Checkmarx One vs Wallarm NG WAF comparison

Checkmarx and Wallarm are both solutions in the API Security category. Checkmarx is ranked #3 with an average rating of 7.8, while Wallarm is ranked #12. Checkmarx holds a 6.1% mindshare in APIS, compared to Wallarm’s 3.7% mindshare. Additionally, 87% of Checkmarx users are willing to recommend the solution, compared to 100% of Wallarm users who would recommend it.

Checkmarx One

Read 70 Checkmarx One reviews

254 Views
203 Comparison Views

87% willing to recommend

Wallarm NG WAF

Read 5 Wallarm NG WAF reviews

230 Views
178 Comparison Views

100% willing to recommend

Checkmarx One

Wallarm NG WAF

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 4, 2025

Checkmarx One and Wallarm NG WAF compete in the cybersecurity domain, with Checkmarx One being favored for pricing and customer support, while Wallarm NG WAF is recognized for its advanced runtime application security features.

Features:Checkmarx One provides source code scanning, seamless vulnerability identification, and robust integration with development environments. Wallarm NG WAF offers strong bot attack protection, real-time threat mitigation, and adaptive security with dynamic updates.

Room for Improvement:Checkmarx One could enhance runtime security capabilities, expand its threat intelligence, and further optimize real-time protection. Wallarm NG WAF may benefit from improved service responsiveness, refined user interface design, and enhanced integration with CI/CD pipelines.

Ease of Deployment and Customer Service:Checkmarx One excels with easy deployment and reliable customer service, offering seamless integration into CI/CD pipelines. Wallarm NG WAF provides flexible deployment across cloud and on-premise environments but faces challenges in service responsiveness.

Pricing and ROI:Checkmarx One is known for its competitive pricing, offering discounts for long-term use, resulting in a strong ROI through effective code security management. Wallarm NG WAF may have higher upfront costs but delivers a strong ROI by reducing long-term risks with its adaptive security measures.

To learn more, read our detailed Checkmarx One vs. Wallarm NG WAF Report (Updated: March 2025).

Buyer's Guide

Checkmarx One vs. Wallarm NG WAF

March 2025

Download the complete report

Helped 845,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Checkmarx One

Ranking in API Security

3rd

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (21st), Static Code Analysis (2nd), DevSecOps (2nd), Risk-Based Vulnerability Management (8th)

Wallarm NG WAF

Ranking in API Security

12th

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Web Application Firewall (WAF) (36th)

Mindshare comparison

As of April 2025, in the API Security category, the mindshare of Checkmarx One is 6.1%, up from 3.5% compared to the previous year. The mindshare of Wallarm NG WAF is 3.7%, down from 4.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

API Security

Featured Reviews

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Provides good security analysis and security identification within the source code

We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.

Read full review

it_user666765

Head of Application Security at a computer software company with 1,001-5,000 employees

Deployment is simple. Machine learning techniques lower the false-positives alerts rate.

The use of a WAF becomes especially relevant in the case of concrete vulnerabilities, such as those uncovered via penetration tests or source code reviews. Even if it were possible to fix the vulnerability in the application promptly and with a reasonable amount of effort, the modified version can generally only be deployed at the next maintenance interval; often 2-4 weeks later (a patch dilemma). For a WAF with whitelisting, vulnerabilities can be fixed promptly (hotfix) so that they cannot be exploited before the next scheduled maintenance. WAFs are especially fast in this aspect, meaning they can collaborate with source code analysis tools, so that detected external vulnerabilities can automatically result in a recommended rule set for the WAF. A WAF is particularly important in securing productive web applications which themselves in turn consist of multiple components and which cannot be quickly changed by the operator; e.g., in the case of poorly documented applications or regarding third-party products without sufficient maintenance cycles. A WAF is the only option for promptly closing external vulnerabilities.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The only thing I like is that Checkmarx does not need to compile."

"The user interface is excellent. It's very user friendly."

"The features and technologies are very good. The flexibility and the roadmap have also been very good. They're at the forefront of delivering the additional capabilities that are required with cloud delivery, etc. Their ability to deliver what customers require and when they require is very important."

"It allows for SAST scanning of uncompiled code. Further, it natively integrates with all key repos formats (Git, TFS, SVN, Perforce, etc)."

"The process of remediating software security vulnerabilities can now be performed (ongoing) as portions of the application are being built in advance of being compiled."

"The most valuable features of Checkmarx are the SCA module and the code-checking module. Additionally, the solutions are explanatory and helpful."

"We use the solution for dynamic application testing."

"The best thing about Checkmarx is the amount of vulnerabilities that it can find compared to other free tools."

More Checkmarx One pros

"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."

Cons

"The lack of ability to review compiled source code. It would then be able to compete with other scanning tools, such as Veracode."

"Updating and debugging of queries is not very convenient."

"The solution's user interface could be improved because it seems outdated."

"Its user interface could be improved and made more friendly."

"The solution sometimes reports a false auditable code or false positive."

"Checkmarx could be improved with more integration with third-party software."

"Checkmarx reports many false positives that we need to manually segregate and mark “Not exploitable”."

"They should make it more container-friendly and optimized for the CI pipeline. They should make it a little less heavy. Right now, it requires a SQL database, and the way the tool works is that it has an engine and then it has an analysis database in which it stores the information. So, it is pretty heavy from that perspective because you have to have a full SQL Server. They're working on something called Checkmarx Light, which is a slim-down version. They haven't released it yet, but that's what we need. There should be something a little more slimmed down that can just run the analysis and output the results in a format that's readable as opposed to having a full, really big, and thick deployment with a full database server."

More Checkmarx One cons

"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."

Pricing and Cost Advice

"The interface used to create custom rules comes at an additional cost."

"The price of Checkmarx could be reduced to match their competitors, it is expensive."

"The solution is costly."

"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."

"The number of users and coverage for languages will have an impact on the cost of the license."

"It's relatively expensive."

"It is the right price for quality delivery."

"The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."

More Checkmarx One pricing and cost advice

"Pricing must be cheaper than the competition and the licensing must be good."

See which vendors are best for you

Use our free recommendation engine to learn which API Security solutions are best for your needs.

See recommendations

845,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

14%

Manufacturing Company

10%

Government

Computer Software Company

19%

Real Estate/Law Firm

Comms Service Provider

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

See all answers

Ask a question

Earn 20 points

Comparisons

SonarQube Server (formerly SonarQube) vs Checkmarx One

Compared 43% of the time

Veracode vs Checkmarx One

Compared 12% of the time

Fortify on Demand vs Checkmarx One

Compared 6% of the time

Checkmarx SAST vs Checkmarx One

Compared 5% of the time

OWASP Zap vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Akamai API Security vs Wallarm NG WAF

Compared 38% of the time

Fastly vs Wallarm NG WAF

Compared 22% of the time

F5 Advanced WAF vs Wallarm NG WAF

Compared 22% of the time

AWS WAF vs Wallarm NG WAF

Compared 17% of the time

More Wallarm NG WAF Competitors

Product Reports

Buyer's Guide

Checkmarx One

March 2025

Download Checkmarx One product report

Buyer's Guide

Web Application Firewall (WAF)

March 2025

Download Wallarm NG WAF product report

Also Known As

No data available

Wallarm NG-WAF

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

Wallarm NG WAF is utilized to protect against web application threats, enhance security policies, and ensure consistent application security. It provides real-time attack prevention, detailed threat analytics, and automated incident response, making it suitable for both small and large-scale environments.

Wallarm NG WAF offers comprehensive API protection and adaptive security measures integrated with DevOps workflows. It efficiently detects and blocks attacks using AI-driven detection algorithms and provides thorough coverage against OWASP Top 10 threats. Users benefit from its easy deployment, scalability, and user-friendly configuration. Detailed analytics and robust performance in diverse environments make it a reliable option. However, users suggest improvements in documentation, customer support, update frequency, initial configuration process, and better integration capabilities to enhance the overall experience.

What are the key features of Wallarm NG WAF?

Real-time attack prevention: Offers immediate protection against web application threats.
AI-driven detection algorithms: Efficiently identifies and blocks malicious activities.
DevOps integration: Seamlessly integrates with DevOps tools and workflows.
OWASP Top 10 coverage: Provides comprehensive protection against top security risks.
Detailed analytics: Delivers in-depth threat analysis for better security management.
Scalability: Suitable for both small and large-scale environments.
Easy deployment: Quick and simple setup process for immediate use.

What benefits should you look for in Wallarm NG WAF reviews?

Enhanced security policies: Strengthens overall application security.
Consistent application security: Ensures uniform protection across all applications.
Automated incident response: Reduces manual intervention during security events.
Comprehensive API protection: Safeguards all API interactions effectively.
Adaptive security measures: Adjusts defenses based on emerging threats.
User-friendly configuration: Simplifies initial setup and ongoing management.
Robust performance: Maintains high security standards in various environments.

Wallarm NG WAF is implemented across different industries, including finance, healthcare, and e-commerce. It addresses their unique security needs by providing adaptive protections, detailed threat analytics, and integration capabilities. The scalability and ease of deployment make it an ideal choice for organizations managing large-scale applications and APIs.

Wallarm

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.

Buyer's Guide

Checkmarx One vs. Wallarm NG WAF

March 2025

Free Report: Checkmarx One vs. Wallarm NG WAF

Find out what your peers are saying about Checkmarx One vs. Wallarm NG WAF and other solutions. Updated: March 2025.

DOWNLOAD NOW

845,406 professionals have used our research since 2012.

See our Checkmarx One vs. Wallarm NG WAF report.

See our list of best API Security vendors.

We monitor all API Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.