Check Point CloudGuard Code Security vs Checkmarx One comparison

Cancel
You must select at least 2 products to compare!
Check Point Software Technologies Logo
289 views|68 comparisons
100% willing to recommend
Checkmarx Logo
3,094 views|1,927 comparisons
86% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Check Point CloudGuard Code Security and Checkmarx One based on real PeerSpot user reviews.

Find out what your peers are saying about Snyk, Checkmarx, GitLab and others in DevSecOps.
To learn more, read our detailed DevSecOps Report (Updated: May 2024).
770,616 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The data center security system has provided real-time analytics on performance and data configuration processes.""Its fastest and most outstanding characteristic is ensuring a development line that will not lead to applying applications or code development.""Check Point CloudGuard Code Security helps to improve the code security of our company, generating rapid and complete assessments to be able to make decisions for improvements.""Having a cloud detection response helps to very quickly identify security threats in our environment.""Knowing what measures we must take allows us to reduce costs associated with security in the cloud by providing early identification of a risk or a possible security breach.""The implementation of this tool for security management and control is very simple.""Automation has helped a lot to identify and automatically execute policies, rules, and blocks due to its machine learning.""Compared to what we used before, it's helping us to be more efficient in managing our traffic."

More Check Point CloudGuard Code Security Pros →

"Our static operation security has been able to identify more security issues since implementing this solution.""The product's most valuable feature is static code and supply chain effect analysis. It provides a lot of visibility.""The UI is user-friendly.""The most valuable feature is the simple user interface.""The most valuable feature of Checkmarx is the user interface, it is very easy to use. We do not need to configure anything, we only have to scan to see the results.""The most valuable feature is the application tracking reporting.""The solution improved the efficiency of our code security reviews. It helps tremendously because it finds hundreds of potential problems sometimes.""The setup is very easy. There is a lot of information in the documents which makes the install not difficult at all."

More Checkmarx One Pros →

Cons
"We need to have many of the baselines or development guides providing less complex writing or development.""There needs to be better security around API integration.""There are a lot of opportunities for how they can use their technology to do more. That would be more like sensitive data discovery and other things besides Git Repos, but then you are expanding the scope of what necessarily their product is.""The costs are not transparent.""The ease of use could be better.""The enhancements are needed in the logging system and log management processes.""It is generally difficult to find documentation about the product, and there is relatively little to find.""This is a highly technical solution for users who do not have security experience. It requires specialized knowledge of configurations to use it correctly."

More Check Point CloudGuard Code Security Cons →

"I would like to see the tool’s pricing improved.""Checkmarx could improve by reducing the price.""The interactive application security testing, or IAST, the interactive part where you're looking at an application that lives in a runtime environment on a server or virtual machine, needs improvement.""They could work to improve the user interface. Right now, it really is lacking.""They can support the remaining languages that are currently not supported. They can also create a different model that can identify zero-day attacks. They can work on different patterns to identify and detect zero-day vulnerability attacks.""Implementing a blackout time for any user or teams: Needs improvement.""One area for improvement in Checkmarx is pricing, as it's more expensive than other products.""We can run only one project at a time."

More Checkmarx One Cons →

Pricing and Cost Advice
  • "It is extremely affordable and high value for cost."
  • More Check Point CloudGuard Code Security Pricing and Cost Advice →

  • "It is the right price for quality delivery."
  • "I believe pricing is better compared to other commercial tools."
  • "The pricing was not very good. This is just a framework which shouldn’t cost so much."
  • "The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
  • "It is a good product but a little overpriced."
  • "The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
  • "​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
  • "We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
  • More Checkmarx One Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which DevSecOps solutions are best for your needs.
    770,616 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:We have had a number of real events where developers accidentally made commits of API keys, and we were able to detect and begin response actions in minutes. We had the API key revoked in less than… more »
    Top Answer:It is extremely affordable and high value for cost.
    Top Answer:There are a lot of opportunities for how they can use their technology to do more. That would be more like sensitive data discovery and other things besides Git Repos, but then you are expanding the… more »
    Top Answer:I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
    Top Answer:Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
    Top Answer:The solution's price is high and you pay based on the number of users.
    Ranking
    7th
    out of 15 in DevSecOps
    Views
    289
    Comparisons
    68
    Reviews
    10
    Average Words per Review
    587
    Rating
    8.3
    2nd
    out of 15 in DevSecOps
    Views
    3,094
    Comparisons
    1,927
    Reviews
    21
    Average Words per Review
    513
    Rating
    7.7
    Comparisons
    Also Known As
    Spectral
    Learn More
    Overview

    CloudGuard Code Security’s automated tools integrate with developers’ tools to detect code vulnerabilities and to identify secrets and misconfigurations in the code before deployment, preventing unauthorized use to nefarious ends. With CloudGuard Code Security, organizations can prevent exposing API keys, tokens and credentials, in addition to remediating security misconfigurations. With a super-fast platform, CloudGuard Code Security ensures security without compromising productivity.

    Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

    Checkmarx One offers comprehensive application scanning across the SDLC:

    • Static Application Security Testing (SAST)
    • Software Composition Analysis (SCA)
    • API security
    • Dynamic Application Security Testing (DAST)
    • Container security
    • IaC security
    • Correlation, prioritization, and risk management
    • Codebashing secure code training
    • AI security
    • Tech partnerships extending AppSec into runtime analysis
    • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

    Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

    Sample Customers
    Information Not Available
    YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
    Top Industries
    REVIEWERS
    Security Firm36%
    Financial Services Firm18%
    Transportation Company9%
    Engineering Company9%
    VISITORS READING REVIEWS
    Computer Software Company20%
    Financial Services Firm17%
    Security Firm11%
    Government10%
    REVIEWERS
    Computer Software Company31%
    Financial Services Firm19%
    Comms Service Provider9%
    Manufacturing Company9%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company15%
    Manufacturing Company9%
    Insurance Company5%
    Company Size
    REVIEWERS
    Small Business60%
    Midsize Enterprise15%
    Large Enterprise25%
    VISITORS READING REVIEWS
    Small Business24%
    Midsize Enterprise10%
    Large Enterprise66%
    REVIEWERS
    Small Business38%
    Midsize Enterprise13%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise12%
    Large Enterprise72%
    Buyer's Guide
    DevSecOps
    May 2024
    Find out what your peers are saying about Snyk, Checkmarx, GitLab and others in DevSecOps. Updated: May 2024.
    770,616 professionals have used our research since 2012.

    Check Point CloudGuard Code Security is ranked 7th in DevSecOps with 11 reviews while Checkmarx One is ranked 2nd in DevSecOps with 67 reviews. Check Point CloudGuard Code Security is rated 8.4, while Checkmarx One is rated 7.6. The top reviewer of Check Point CloudGuard Code Security writes "Good security and functionality with helpful support". On the other hand, the top reviewer of Checkmarx One writes "The report function is a great, configurable asset but sometimes yields false positives". Check Point CloudGuard Code Security is most compared with Snyk, Aqua Cloud Security Platform and Palo Alto Networks Enterprise Data Loss Prevention, whereas Checkmarx One is most compared with SonarQube, Veracode, Fortify on Demand, Snyk and Coverity.

    See our list of best DevSecOps vendors.

    We monitor all DevSecOps reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.