Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs Spirent CyberFlood comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024
 

Categories and Ranking

Checkmarx One
Ranking in Application Security Tools
3rd
Ranking in Static Application Security Testing (SAST)
3rd
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
70
Ranking in other categories
Vulnerability Management (20th), Static Code Analysis (2nd), API Security (2nd), DevSecOps (2nd), Risk-Based Vulnerability Management (6th)
Spirent CyberFlood
Ranking in Application Security Tools
35th
Ranking in Static Application Security Testing (SAST)
32nd
Average Rating
8.4
Reviews Sentiment
6.4
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of December 2024, in the Application Security Tools category, the mindshare of Checkmarx One is 12.5%, down from 15.2% compared to the previous year. The mindshare of Spirent CyberFlood is 0.1%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Rohit Kesharwani - PeerSpot reviewer
Provides good security analysis and security identification within the source code
We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.
Haider Jarral - PeerSpot reviewer
I like the solution's flexibility
Sometimes, when you configure parameters the hardware can't run, it will get stuck at those points without telling you what happened. It would be helpful if the error reporting provided more details about why the test setting is not running. It would be nice if there were a space in the hardware module for you to add some external hardware for more rigorous testing.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The main benefit to using this solution is that we find vulnerabilities in our software before the development cycle is complete."
"The SAST component was absolutely 100% stable."
"It can integrate very well with DAST solutions. So both of them are combined into an integrated solution for customers running application security."
"The feature that I have found most valuable is that its number of false positives is less than the other security application platforms. Its ease of use is another good feature. It also supports most of the languages."
"Overall, the ability to find vulnerabilities in the code is better than the tool that we were using before."
"The solution communicates where to fix the issue for the purpose of less iterations."
"Apart from software scanning, software composition scanning is valuable."
"Both automatic and manual code review (CxQL) are valuable."
"CyberFlood is flexible."
"CyberFlood's best features are its user-friendliness and scheduling function."
"Our customers use it to check for unauthorized file transfer."
"The feature I find most valuable is the traffic generator."
 

Cons

"It would be really helpful if the level of confidence was included, with respect to identified issues."
"There is nothing particular that I don't like in this solution. It can have more integrations, but the integrations that we would like are in the roadmap anyway, and they just need to deliver the roadmap. What I like about the roadmap is that it is going where it needs to go. If I were to look at the roadmap, there is nothing that is jumping out there that says to me, "Yeah. I'd like something else on the roadmap." What they're looking to deliver is what I would expect and forecast them to deliver."
"Creating and editing custom rules in Checkmarx is difficult because the license for the editor comes at an additional cost, and there is a steep learning curve."
"Checkmarx needs improvement in its Dynamic Application Security Testing (DAST) and API security features."
"Checkmarx could be improved with more integration with third-party software."
"If it is a very large code base then we have a problem where we cannot scan it."
"It is an expensive solution."
"Meta data is always needed."
"CyberFlood's accessibility and support for multiple browsers could be better."
"I would also like to see updates on a more frequent schedule."
"The solution needs more ports, more speed, and more gigabytes."
"Sometimes, when you configure parameters the hardware can't run, it will get stuck at those points without telling you what happened. It would be helpful if the error reporting provided more details about why the test setting is not running. It would be nice if there were a space in the hardware module for you to add some external hardware for more rigorous testing."
 

Pricing and Cost Advice

"It is the right price for quality delivery."
"If you want more, you have to pay more. You have to pay for additional modules or functionalities."
"We have purchased an annual license to use this solution. The price is reasonable."
"Be cautious of the one-year subscription date. Once it expires, your price will go up."
"It's relatively expensive."
"Checkmarx is comparatively costlier than other products, which is why some of the customers feel reluctant to go for it, though performance-wise, Checkmarx can compete with other products."
"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."
"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."
"CyberFlood is reasonably priced."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
824,095 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
22%
Computer Software Company
15%
Manufacturing Company
10%
Government
6%
Computer Software Company
22%
Manufacturing Company
12%
Financial Services Firm
10%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What needs improvement with Spirent CyberFlood?
Sometimes, when you configure parameters the hardware can't run, it will get stuck at those points without telling you what happened. It would be helpful if the error reporting provided more detail...
What is your primary use case for Spirent CyberFlood?
I use CyberFlood to generate SSL traffic for cybersecurity testing.
 

Also Known As

No data available
CyberFlood Virtual, Spirent Mu Dynamics Application Security Testing, Mu Dynamics Application Security Testing
 

Learn More

 

Overview

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Digicel
Find out what your peers are saying about Checkmarx One vs. Spirent CyberFlood and other solutions. Updated: December 2024.
824,095 professionals have used our research since 2012.