Overall, the ability to find vulnerabilities in the code is better than the tool that we were using before.
Checkmarx One enables pre-compile scanning, allowing early vulnerability detection and integration with various SCM solutions, CICD tools, and repositories. It supports SAST, SCA, and supply chain security, enhancing code security and decreasing false positives. However, it requires expanded language and framework support, improved licensing for Swift, and better SDLC integration. Performance issues like slow scans and high memory usage are concerns alongside the need for manual false positive segregation.
