Try our new research platform with insights from 80,000+ expert users

BMC Helix Automation Console vs Checkmarx One comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 1, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Ranking in Vulnerability Management
17th
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Continuous Threat Exposure Management (CTEM) (1st)
BMC Helix Automation Console
Ranking in Vulnerability Management
45th
Average Rating
7.6
Reviews Sentiment
7.5
Number of Reviews
2
Ranking in other categories
No ranking in other categories
Checkmarx One
Ranking in Vulnerability Management
22nd
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
71
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Container Security (23rd), Static Code Analysis (3rd), API Security (6th), Dynamic Application Security Testing (DAST) (4th), DevSecOps (5th), Risk-Based Vulnerability Management (10th), Application Security Posture Management (ASPM) (3rd)
 

Mindshare comparison

As of October 2025, in the Vulnerability Management category, the mindshare of Zafran Security is 1.0%, up from 0.1% compared to the previous year. The mindshare of BMC Helix Automation Console is 0.2%, up from 0.2% compared to the previous year. The mindshare of Checkmarx One is 1.2%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Zafran Security1.0%
Checkmarx One1.2%
BMC Helix Automation Console0.2%
Other97.6%
Vulnerability Management
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
ShashiGupta - PeerSpot reviewer
Reasonably Priced
In terms of improvement, the product could benefit from streamlining the implementation process, particularly regarding customization. Currently, the process involves navigating through multiple layers of custom and staging forms, which can be cumbersome and time-consuming. Another aspect to consider is the foundation data provided out of the box, particularly regarding categorization and its associated values. This foundational data may only sometimes meet the mark, as organizations often require more flexibility to tailor it to their needs. Discovering hardware, for instance, can lead to different category processing needs, with certain layers providing minimal benefits. The challenge lies in the inability to directly specify servers, hardware, software, and their respective details, highlighting a need for improvement in this area. As per the current state of the Helix product, it has seen some resolution to issues but still faces challenges when adding more attributes. It can lead to restrictions, particularly with the progressive view page, limiting flexibility in certain cases. While benefits can be gained in other aspects, such drawbacks are common. Improvements are necessary to enhance flexibility in this regard. Exploring alternative solutions like containerization or cloud services may offer opportunities for optimization, requiring careful consideration due to the complexity involved. I'm still determining the current strategy. While there have been improvements in the latest version, there's still a need for further enhancements in an extended version. Additionally, stakeholders, including manufacturing companies, emphasize the importance of fine-tuning performance for the Helix product. The search functionality remains problematic, often taking more than 15 seconds, undermining reliability.
Syed Hasan - PeerSpot reviewer
Partner experiences excellent technical support and seamless initial setup
In my opinion, if we are able to extract or show the report, and because everything is going towards agent tech and GenAI, it would be beneficial if it could get integrated with our code base and do the fix automatically. It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from. This would be really helpful.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"Zafran is an excellent tool."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"We saw benefits from Zafran Security almost immediately after deploying it."
"Takes reports from other vulnerabilities."
"It's reasonably priced."
"The solution communicates where to fix the issue for the purpose of less iterations."
"Scan reviews can occur during the development lifecycle."
"The UI is very intuitive and simple to use."
"The feature that I have found most valuable is that its number of false positives is less than the other security application platforms. Its ease of use is another good feature. It also supports most of the languages."
"The most valuable feature for me is the Jenkins Plugin."
"The most valuable feature is the application tracking reporting."
"Checkmarx offers many valuable features, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Infrastructure as Code (IAC), Supply Chain Security, and API Security."
"The ability to track the vulnerabilities inside the code (origin and destination of weak variables or functions)."
 

Cons

"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"In terms of improvement, the product could benefit from streamlining the implementation process, particularly regarding customization."
"No third-party applications or integrations with additional software solutions."
"There is nothing particular that I don't like in this solution. It can have more integrations, but the integrations that we would like are in the roadmap anyway, and they just need to deliver the roadmap. What I like about the roadmap is that it is going where it needs to go. If I were to look at the roadmap, there is nothing that is jumping out there that says to me, "Yeah. I'd like something else on the roadmap." What they're looking to deliver is what I would expect and forecast them to deliver."
"I would like to see the tool’s pricing improved."
"Checkmarx reports many false positives that we need to manually segregate and mark “Not exploitable”."
"I expect application security vendors to cover all aspects of application security, including SAST, DAST, and even mobile application security testing. And it would be much better if they provided an on-premises and cloud option for all these main application security features."
"One area for improvement in Checkmarx is pricing, as it's more expensive than other products."
"Implementing a blackout time for any user or teams: Needs improvement."
"Checkmarx needs improvement in its Dynamic Application Security Testing (DAST) and API security features."
"We want to have a holistic view of the portfolio-level dashboard and not just an individual technical project level."
 

Pricing and Cost Advice

Information not available
Information not available
"Be cautious of the one-year subscription date. Once it expires, your price will go up."
"If you want more, you have to pay more. You have to pay for additional modules or functionalities."
"The solution is costly."
"For around 250 users or committers, the cost is approximately $500,000."
"This solution is expensive. The customized package allows you to buy additional users at any time."
"We have purchased an annual license to use this solution. The price is reasonable."
"It is the right price for quality delivery."
"Checkmarx is comparatively costlier than other products, which is why some of the customers feel reluctant to go for it, though performance-wise, Checkmarx can compete with other products."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
9%
Manufacturing Company
8%
Government
6%
No data available
Financial Services Firm
19%
Computer Software Company
13%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise9
Large Enterprise38
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What is your experience regarding pricing and costs for BMC Helix Remediate?
If you want to install or consume this BMC product, licensing cost is one factor, but the facility features you will ...
What needs improvement with BMC Helix Remediate?
In terms of improvement, the product could benefit from streamlining the implementation process, particularly regardi...
What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as ...
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
 

Also Known As

No data available
TrueSight Vulnerability Management, SecOps Response Service, BladeLogic Threat Director, BMC Helix Remediate
No data available
 

Overview

 

Sample Customers

Information Not Available
Online Business Systems
YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Find out what your peers are saying about BMC Helix Automation Console vs. Checkmarx One and other solutions. Updated: September 2025.
869,566 professionals have used our research since 2012.