No more typing reviews! Try our Samantha, our new voice AI agent.
Checkmarx One Logo

Checkmarx One Reviews

Vendor: Checkmarx
3.9 out of 5
Badge Ranked 1
Leave a review

What is Checkmarx One?

Checkmarx One delivers robust security through seamless integration with SCM and CI/CD tools, ensuring reliable SAST and SCA. Primarily used by organizations for vulnerability detection, it supports cloud and on-premises deployment to enhance secure coding practices.

Get the Checkmarx One Buyer's Guide and find out what your peers are saying about Checkmarx One, SonarQube, SentinelOne Singularity Cloud Security and more!
Checkmarx One is the #1 ranked solution in top AI Security solutions, #2 ranked solution in application security solutions, #2 ranked solution in AST tools, #2 ranked solution in top Static Code Analysis solutions, #2 ranked solution in top Dynamic Application Security Testing (DAST) solutions, #2 ranked solution in top DevSecOps solutions, #3 ranked solution in top Application Security Posture Management (ASPM) solutions, #4 ranked solution in API Security Solutions, #10 ranked solution in top Risk-Based Vulnerability Management solutions, #15 ranked solution in Container Security Solutions, and #16 ranked solution in top Vulnerability Management solutions. PeerSpot users give Checkmarx One an average rating of 7.8 out of 10. Checkmarx One is most commonly compared to SonarQube: Checkmarx One vs SonarQube. Checkmarx One is popular among the large enterprise segment, accounting for 58% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 17% of all views.
Buyer's Guide
Checkmarx One
April 2026
Get the report
Helped 892,487 peers since 2012

Featured Checkmarx One reviews

Read more reviews

Checkmarx One mindshare

Product category:
Application Security Tools
As of May 2026, the mindshare of Checkmarx One in the Application Security Tools category stands at 8.8%, down from 10.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Application Security Tools Mindshare Distribution
ProductMindshare (%)
Checkmarx One8.8%
SonarQube13.6%
Snyk5.1%
Other72.5%
Application Security Tools

PeerResearch reports based on Checkmarx One reviews

TypeTitleDate
CategoryApplication Security ToolsMay 1, 2026Download
ProductReviews, tips, and advice from real usersMay 1, 2026Download
ComparisonCheckmarx One vs SonarQubeMay 1, 2026Download
ComparisonCheckmarx One vs VeracodeMay 1, 2026Download
ComparisonCheckmarx One vs GitHubMay 1, 2026Download
Suggested products
TitleRatingMindshareRecommending
SonarQube4.013.6%84%136 interviewsAdd to research
SentinelOne Singularity Cloud Security4.4N/A99%123 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

Checkmarx One offers valuable features such as automated code scanning, identification of vulnerabilities without compiling, and ease of use. Its ability to integrate with multiple repositories and CI/CD tools enhances developer productivity. The interface is intuitive, supporting a wide range of programming languages and frameworks. It reduces false positives, provides detailed reports, and offers real-time feedback within IDEs. Organizations appreciate its comprehensive security checks and efficient SAST and SCA capabilities.
  • "The main thing we find valuable about Checkmarx is the ease of use, as it's easy to initiate scans and triage defects."
  • "The most valuable feature of Checkmarx is the user interface, it is very easy to use, and we do not need to configure anything, we only have to scan to see the results."
  • "The most valuable feature is that it actually identifies the different criteria you can set to meet whatever standards you're trying to get your system accredited for."

Room for Improvement

Checkmarx One could enhance its functionality by improving role management, reducing false positives, and expanding language support. Integration with third-party systems and better licensing models are needed. Improving the user interface, adding real-time developer guidance, and optimizing reporting and scanning speeds would benefit users. Enhanced dashboarding and support for dynamic application security testing are necessary for increased efficiency.
  • "As the solution becomes more complex and feature rich, it takes more time to debug and resolve problems."
  • "Checkmarx could improve the speed of the scans."
  • "Checkmarx isn't accredited by the US government for DOD networks, so we've been forced to remove it from the network."

ROI

Checkmarx One has enabled teams to deliver secure solutions quicker by identifying issues during development, significantly reducing rework periods. It minimizes troubleshooting and manual review costs, decreasing dependence on additional security personnel. Clients see improvements in production timelines, with vulnerabilities detected early and resolved swiftly. Enhanced security practices reduce breaches, yielding financial returns. The software automates processes, saving time and resources, providing significant cost benefits in security management across entire organizations.

Pricing

Enterprise clients find Checkmarx One licensing modular and consumption-based, with options such as module-based, repo-based, or LOC-based licensing. While recognized for its quality and security, the cost is generally considered high but negotiable. Pricing varies widely, depending on team size and needed features, ranging from $30K to over $1M. Savings can be achieved via multi-year contracts and Marketplace deals, which offer easier contract approval and up to 20% cost reduction.
  • "For around 250 users or committers, the cost is approximately $500,000."
  • "The tool's pricing is fine."
  • "The solution's price is high and you pay based on the number of users."

Popular Use Cases

Checkmarx One is primarily used for static application security testing, code vulnerability evaluation, and source code scanning. Users utilize it for integration into CI/CD pipelines, identifying vulnerabilities during software development, and conducting penetration testing. It assists in ensuring compliance, managing security across Git repositories, and reducing vulnerability discovery time in software code to enhance overall application security. It can be deployed in both on-premises and cloud environments.

Service and Support

Checkmarx One customer service is well-rated, with fast response times and knowledgeable staff. Technical support is generally good, though some feel it could be faster. Many find the team skilled and helpful, addressing queries promptly. However, delays in resolving cases or providing solutions were noted by some. The service is considered reliable, with proactive assistance and clear guidance. Checkmarx One's support team effectively manages cases and offers comprehensive assistance.

Deployment

Checkmarx One's initial setup is often described as straightforward and simple to deploy, with users appreciating its easy-to-follow steps and comprehensive documentation. Many note the installation process is facilitated by an installer wizard and can typically be completed within a day. However, some users face challenges with complex configurations, especially when involving additional integrations or specific environment requirements, requiring technical expertise and potentially external support.

Scalability

Checkmarx One scales effectively for many organizations, handling increased workloads and large environments. Users note its ability to manage global needs efficiently and its compatibility with cloud infrastructure enhances scalability. Some mention that licensing can impact expansion, but others highlight the ease of scaling engine capacity. While some report no issues, others suggest that specific configurations may influence scalability outcomes. Many rate Checkmarx One's scalability highly, appreciating its ability to accommodate diverse user demands.

Stability

Checkmarx One displays stability, though users report occasional issues with large code scanning, memory consumption, and configuration. Some note sessions not logging out properly, performance slowdowns with extensive scans, or needing service restarts. Despite variances, many find it reliable, stable in updates, and well-integrated in workflows, rating stability between six to ten. There are reports of high dependability, but some highlight areas for stability improvement, especially with larger applications.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Checkmarx One Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business24
Midsize Enterprise9
Large Enterprise42
By reviewers
By visitors reading reviews
Company SizeCount
Small Business598
Midsize Enterprise346
Large Enterprise1329
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
17%
Manufacturing Company
9%
Computer Software Company
8%
Government
6%
Comms Service Provider
5%
Educational Organization
4%
Outsourcing Company
4%
Healthcare Company
4%
Construction Company
4%
Retailer
4%
Energy/Utilities Company
4%
Insurance Company
3%
University
3%
Performing Arts
3%
Media Company
3%
Non Profit
2%
Real Estate/Law Firm
2%
Transportation Company
2%
Consumer Goods Company
2%
Legal Firm
2%
Wholesaler/Distributor
2%
Marketing Services Firm
1%
Recreational Facilities/Services Company
1%
Hospitality Company
1%
Aerospace/Defense Firm
1%
Pharma/Biotech Company
1%
Logistics Company
1%
Engineering Company
1%

Compare Checkmarx One with alternative products

Go!

Learn more about Checkmarx One

Checkmarx One provides organizations with comprehensive tools for secure software development, integrating effectively with CI/CD pipelines to scan thousands of applications. Its capabilities extend to identifying vulnerabilities in both code bases and third-party software. Enhancing workflow by supporting SCM solutions, it assists in maintaining secure coding standards and compliance. While excelling in various areas, it requires improvements in scan speed, reduction of false positives, and broader platform integration, particularly for COBOL and Swift. Its pricing model is noted as high, and demand exists for better tutorials and documentation.

What are the key features of Checkmarx One?
  • Comprehensive Integration: Seamlessly connects with SCM, CI/CD tools to streamline security workflows.
  • Accurate SAST and SCA: Precisely identifies vulnerabilities down to the exact line of code.
  • Custom Rules Configuration: Allows tailored security measures to match specific needs.
  • Quick Scanning: Provides fast analysis to speed up the development process.
  • Automated Code Remediation: Helps in efficiently fixing code vulnerabilities.
What benefits should users expect in reviews?
  • Improved Security: Enhances code safety, reducing vulnerabilities efficiently.
  • Effective False Positivity Management: Optimizes time spent on genuine issues.
  • Enhanced Development Processes: Integrates smoothly to boost secure coding initiatives.
  • Comprehensive Language Support: Facilitates scanning in multiple programming languages, accommodating diverse needs.

Industries implement Checkmarx One for secure coding compliance and vulnerability management across varying environments, choosing between cloud and on-premises deployment based on requirements. Its extensive language support and integration with DevSecOps practices make it a popular choice for organizations aiming to enhance software security.

Checkmarx One customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech

Case Study: Liveperson Implements Innovative Secure SDLC

Related questions

  • 50
What is the biggest difference between Veracode and Checkmarx?
  • 84
Checkmarx or Veracode. Which should we choose?
  • 215
What is the Biggest Difference Between Checkmarx and Fortify?
  • 65
What is the biggest difference between Checkmarx and SonarQube?
  • 110
Checkmarx vs SonarQube; SonarQube interoperability with Checkmarx or Veracode
  • 220
If you had to both encrypt and compress data during transmission, which would you do first and why?
  • 144
When evaluating Application Security, what aspect do you think is the most important to look for?
  • 256
What are the threats associated with using ‘bogus’ cybersecurity tools?
  • 223
What are the Top 5 cybersecurity trends in 2022?
  • 130
Which application security solutions include both vulnerability scans and quality checks?

Product Categories

Product Categories
Application Security Tools
Static Application Security Testing (SAST)
Vulnerability Management
Container Security
Static Code Analysis
API Security
Dynamic Application Security Testing (DAST)
DevSecOps
Risk-Based Vulnerability Management
Application Security Posture Management (ASPM)
AI Security

Popular Comparisons

Popular Comparisons
SonarQube vs Checkmarx One Logo
SonarQube vs Checkmarx One
SentinelOne Singularity Cloud Security vs Checkmarx One Logo
SentinelOne Singularity Cloud Security vs Checkmarx One
Wiz vs Checkmarx One Logo
Wiz vs Checkmarx One
Snyk vs Checkmarx One Logo
Snyk vs Checkmarx One
Microsoft Defender for Cloud vs Checkmarx One Logo
Microsoft Defender for Cloud vs Checkmarx One
Prisma Cloud by Palo Alto Networks vs Checkmarx One Logo
Prisma Cloud by Palo Alto Networks vs Checkmarx One
GitLab vs Checkmarx One Logo
GitLab vs Checkmarx One
Veracode vs Checkmarx One Logo
Veracode vs Checkmarx One
Qualys VMDR vs Checkmarx One Logo
Qualys VMDR vs Checkmarx One
Tanium vs Checkmarx One Logo
Tanium vs Checkmarx One
Imperva Application Security Platform vs Checkmarx One Logo
Imperva Application Security Platform vs Checkmarx One
Tenable Nessus vs Checkmarx One Logo
Tenable Nessus vs Checkmarx One
CrowdStrike Falcon Cloud Security vs Checkmarx One Logo
CrowdStrike Falcon Cloud Security vs Checkmarx One
Orca Security vs Checkmarx One Logo
Orca Security vs Checkmarx One
JFrog Xray vs Checkmarx One Logo
JFrog Xray vs Checkmarx One
See all alternatives
 
Checkmarx One Reviews Summary
Author infoRatingReview Summary
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution3.5I’ve used Checkmarx One extensively to improve developer workflow and application security, appreciating its strong SAST, SCA, and CI/CD integrations, though it could benefit from faster scans, deeper language support, and more contextual IDE guidance.
Senior Software Engineer at a tech vendor with 10,001+ employees4.5I've been using Checkmarx One for years to streamline code validation, improve quality, and ensure compliance, saving significant time weekly, though I’d like to see faster reporting speeds and a more intuitive UI.
Cyber Security Expert at Nestle4.5I use Checkmarx One for SAST and SCA scans, appreciating its CI/CD integration and SCM support; while reporting could improve, it’s boosted our speed to market and handles extensive global code scanning effectively.
Senior GenAI Engineer at a tech vendor with 10,001+ employees4.0I've used Checkmarx One for three years to streamline vulnerability detection through CI/CD integration, saving time and reducing manual reviews, though it could improve scan speed, false positives, and integration with modern development tools.
ML Engineer - Specialist at a tech vendor with 10,001+ employees4.5I've used Checkmarx One extensively in DevSecOps for secure code scanning and CI/CD integration; it's versatile and stable, though scan speed and false positives could improve. It supports many languages and helps ensure compliance in cloud and on-prem environments.
Chief Technology Officer at 3CS Aquarah Limited4.0I implement Checkmarx One for clients, and it's reliable, easy to set up, and delivers quick results, especially in secure code development. Its Codebashing feature stands out, though I’d like to see RASP capabilities in the future.
Specialist Leader at Deloitte4.5I work as a partner with Checkmarx One and find its initial setup straightforward, although hybrid deployment is preferred. The tool shows clear ROI, but automated code fixing would enhance its capabilities. Enterprise clients benefit from its effective security scans.
Software Engineer at a manufacturing company with 10,001+ employees4.5I've used Checkmarx One daily for three years, mainly for SAST scans and vulnerability detection. It's easy to use, integrates well with our pipeline, helps reduce vulnerabilities quickly, and support is responsive within 24 hours.