Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs Snyk comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 11, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.5
Cortex Cloud by Palo Alto Networks enhances response time and ROI with discounts and features, beneficial during critical periods.
Sentiment score
5.6
Checkmarx One enhances security by automating vulnerability detection, reducing costs, and improving development efficiency through CI/CD integration.
Sentiment score
6.2
Snyk enhances efficiency and security, reducing vulnerabilities and costs, improving productivity, and offering immediate value to developers.
The solution provides a good ROI, especially for regular customers, offering discounts for three-year licenses.
Senior Cybersecurity Consultant at Ernst & Young
Overall, between the fast scanning, automation, automatic reporting, and easy detection, it has reduced manual effort enough that we did not need an extra reviewer, even as our codebase or team size grew.
Senior GenAI Engineer at a tech vendor with 10,001+ employees
Based on my interactions with the clients, I can tell that there is a return on investment because if something is not profitable and it's not helping to save costs or vulnerabilities, clients wouldn't come back to renew their license year after year.
Chief Technology Officer at 3CS Aquarah Limited
I can see that Snyk saves the costs of hiring security developers for vulnerability scanning and security checks, as that responsibility is now managed by Snyk.
Software Engineer at a computer software company with 11-50 employees
 

Customer Service

Sentiment score
6.5
Cortex Cloud offers efficient global support, expert troubleshooting, and user-friendly dashboards, driving strategic adoption despite its cost.
Sentiment score
7.0
Checkmarx One support is praised for quick responses and knowledgeable staff, despite some reporting delays in technical support.
Sentiment score
7.5
Snyk offers responsive support with proactive communication, various channels, and valued customer success managers, though escalation speed needs improvement.
If I make it a high priority, they have resolved one query within 20 minutes.
Assistant Security Architect at Cloudnomics
If local Indian support cannot resolve an issue, global tech support aligns promptly within the agreed SLA.
Senior Cybersecurity Consultant at Ernst & Young
Fast response times and knowledgeable staff who understand the intricacies of the system.
Sr. Cloud Security Architect at a tech services company with 11-50 employees
If you raise a support case with Checkmarx, it is handled smoothly.
ML Engineer - Specialist at a tech vendor with 10,001+ employees
The customer support team is amazing and they provide on-phone call, email support, and on-website support.
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution
I have relied on Checkmarx One customer support hundreds of times for several things, and Checkmarx One support is very proactive and very responsive.
Chief Technology Officer at 3CS Aquarah Limited
Our long-standing association has ensured smooth communication, resulting in favorable support experiences and satisfactory issue resolution.
CEO at a computer software company with 10,001+ employees
Their response time aligns with their SLA commitments.
Information Security Strategy at a insurance company with 10,001+ employees
We could understand the implementation of the product and other features without the need for human interaction.
Senior DevSecOps at V8
 

Scalability Issues

Sentiment score
4.3
Cortex Cloud offers scalability, efficient response, and integration, maintaining consistent pricing, rated highly for organizations of all sizes.
Sentiment score
7.0
Checkmarx One is scalable for large workloads, but some users report challenges with configurations and licensing requirements.
Sentiment score
7.3
Snyk is scalable, integrating easily for large user bases, supporting enterprise needs, and praised for adaptability and integration.
For stability, scalability, mean time to response, and potential incident investigation improvements, I would give it a nine or probably even a ten.
Business Development Team Lead at a tech vendor with 201-500 employees
Onboarding endpoints and assets on Cortex Cloud by Palo Alto Networks is very easy.
Assistant Security Architect at Cloudnomics
Approximately four billion lines of code are being scanned monthly.
Cyber Security Expert at Nestle
Since it is cloud-based, the infrastructure and PaaS, IaaS, and SaaS are taken care of by the cloud marketplace.
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution
Checkmarx One's scalability has changed my organization because the strong collaboration between the development and security team helps us to do things much faster.
Senior GenAI Engineer at a tech vendor with 10,001+ employees
Snyk allows for scaling across large organizations, accommodating tens of thousands of applications and over 60,000 repositories.
CEO at a computer software company with 10,001+ employees
Snyk is very scalable and can handle my organization's growth and changing needs.
Software Engineer at a computer software company with 11-50 employees
Till now, we did not face any scaling issues and I did not hear of any.
Senior Software Engineering Manager at a financial services firm with 10,001+ employees
 

Stability Issues

Sentiment score
7.7
Cortex Cloud by Palo Alto Networks is reliable, stable, with quick performance, no latency, and effective real-time attack prevention.
Sentiment score
7.3
Checkmarx One is generally stable but faces issues with large codebases, memory use, and session inconsistencies.
Sentiment score
7.8
Snyk is reliable with minimal downtime, but users face occasional documentation issues and challenges in complex environments.
My impression of Cloud Runtime Security in stopping attacks in real-time is that I have never had an issue where it has let something through, causing an outage or concerns to the customer.
Business Development Team Lead at a tech vendor with 201-500 employees
However, now in Cortex Cloud, I have not seen any lag or buffer.
Assistant Security Architect at Cloudnomics
I would rate the stability of this solution a nine on a scale of 1 to 10 where one is low stability and 10 is high.
Specialist Leader at Deloitte
Checkmarx One is often down when the cloud provider experiences issues.
Cyber Security Expert at Nestle
 

Room For Improvement

Cortex Cloud requires a user-friendly interface, cost efficiency, enhanced features, and skilled personnel to overcome operational challenges.
Checkmarx One needs enhancements in accuracy, speed, integration, UI, support, pricing, and features for enterprise usability.
Snyk users seek enhanced language support, plugin integration, vulnerability visibility, and improvements in UI, reporting, and training features.
Regarding the generative AI security tool, I know for sure it's Agentic.
Cybersecurity Analyst at a tech services company with 11-50 employees
The solution is quite premium in cost compared to alternatives such as Wiz.
Sr. Cloud Security Architect at a tech services company with 11-50 employees
There is not a clear MSP model compared to other vendors such as CrowdStrike.
Business Development Manager For Palo Alto Networks at a tech services company with 1,001-5,000 employees
Integration into the IDE being used would be beneficial so that code does not need to be uploaded to the website and an IDE-friendly report could be generated.
Senior Software Engineer at a financial services firm with 10,001+ employees
It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from.
Specialist Leader at Deloitte
If you can improve the speed optimization, it takes around 30 to 40 minutes for checking a build. If you can make it within five minutes or 10 minutes, that would be great.
Senior Software Engineer at a tech vendor with 10,001+ employees
It lacks the ability to select branches on its Web UI, forcing users to rely on CLI or CI/CD for that functionality.
CEO at a computer software company with 10,001+ employees
The inclusion of AI to remove false positives would be beneficial.
Director at Marsh
As we are moving toward GenAI, we expect Snyk to leverage AI features to improve code scanning findings.
Information Security Strategy at a insurance company with 10,001+ employees
 

Setup Cost

Checkmarx One is often costly but provides quality and security, with costs varying by team size and selected modules.
Snyk provides valuable, flexible pricing and robust features for enterprises, often considered affordable compared to Veracode and Black Duck.
The solution is costly, with high-end capabilities suitable for enterprises.
Senior Cybersecurity Consultant at Ernst & Young
Today, it is smart and easy to calculate the licenses.
Cloud Security Manager at T-Systems International GmbH
For a small team under 50 developers, normal expenses come under 30 to 60K.
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution
Due to the number of years I've implemented Checkmarx One, there are rebates and discounts from the OEM which makes it a lot more profitable.
Chief Technology Officer at 3CS Aquarah Limited
The pricing should be reasonable, matching what we are paying for.
Senior GenAI Engineer at a tech vendor with 10,001+ employees
Snyk is recognized as the cheapest option we have evaluated.
CEO at a computer software company with 10,001+ employees
After negotiations, we received a special package with a good price point.
Information Security Strategy at a insurance company with 10,001+ employees
Snyk is less expensive.
Senior DevSecOps at V8
 

Valuable Features

Cortex Cloud enhances security with AI-driven automation, reducing manual tasks and improving threat management for lean enterprise teams.
Checkmarx One offers comprehensive vulnerability scanning, seamless CI/CD integration, and enhances productivity with ease of use and automation.
Snyk enhances security with AI-powered vulnerability scanning, seamless integration, and efficient management across various tools and programming languages.
AI/ML aids in anticipating remediation for misconfigurations and vulnerabilities, and automatic remediation can be easily configured.
Senior Cybersecurity Consultant at Ernst & Young
Cortex Cloud by Palo Alto Networks has reduced the time spent on incident investigations, and if I had to estimate, I would say it has cut our investigation time in half.
Sr. Compliance Analyst at a computer software company with 51-200 employees
This simplifies the management of shared responsibility among different people and entities, allowing you to use one single tool instead of having dozens of different tools to orchestrate and integrate.
Business Development Manager For Palo Alto Networks at a tech services company with 1,001-5,000 employees
Since replacing the previous tool, SAST and SCA scans are conducted in a couple of minutes instead of hours or days.
Cyber Security Expert at Nestle
The best features Checkmarx One offers, over the past years, include broad language and technical support that Checkmarx provides, covering most languages.
ML Engineer - Specialist at a tech vendor with 10,001+ employees
Checkmarx One has positively impacted our organization as we tend to find vulnerabilities very early in the development cycle.
Product security engineer at a tech vendor with 10,001+ employees
Our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.
CEO at a computer software company with 10,001+ employees
Snyk helps detect vulnerabilities before code moves to production, allowing for integration with DevOps and providing a shift-left advantage by identifying and fixing bugs before deployment.
Director at Marsh
Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients.
Software Engineer at a computer software company with 11-50 employees
 

Categories and Ranking

Cortex Cloud by Palo Alto N...
Sponsored
Ranking in Vulnerability Management
27th
Ranking in Application Security Posture Management (ASPM)
6th
Average Rating
8.6
Reviews Sentiment
5.5
Number of Reviews
10
Ranking in other categories
Cloud Workload Protection Platforms (CWPP) (13th), Cloud Security Posture Management (CSPM) (18th), Cloud-Native Application Protection Platforms (CNAPP) (12th), Data Security Posture Management (DSPM) (12th), Software Supply Chain Security (7th), Cloud Infrastructure Entitlement Management (CIEM) (6th), Cloud Detection and Response (CDR) (4th)
Checkmarx One
Ranking in Vulnerability Management
17th
Ranking in Application Security Posture Management (ASPM)
3rd
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
81
Ranking in other categories
Application Security Tools (2nd), Static Application Security Testing (SAST) (3rd), Container Security (15th), Static Code Analysis (2nd), API Security (3rd), Dynamic Application Security Testing (DAST) (2nd), DevSecOps (3rd), Risk-Based Vulnerability Management (8th), AI Security (2nd)
Snyk
Ranking in Vulnerability Management
15th
Ranking in Application Security Posture Management (ASPM)
2nd
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
51
Ranking in other categories
Application Performance Monitoring (APM) and Observability (16th), Application Security Tools (6th), Static Application Security Testing (SAST) (6th), GRC (4th), Cloud Management (10th), Container Security (5th), Software Composition Analysis (SCA) (1st), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (12th), DevSecOps (2nd), AI Security (11th)
 

Featured Reviews

AP
Assistant Security Architect at Cloudnomics
Automated investigations have cut incident response time and now improve compliance monitoring
As per my experience with Cortex Cloud by Palo Alto Networks, the UI could be simpler. There are few features which are very hidden, such as those in software bill of materials and compliance policies. Palo Alto Networks could make the UI a bit easier to navigate. Apart from this, all other things are good. Detection and response features are good, and the visibility, especially in the CI/CD pipeline, is also very good. Infrastructure as Code visibility is good. I don't think there is much scope of improvement regarding detection and response. However, they can improve operational efficiency and the UI. I feel that some features which are hidden could be shown on the home page or front page, which would make a significant difference.
Shahzad Shahzad - PeerSpot reviewer
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution
Enable secure development workflows while identifying opportunities for faster scans and improved AI guidance
Checkmarx One is a very strong platform, but there are several areas where it can improve to support modern DevSecOps workflows even better. For example, better real-time developer guidance is needed. The IDE plugin should offer richer AI-powered auto-fixes similar to SNYK Code or GitHub Copilot Security, as current guidance is good but not deeply contextual for large-scale enterprise codebases. This matters because it reduces developer friction and accelerates shift-left adoption. More transparency control over the correlation engines is another need. The correlation engine is powerful but not fully transparent. Users want to understand why vulnerabilities were correlated or de-prioritized, which helps AppSec teams trust the prioritization logic. Faster SAST scan and more language coverage is needed since SAST scan can still be slow for very large mono-repos and there is limited deep support for new language frameworks like Rust and Go, along with advanced coverage for serverless-specific frameworks. This matters because large organizations want sub-minute scans in CI/CD as cloud-native ecosystems evolve fast. A strong API security module is another area for enhancement. API security scanning could be improved with active testing, API discovery, full Swagger, OpenAPI, drift detection, and schema-based fuzzing. This is important as API attacks are one of the biggest AppSec risks in 2025. Checkmarx One is strong, but I see a few areas for improvement including faster SAST scanning for large mono-repos, deeper language framework support, more transparent correlation logic, and stronger API security that includes discovery and runtime context. The IDE plugin could offer more AI-assisted fixes, and the SBOM lifecycle tracking can evolve further. Enhancing integration with SIEM and SOAR would also make enterprise adoption smoother, and these improvements would help developers and AppSec teams move faster with more accuracy.
Abhishek-Goyal - PeerSpot reviewer
Software Engineer at a computer software company with 11-50 employees
Improves security posture by actively reducing critical vulnerabilities and guiding remediation
Snyk's main features include open-source vulnerability scanning, code security, container security, infrastructure as code security, risk-based prioritization, development-first integration, continuous monitoring and alerting, automation, and remediation. The best features I appreciate are the vulnerability checking, vulnerability scanning, and code security capabilities, as Snyk scans all open-source dependencies for known vulnerabilities and helps with license compliance for open-source components. Snyk integrates into IDEs, allowing issues to be caught as they appear in the code dynamically and prioritizes risk while providing remediation advice. Snyk provides actionable remediation advice on where vulnerabilities can exist and where code security is compromised, automatically scanning everything and providing timely alerts. Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients. Snyk has helped reduce vulnerabilities significantly. Initially, the repository had 17 to 31 critical and high vulnerabilities, but Snyk has helped manage them down to just five vulnerabilities, which are now lower and not high or critical.
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
884,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
9%
Manufacturing Company
8%
Performing Arts
8%
Computer Software Company
7%
Financial Services Firm
17%
Manufacturing Company
10%
Computer Software Company
9%
Government
6%
Financial Services Firm
14%
Computer Software Company
11%
Manufacturing Company
10%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise4
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise9
Large Enterprise46
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise9
Large Enterprise22
 

Questions from the Community

What is your experience regarding pricing and costs for Cortex Cloud by Palo Alto Networks?
The solution is costly, with high-end capabilities suitable for enterprises. It is less affordable for startups or sm...
What needs improvement with Cortex Cloud by Palo Alto Networks?
As per my experience with Cortex Cloud by Palo Alto Networks, the UI could be simpler. There are few features which a...
What is your primary use case for Cortex Cloud by Palo Alto Networks?
My use case for Cortex Cloud by Palo Alto Networks is for CSPM, application security, and IAM. I use it for checking ...
What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as ...
What is your experience regarding pricing and costs for Checkmarx?
Checkmarx One is a premium solution, so budget accordingly. Make sure you understand how licensing scales with additi...
What needs improvement with Checkmarx?
One way Checkmarx One could be improved is if it could automatically run scans every month after implementation. If i...
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to...
What do you like most about Snyk?
The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilit...
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false posi...
 

Also Known As

No data available
No data available
Fugue, Snyk AppRisk
 

Overview

 

Sample Customers

Information Not Available
YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about Checkmarx One vs. Snyk and other solutions. Updated: March 2026.
884,706 professionals have used our research since 2012.