Checkmarx One vs ExtraHop Reveal(x) 360 comparison

Checkmarx and ExtraHop Networks are both solutions in the Container Security category. Checkmarx is ranked #22 with an average rating of 8.3, while ExtraHop Networks is ranked #30 with an average rating of 9.0. Checkmarx holds a 2.1% mindshare in Container Security, compared to ExtraHop Networks’s 0.2% mindshare. Additionally, 87% of Checkmarx users are willing to recommend the solution, compared to 100% of ExtraHop Networks users who would recommend it.

Checkmarx One

Read 71 Checkmarx One reviews

20,870 Views
3,339 Comparison Views

87% willing to recommend

ExtraHop Reveal(x) 360

Read 3 ExtraHop Reveal(x) 360 reviews

992 Views
179 Comparison Views

100% willing to recommend

Checkmarx One

ExtraHop Reveal(x) 360

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Checkmarx One and ExtraHop Reveal(x) 360 based on real PeerSpot user reviews.

Find out in this report how the two Container Security solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Checkmarx One vs. ExtraHop Reveal(x) 360 Report (Updated: August 2025).

Buyer's Guide

Checkmarx One vs. ExtraHop Reveal(x) 360

August 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Checkmarx One

Ranking in Container Security

22nd

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (23rd), Static Code Analysis (3rd), API Security (4th), Dynamic Application Security Testing (DAST) (4th), DevSecOps (4th), Risk-Based Vulnerability Management (9th)

ExtraHop Reveal(x) 360

Ranking in Container Security

30th

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (19th), Network Traffic Analysis (NTA) (9th), Extended Detection and Response (XDR) (24th)

Mindshare comparison

As of August 2025, in the Container Security category, the mindshare of Checkmarx One is 2.1%, down from 3.5% compared to the previous year. The mindshare of ExtraHop Reveal(x) 360 is 0.2%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security

Featured Reviews

Syed Hasan

Specialist Leader at Deloitte

Partner experiences excellent technical support and seamless initial setup

In my opinion, if we are able to extract or show the report, and because everything is going towards agent tech and GenAI, it would be beneficial if it could get integrated with our code base and do the fix automatically. It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from. This would be really helpful.

Read full review

Maksym Toporkov

Head of Research And Development at Quipu GmbH

A competitive choice for network detection and response with exceptional user interface, ease of implementation and minimal false positives

The NDR feature analyzes network traffic, creating records with connection details. While these records offer insights, there's a limitation in investigating payloads directly. ExtraHop provides an option for an additional server to save payloads, but its temporary storage has constraints. Unlike some competitors, it lacks an automatic payload-saving feature for each detection, presenting an improvement opportunity. Suggested enhancement involves the main sensor prompting payload storage for specific detections, streamlining the investigation process, and contributing to a more efficient workflow. A drawback includes packet storage limitations for payload data, necessitating timely extraction for thorough investigations.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of Checkmarx are its integration with multiple SCM solutions and CICD tools, its ability to scale according to user licenses, and the quick scanning process."

"The most valuable features of Checkmarx are difficult to pinpoint because of the way the functionalities and the features are intertwined, it's difficult to say which part of them I prefer most. You initiate the scan, you have a scan, you have the review set, and reporting, they all work together as one whole process. It's not like accounting software, where you have the different features, et cetera."

"The feature that I have found most valuable is that its number of false positives is less than the other security application platforms. Its ease of use is another good feature. It also supports most of the languages."

"Less false positive errors as compared to any other solution."

"Both automatic and manual code review (CxQL) are valuable."

"It gives the proper code flow of vulnerabilities and the number of occurrences."

"The administration in Checkmarx is very good."

"The solution is always updating to continuously add items that create a level of safety from vulnerabilities. It's one of the key features they provide that's an excellent selling point. They're always ahead of the game when it comes to finding any vulnerabilities within the database."

More Checkmarx One pros

"It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for network security and management."

"It is very easy to collect and handle data in ExtraHop Reveal(X) Cloud. Integration with Big Data is also easy. Many of our customers integrate it with Big Data platforms like Splunk or Elastic. It is also easy to handle and easy to understand."

"It is scalable."

Cons

"They could work to improve the user interface. Right now, it really is lacking."

"As the solution becomes more complex and feature rich, it takes more time to debug and resolve problems. Feature-wise, we have no complaints, but Checkmarx becomes harder to maintain as the product becomes more complex. When I talk to support, it takes them longer to fix the problem than it used to."

"Integration into the SDLC (i.e. support for last version of SonarQube) could be added."

"Licensing models and Swift language support are the aspects in which this product needs to improve. Swift is a new language, in which major customers require support for lower prices."

"There is nothing particular that I don't like in this solution. It can have more integrations, but the integrations that we would like are in the roadmap anyway, and they just need to deliver the roadmap. What I like about the roadmap is that it is going where it needs to go. If I were to look at the roadmap, there is nothing that is jumping out there that says to me, "Yeah. I'd like something else on the roadmap." What they're looking to deliver is what I would expect and forecast them to deliver."

"We have received some feedback from our customers who are receiving a large number of false positives."

"We are trying to find out if there is a way to identify the run-time null values. I am analyzing different tools to check if there is any tool that supports run-time null value identification, but I don't think any of the tools in the market currently supports this feature. It would be helpful if Checkmarx can identify and throw an exception for a null value at the run time. It would make things a lot easier if there is a way for Checkmarx to identify nullable fields or hard-coded values in the code. The accessibility for customized Checkmarx rules is currently limited and should be improved. In addition, it would be great if Checkmarx can do static code and dynamic code validation. It does a lot of security-related scanning, and it should also do static code and dynamic code validation. Currently, for security-related validation, we are using Checkmarx, and for static code and dynamic code validation, we are using some other tools. We are spending money on different tools. We can pay a little extra money and use Checkmarx for everything."

"I would like the product to include more debugging and developed tools. It needs to also add enhancements on the coding side."

More Checkmarx One cons

"There needs to be more support."

"A drawback includes bucket storage limitations for payload data, necessitating timely extraction for thorough investigations."

"They can include integration with SAP. Currently, no vendor provides network performance monitoring in the SAP market. It is a very big market. We have around 400 customers for SAP in Korea. In the USA, there are more than 10,000 customers."

Pricing and Cost Advice

"The tool's pricing is fine."

"I believe pricing is better compared to other commercial tools."

"The solution is costly."

"It is not expensive, but sometimes, their pricing model or licensing model is not very clear. There are similar variables, such as projects or developers, and sometimes, it is a little bit confusing."

"The solution's price is high and you pay based on the number of users."

"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."

"Its price is fair. It is in or around the right spot. Ultimately, if the price is wrong, customers won't commit, but they do tend to commit. It is neither too cheap nor too expensive."

"The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."

More Checkmarx One pricing and cost advice

"When compared to other solutions, it aligns with the market average, indicating a competitive pricing level."

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

20%

Computer Software Company

13%

Manufacturing Company

10%

Government

Financial Services Firm

10%

Comms Service Provider

Manufacturing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

See all answers

What do you like most about ExtraHop Reveal(x) 360?

It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for...

See all answers

What needs improvement with ExtraHop Reveal(x) 360?

See all answers

What advice do you have for others considering ExtraHop Reveal(x) 360?

I recommend prioritizing demos over POCs when engaging with vendors. Organizing POCs involves significant time and resource investments for both parties. Instead, invest time in multiple demo sessi...

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs Checkmarx One

Compared 40% of the time

Veracode vs Checkmarx One

Compared 9% of the time

Checkmarx SAST vs Checkmarx One

Compared 7% of the time

OpenText Core Application Security vs Checkmarx One

Compared 5% of the time

OWASP Zap vs Checkmarx One

Compared 5% of the time

More Checkmarx One Competitors

ExtraHop Reveal(x) vs ExtraHop Reveal(x) 360

Compared 24% of the time

Corelight vs ExtraHop Reveal(x) 360

Compared 15% of the time

Wiz vs ExtraHop Reveal(x) 360

Compared 14% of the time

Darktrace vs ExtraHop Reveal(x) 360

Compared 13% of the time

Stellar Cyber Open XDR vs ExtraHop Reveal(x) 360

Compared 13% of the time

More ExtraHop Reveal(x) 360 Competitors

Product Reports

Buyer's Guide

Checkmarx One

August 2025

Download Checkmarx One product report

Buyer's Guide

Intrusion Detection and Prevention Software (IDPS)

July 2025

Download ExtraHop Reveal(x) 360 product report

Also Known As

No data available

ExtraHop Reveal(X) Cloud, Reveal(X) Cloud

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

Cloud is where your business operates, where it innovates, how it enables employees, and how it connects with customers. Adversaries know this, and that's why attacks against cloud assets in IaaS, PaaS, and SaaS environments are increasing. With Reveal(x) 360, you can mitigate the blast radius of advanced threats like ransomware and supply chain attacks with unified security across multicloud and hybrid environments in a single management pane.

ExtraHop Networks

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Wizards of the Coast

Buyer's Guide

Checkmarx One vs. ExtraHop Reveal(x) 360

August 2025

Free Report: Checkmarx One vs. ExtraHop Reveal(x) 360

Find out what your peers are saying about Checkmarx One vs. ExtraHop Reveal(x) 360 and other solutions. Updated: August 2025.

DOWNLOAD NOW

865,384 professionals have used our research since 2012.

See our Checkmarx One vs. ExtraHop Reveal(x) 360 report.

See our list of best Container Security vendors.

We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.