helped 805,335 peers since 2012

Categories and Ranking

Checkmarx One

Ranking in Vulnerability Management

15th

Average Rating

7.6

Number of Reviews

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Static Code Analysis (2nd), API Security (4th), DevSecOps (2nd), Risk-Based Vulnerability Management (5th)

SentinelOne Singularity Clo...

Ranking in Vulnerability Management

6th

Average Rating

8.6

Number of Reviews

Ranking in other categories

Cloud and Data Center Security (5th), Container Security (5th), Cloud Workload Protection Platforms (CWPP) (5th), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Compliance Management (4th)

Featured Reviews

Naveen Hariharan Vijaya

Security Consultant at IBM Thailand

Feb 9, 2024

A highly scalable solution that reduces workloads, saves time, and fixes loopholes and vulnerabilities swiftly

It is very easy for the analyst to have everything in a consolidated single pane of glass. Previously, they ran multiple tools. They used one tool for source code analysis and another for static code review. Then, I manually verified each result. Since we moved to Checkmarx, it has been very easy for the analyst. The tool gives us a shareable report that can be easily shared with management once the product is done. The solution’s performance and the consolidated information it provides are valuable. The platform is completely on the cloud. There are no scalability or connectivity issues. The platform is stable. It can be accessed from anywhere. We used open-source tools before. We had to deploy the tools in the customers' environment to establish the connection between the tools and their product application. Since Checkmarx is a SaaS-based platform, we need only the forward connection from Checkmarx to the tool. The tool handles everything else. We just need a single firewall rule to be enabled on the platform to establish the connection. The deployment is very simple. We need just one rule to forward the web application to Checkmarx. The scanning engine is very good. Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%. The tool has greatly reduced the time and effort our analysts need to do their tasks. It's very useful if we need to perform a short-term project. It is greatly helpful in fixing loopholes and vulnerabilities swiftly.

Read full review

Andre Pasqualette

IT Security Specialist at Tailor Security Tech

Jun 5, 2024

Precise, integrates well, and helps consolidate security solutions

SentinelOne Singularity Complete helps consolidate security solutions. There is a hot discussion about the future of the Security Operations Center. Security Operations Centers generally use SIEM and SOAR, but SentinelOne Singularity XDR can also help there because you can see what is happening not only on the endpoints but also in the network. In other words, you can replace the NDR solution. We also see it going all the way to include all the clouds. This ecosystem is very important to us. In the near future, we see it being used for all the problems related to detection and response in cybersecurity. Our customers use the Ranger functionality. There are two Ranger versions. There is Ranger AD, and there is Ranger Pro. SentinelOne Singularity platform has its own security ecosystem. You do not have the need to buy other solutions. For example, we sell a ZTNA solution. If you have ZTNA, you do not need to buy a PAM solution. You do not need to buy a NAC solution. The ZTNA technology has replaced all the other solutions. It is the same thing with Singularity. If you buy the ecosystem of Singularity, you do not need to buy several different technologies. Ranger can do all the hardware inventory. It can point out the versions of the operating systems and then you can apply patching to update the versions of the operating systems. You can use Ranger in different ways. For a security professional, it is a very powerful tool. It sends you alerts and warnings about possible incidents, but you do not get too many false positives. It is precise. You get real information about an incident. It is very important to have good hygiene of your endpoints and your network. The uptime of the endpoints and networks is very important. SentinelOne Singularity Complete provides a good uptime. Incident identification is very important and having fewer false positives is also important. The SOC staff knows that if SentinelOne Singularity points out an incident, they have to pay attention to the threat. It is a very good checker. SentinelOne Singularity Complete reduces the organization's risk.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of Checkmarx are difficult to pinpoint because of the way the functionalities and the features are intertwined, it's difficult to say which part of them I prefer most. You initiate the scan, you have a scan, you have the review set, and reporting, they all work together as one whole process. It's not like accounting software, where you have the different features, et cetera."

"One of the most valuable features is it is flexible."

"Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%."

"The user interface is modern and nice to use."

"Checkmarx has helped us deliver more secure products. We are able to do static code analysis with the tool before shipping our code to production. When the integration is in the pipeline, this tool gives us early notifications on code fixes."

"The reports are very good because they include details on the code level, and make suggestions about how to fix the problems."

"The user interface is excellent. It's very user friendly."

"The solution has good performance, it is able to compute in 10 to 15 minutes."

More Checkmarx One pros

"Cloud Native Security is a tool that has good monitoring features."

"The most valuable aspect of Singularity Cloud Security is its unified dashboard."

"It is very straightforward. It is not complicated. For the information that it provides, it does a pretty good job."

"Singularity Cloud Workload Security provides us with better security detection and more visibility. It is another resource that we can use to detect vulnerabilities in our company's systems. For example, it can help us detect new file processes that we are not familiar with, which could be used by attackers to exploit our systems. Singularity Cloud Workload Security can also help us diagnose and analyze data to determine whether it is malicious or not. Singularity Cloud Workload Security is like another pair of eyes that can help us protect our systems from cyberattacks."

"The solution helped free other staff to work on other projects or other tasks. We basically just had to do a bunch of upfront configuring. With it, we do not have to spend as much time in the console."

"The user interface is well-designed and easy to navigate."

"The UI is responsive and user-friendly."

"The most valuable feature is the ability to gain deep visibility into the workloads inside containers."

More SentinelOne Singularity Cloud Security pros

Cons

"Checkmarx could be improved with more integration with third-party software."

"When we first ran it on a big project, there wasn't enough memory on the computer. It originally ran with eight gigabytes, and now it runs with 32. The software stopped at some point, and while I don't think it said it ran out of memory, it just said "stopped" and something else. We had to go to the logs and send them to the integrator, and eventually, they found a memory issue in the logs and recommended increasing the memory. We doubled it once, and it didn't seem enough. We doubled it again, and it helped."

"Meta data is always needed."

"You can't use it in the continuous delivery pipeline because the scanning takes too much time."

"I expect application security vendors to cover all aspects of application security, including SAST, DAST, and even mobile application security testing. And it would be much better if they provided an on-premises and cloud option for all these main application security features."

"I really would like to integrate it as a service along with the SAP HANA Cloud Platform. It will then be easy to use it directly as a service."

"Micro-services need to be included in the next release."

"Checkmarx could improve the solution reports and false positives. The false positives could be reduced. For example, we have alerts that are tagged as vulnerabilities but when you drill down they are not."

More Checkmarx One cons

"We repeatedly get alerts on the tool dashboard that we've already solved on our end, but they still appear. That is somewhat irritating."

"In terms of ease of use, initially, it is a bit confusing to navigate around, but once you get used to it, it becomes easier."

"Cloud Native Security's reporting could be better. We are unable to see which images are impacted. Several thousand images have been deployed, so if we can see some application-specific information in the dashboard, we can directly send that report to the team that owns the application. We'd also like the option to download the report from the portal instead of waiting for the report to be sent to our email."

"For vulnerabilities, they are showing CVE ID. The naming convention should be better so that it indicates the container where a vulnerability is present. Currently, they are only showing CVE ID, but the same CVE ID might be present in multiple containers. We would like to have the container name so that we can easily fix the issue."

"We are experiencing problems with Cloud Native Security reporting."

"PingSafe filtering has some areas that cause problems, and to achieve single sign-on functionality, a break-glass feature, which is currently unavailable, is necessary."

"PingSafe can improve by eliminating 100 percent of the false positives."

"Bugs need to be disclosed quickly."

More SentinelOne Singularity Cloud Security cons

Pricing and Cost Advice

"It's relatively expensive."

"It is an expensive solution."

"It is a good product but a little overpriced."

"We have purchased an annual license to use this solution. The price is reasonable."

"The average deal size was usually anywhere between $120K to $175K on an annual basis, which could be divided across 12 months."

"The interface used to create custom rules comes at an additional cost."

"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."

"It is the right price for quality delivery."

More Checkmarx One pricing and cost advice

"I wasn't sure what to expect from the pricing, but I was pleasantly surprised to find that it was a little less than I thought."

"We have an enterprise license. It is affordable. I'm not sure, but I think we pay 150,000 rupees per month."

"PingSafe falls somewhere in the middle price range, neither particularly cheap nor expensive."

"The tool is cost-effective."

"It's not expensive. The product is in its initial growth stages and appears more competitive compared to others. It comes in different variants, and I believe the enterprise version costs around $55 per user per year. I would rate it a five, somewhere fairly moderate."

"I am not involved in the pricing, but it is cost-effective."

"PingSafe is affordable."

"It is not that expensive. There are some tools that are double the cost of PingSafe. It is good on the pricing side."

More SentinelOne Singularity Cloud Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

805,335 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

16%

Manufacturing Company

10%

Government

Computer Software Company

19%

Financial Services Firm

16%

Manufacturing Company

10%

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The tool's pricing is fine.

See all answers

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best features.

See all answers

What is your experience regarding pricing and costs for PingSafe?

I am personally not taking care of the pricing part, but when we moved from CrowdStrike to Singularity Cloud Native Security, there were some savings. The price of CrowdStrike was quite high. Compa...

See all answers

What needs improvement with PingSafe?

They can provide some kind of alert when a new type of risk is there. There can be a specific type of alert showing that a new type of risk has been identified. We use Jira for pushing any changes....

See all answers

Comparisons

SonarQube vs Checkmarx One

Compared 51% of the time

Veracode vs Checkmarx One

Compared 13% of the time

Fortify on Demand vs Checkmarx One

Compared 7% of the time

Coverity vs Checkmarx One

Compared 4% of the time

Snyk vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Wiz vs SentinelOne Singularity Cloud Security

Compared 32% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 25% of the time

AWS GuardDuty vs SentinelOne Singularity Cloud Security

Compared 8% of the time

Orca Security vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Product Reports

Buyer's Guide

Checkmarx One

September 2024

Download Checkmarx One product report

Buyer's Guide

SentinelOne Singularity Cloud Security

August 2024

SentinelOne Singularity Cloud Security report

Download SentinelOne Singularity Cloud Security product report

Also Known As

No data available

PingSafe

Learn More

Checkmarx

SentinelOne

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

SentinelOne Singularity Cloud Security protects cloud workloads, offering advanced threat detection and automated response. It integrates seamlessly with cloud environments and secures containerized applications and virtual machines against vulnerabilities.

SentinelOne Singularity Cloud Security is renowned for its efficiency in mitigating threats in real-time. The platform integrates effortlessly with existing cloud environments, ensuring robust cloud security management with minimal manual intervention. Securing containerized applications and virtual machines, it excels in threat intelligence and endpoint protection. However, improvements are needed in performance during high workload periods, and more integrations with third-party tools and better documentation would be beneficial. Users often find the installation process complex, support response times slow, and the dashboard's navigation unintuitive.

What are the key features of SentinelOne Singularity Cloud Security?

Real-time Threat Detection: Identifies and mitigates threats as they occur.
Automated Response: Automatically responds to threats to minimize impact.
Ease of Deployment: Simple setup process with scalable options.
Machine Learning Insights: AI-driven insights enhance threat prevention.
Seamless Integration: Integrates with cloud environments for unified security management.

What are the primary benefits or ROI to expect from SentinelOne Singularity Cloud Security?

Enhanced Threat Mitigation: Improved security against real-time threats.
Reduced Manual Intervention: Automated processes save time and resources.
Scalability: Easily adapts to growing security requirements.
Centralized Management: Manage security across platforms from a single console.
Advanced Threat Intelligence: Provides in-depth analysis and protection.

In specific industries, SentinelOne Singularity Cloud Security is implemented to safeguard critical data and infrastructure. Organizations in finance, healthcare, and technology depend on its real-time threat detection and automated response to protect sensitive information. Its ability to secure containerized applications and virtual machines is particularly valuable in dynamic environments where rapid scaling is necessary.

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Information Not Available

Buyer's Guide

Checkmarx One vs. SentinelOne Singularity Cloud Security

September 2024

Free Report: Checkmarx One vs. SentinelOne Singularity Cloud Security

Find out what your peers are saying about Checkmarx One vs. SentinelOne Singularity Cloud Security and other solutions. Updated: September 2024.

DOWNLOAD NOW

805,335 professionals have used our research since 2012.

See our Checkmarx One vs. SentinelOne Singularity Cloud Security report.

See our list of best Vulnerability Management vendors.

We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.