Checkmarx One vs Digital.ai Release comparison

Checkmarx and Digital.ai are both solutions in the DevSecOps category. Checkmarx is ranked #2 with an average rating of 7.8, while Digital.ai is ranked #12 with an average rating of 7.0. Checkmarx holds a 16.5% mindshare in DSO, compared to Digital.ai’s 1.0% mindshare. Additionally, 87% of Checkmarx users are willing to recommend the solution, compared to 100% of Digital.ai users who would recommend it.

Checkmarx One

Read 70 Checkmarx One reviews

1,775 Views
1,136 Comparison Views

87% willing to recommend

Digital.ai Release

Read 4 Digital.ai Release reviews

76 Views
39 Comparison Views

100% willing to recommend

Checkmarx One

Digital.ai Release

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jan 7, 2025

Checkmarx One and Digital.ai Release are two competing products in the software development industry. Checkmarx One holds an advantage in pricing and support due to its strategic investment in these areas. On the other hand, Digital.ai Release offers comprehensive features, potentially justifying its higher price.

Features: Checkmarx One provides advanced security scanning, comprehensive support for various programming languages, and dynamic testing options. Digital.ai Release specializes in deployment automation, excels in release management, and integrates seamlessly with popular development tools.

Room for Improvement: Checkmarx One could enhance its deployment automation to match Digital.ai's efficiency, improve its integration with external tools, and streamline its complexity for easier use. Digital.ai Release may benefit from reducing its initial setup costs, expanding security capabilities to better match Checkmarx, and offering more flexible pricing plans.

Ease of Deployment and Customer Service: Digital.ai Release focuses on seamless deployment through integration and automation, supported by responsive customer service aiding implementation. Checkmarx One delivers strong support throughout its deployment, focusing on its security framework with moderate complexity.

Pricing and ROI: Checkmarx One typically has a lower setup cost, offering faster ROI through its security-centric features, crucial for vulnerability reduction. Digital.ai Release, despite higher initial costs, provides robust ROI through effective deployment operations and integrations, representing a strategic long-term investment.

To learn more, read our detailed Checkmarx One vs. Digital.ai Release Report (Updated: April 2025).

Buyer's Guide

Checkmarx One vs. Digital.ai Release

April 2025

Download the complete report

Helped 849,963 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Checkmarx One

Ranking in DevSecOps

2nd

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (21st), Static Code Analysis (2nd), API Security (3rd), Risk-Based Vulnerability Management (8th)

Digital.ai Release

Ranking in DevSecOps

12th

Average Rating

8.2

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Build Automation (17th), Release Automation (12th)

Mindshare comparison

As of May 2025, in the DevSecOps category, the mindshare of Checkmarx One is 16.5%, down from 21.9% compared to the previous year. The mindshare of Digital.ai Release is 1.0%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

DevSecOps

Featured Reviews

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Provides good security analysis and security identification within the source code

We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.

Read full review

Navanath Gajare

DevOps Tech Lead at a financial services firm with 5,001-10,000 employees

Effectively automates deployments and applies one template across applications

Our company uses the solution to handle deployments for new releases. Whenever there is a new release, the solution creates a new provision template for deployment. We also orchestrate and manage all users. We integrate with other tools like GitHub, Jenkins, or Digital.ai Deploy to manage…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Checkmarx offers many valuable features, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Infrastructure as Code (IAC), Supply Chain Security, and API Security."

"The UI is user-friendly."

"The most valuable feature is the application tracking reporting."

"From my point of view, it is the best product on the market."

"The best thing about Checkmarx is the amount of vulnerabilities that it can find compared to other free tools."

"We were using HPE Security Fortify to scan code for security vulnerabilities, but it can scan only after a successful compile. If the code has dependencies or build errors, the scan fails. With Checkmarx, pre-compile scanning is seamless. This allows us to scan more code."

"The features and technologies are very good. The flexibility and the roadmap have also been very good. They're at the forefront of delivering the additional capabilities that are required with cloud delivery, etc. Their ability to deliver what customers require and when they require is very important."

"The tool's valuable features include integrating GPT and Copilot. Additionally, the UI web representation is very user-friendly, making navigation easy. GPT has made several improvements to my security code."

More Checkmarx One pros

"The solution can apply one template across multiple applications."

"The most valuable feature of Digital.ai Release is its ability to communicate with various deployment systems, such as XLD and batch deployments, as well as integrate with tools, such as Flyway and Bamboo. We use Bamboo as our build orchestrator, and Digital.ai Release also integrates with Jira, another Atlassian solution. These capabilities make it a powerful tool for managing workflow, test automation, and other processes."

"The orchestration, building the release, and then just executing it and managing that pipeline — the orchestration capabilities are great for that."

"The time is also reduced because the manual work has tremendously decreased. We just have to click one button, and it will create everything for us."

Cons

"Integration into the SDLC (i.e. support for last version of SonarQube) could be added."

"Implementing a blackout time for any user or teams: Needs improvement."

"Checkmarx being Windows only is a hindrance. Another problem is: why can't I choose PostgreSQL?"

"I expect application security vendors to cover all aspects of application security, including SAST, DAST, and even mobile application security testing. And it would be much better if they provided an on-premises and cloud option for all these main application security features."

"They can support the remaining languages that are currently not supported. They can also create a different model that can identify zero-day attacks. They can work on different patterns to identify and detect zero-day vulnerability attacks."

"The integration could improve by including, for example, DevSecOps."

"The plugins for the development environment have room for improvements such as for Android Studio and X code."

"They could work to improve the user interface. Right now, it really is lacking."

More Checkmarx One cons

"Digital.ai Release could improve by having a better plugin that works with Guardian that we use for mainframe migrations. If there could be an interface or plugin for Guardian that would be beneficial."

"Currently, we put artifact details manually. What we could improve, in our case, is the deployment instruction base. Developers input all the information, including which artifact and where it needs to be deployed. What Digital.ai could do is automatically go to the deployment instruction page, take those artifact details, and implement them."

"The backfill could be improved, we could automate that. Right now it's subjective — it's up to the lead developer's memory to remember to backfill."

"The solution is a little bit expensive."

Pricing and Cost Advice

"I believe pricing is better compared to other commercial tools."

"The solution is costly."

"The interface used to create custom rules comes at an additional cost."

"The solution's price is high and you pay based on the number of users."

"Its price is fair. It is in or around the right spot. Ultimately, if the price is wrong, customers won't commit, but they do tend to commit. It is neither too cheap nor too expensive."

"It is an expensive solution."

"For around 250 users or committers, the cost is approximately $500,000."

"This solution is expensive. The customized package allows you to buy additional users at any time."

More Checkmarx One pricing and cost advice

"The solution's license includes all features."

"Overall, the price is just too high; especially considering we're in the middle of a pandemic."

See which vendors are best for you

Use our free recommendation engine to learn which DevSecOps solutions are best for your needs.

See recommendations

849,963 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

14%

Manufacturing Company

10%

Government

Educational Organization

47%

Financial Services Firm

24%

Computer Software Company

10%

Healthcare Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

See all answers

What do you like most about Digital.ai Release ?

The time is also reduced because the manual work has tremendously decreased. We just have to click one button, and it will create everything for us.

See all answers

What needs improvement with Digital.ai Release ?

There are many areas of improvement. Currently, we put artifact details manually. What we could improve, in our case, is the deployment instruction base. Developers input all the information, inclu...

See all answers

What is your primary use case for Digital.ai Release ?

It helps with creating documentation, release processes, deploying to lower environments, scheduling meetings, and sending emails to stakeholders. The goal is to reduce manual work and save time.

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs Checkmarx One

Compared 40% of the time

Veracode vs Checkmarx One

Compared 12% of the time

Fortify on Demand vs Checkmarx One

Compared 6% of the time

Checkmarx SAST vs Checkmarx One

Compared 5% of the time

OWASP Zap vs Checkmarx One

Compared 5% of the time

More Checkmarx One Competitors

Jenkins vs Digital.ai Release

Compared 59% of the time

GitLab vs Digital.ai Release

Compared 41% of the time

More Digital.ai Release Competitors

Product Reports

Buyer's Guide

Checkmarx One

April 2025

Download Checkmarx One product report

Buyer's Guide

Digital.ai Release

April 2025

Download Digital.ai Release product report

Also Known As

No data available

XL Release, XebiaLabs XL Release

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

Automate, orchestrate, and gain visibility into your release pipelines at scale using Digital.ai Release, a release management tool that is designed for enterprises. Control and track releases, standardize processes, and bake compliance and security into your software release pipelines.

Digital.ai

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

3M, GE, John Deere, Deutsche Telekom, Cable & Wireless, Xerox, and Société Générale, Liberty Mutual, EA, Rabobank

Buyer's Guide

Checkmarx One vs. Digital.ai Release

April 2025

Free Report: Checkmarx One vs. Digital.ai Release

Find out what your peers are saying about Checkmarx One vs. Digital.ai Release and other solutions. Updated: April 2025.

DOWNLOAD NOW

849,963 professionals have used our research since 2012.

See our Checkmarx One vs. Digital.ai Release report.

See our list of best DevSecOps vendors.

We monitor all DevSecOps reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.