Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs F5 Distributed Cloud Services comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 4, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Checkmarx One
Ranking in API Security
6th
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
71
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (22nd), Container Security (23rd), Static Code Analysis (3rd), Dynamic Application Security Testing (DAST) (4th), DevSecOps (5th), Risk-Based Vulnerability Management (10th), Application Security Posture Management (ASPM) (3rd)
F5 Distributed Cloud Services
Ranking in API Security
5th
Average Rating
10.0
Reviews Sentiment
8.4
Number of Reviews
2
Ranking in other categories
CDN (10th), Web Application Firewall (WAF) (20th)
 

Mindshare comparison

As of October 2025, in the API Security category, the mindshare of Checkmarx One is 5.9%, up from 4.4% compared to the previous year. The mindshare of F5 Distributed Cloud Services is 5.7%, down from 6.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
API Security Market Share Distribution
ProductMarket Share (%)
F5 Distributed Cloud Services5.7%
Checkmarx One5.9%
Other88.4%
API Security
 

Featured Reviews

Syed Hasan - PeerSpot reviewer
Partner experiences excellent technical support and seamless initial setup
In my opinion, if we are able to extract or show the report, and because everything is going towards agent tech and GenAI, it would be beneficial if it could get integrated with our code base and do the fix automatically. It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from. This would be really helpful.
FM
Protects web applications with comprehensive security features
All features are valuable. In a multi-cloud or distributed cloud, there are many protection possibilities from data to web application or API protection, including bot mitigation. This is a comprehensive package for web application security. The main benefit is Web App Security, offering a complete security package from DDoS to web application firewall, API protection, and bot mitigation.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The reports are very good because they include details on the code level, and make suggestions about how to fix the problems."
"Checkmarx offers many valuable features, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Infrastructure as Code (IAC), Supply Chain Security, and API Security."
"The report function is the solution's greatest asset."
"The tool's valuable features include integrating GPT and Copilot. Additionally, the UI web representation is very user-friendly, making navigation easy. GPT has made several improvements to my security code."
"The value you can get out of the speedy production may be worth the price tag."
"What I like best about Checkmarx is that it has fewer false positives than other products, giving you better results."
"The ability to track the vulnerabilities inside the code (origin and destination of weak variables or functions)."
"The best thing about Checkmarx is the amount of vulnerabilities that it can find compared to other free tools."
"In a multi-cloud or distributed cloud, there are many protection possibilities from data to web application or API protection, including bot mitigation."
"F5 is known for being the best load balancer in the market. Customers with an existing module can easily adopt additional modules without investing in new hardware."
"The main benefit is Web App Security, offering a complete security package from DDoS to web application firewall, API protection, and bot mitigation."
 

Cons

"It would be really helpful if the level of confidence was included, with respect to identified issues."
"Checkmarx could improve the solution reports and false positives. The false positives could be reduced. For example, we have alerts that are tagged as vulnerabilities but when you drill down they are not."
"There is nothing particular that I don't like in this solution. It can have more integrations, but the integrations that we would like are in the roadmap anyway, and they just need to deliver the roadmap. What I like about the roadmap is that it is going where it needs to go. If I were to look at the roadmap, there is nothing that is jumping out there that says to me, "Yeah. I'd like something else on the roadmap." What they're looking to deliver is what I would expect and forecast them to deliver."
"One area for improvement in Checkmarx is pricing, as it's more expensive than other products."
"The plugins for the development environment have room for improvements such as for Android Studio and X code."
"The resolutions should also be provided. For example, if the user faces any problem regarding an installation due to the internal security policies of their company, there should be a resolution offered."
"With Checkmarx, normally you need to use one tool for quality and you need to use another tool for security. I understand that Checkmarx is not in the parity space because it's totally different, but they could include some free features or recommendations too."
"Its user interface could be improved and made more friendly."
"The main issue is integration with other parts or products of F5, like on-premise WAF."
"The pricing could be adjusted to better meet the needs of typical customers in regions like Poland, where the product is considered too expensive."
"The main issue is integration with other parts or products of F5, like on-premise WAF. There are some problems, mainly from the perspective of implementation and customer expectations, which sometimes differ from reality."
 

Pricing and Cost Advice

"We're using a commercial version of Checkmarx, and we paid for the solution for one year. The price is high and could be reduced."
"The solution is costly."
"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."
"We have purchased an annual license to use this solution. The price is reasonable."
"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."
"I believe pricing is better compared to other commercial tools."
"The tool's pricing is fine."
"Be cautious of the one-year subscription date. Once it expires, your price will go up."
Information not available
report
Use our free recommendation engine to learn which API Security solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Computer Software Company
13%
Manufacturing Company
10%
Government
6%
Computer Software Company
14%
Financial Services Firm
12%
Insurance Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise9
Large Enterprise38
No data available
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What is your experience regarding pricing and costs for F5 Distributed Cloud Services?
I am not involved in sales, so I do not deal with the pricing aspect directly. I give the cost of the solution a four out of ten since it is not a cheap product.
What needs improvement with F5 Distributed Cloud Services?
It's a long way to be perfect, of course, as with all solutions. The main issue is integration with other parts or products of F5, like on-premise WAF. There are some problems, mainly from the pers...
What is your primary use case for F5 Distributed Cloud Services?
There are two main use cases for Distributed Call Services: DDoS or Distributed attacks protection and WAF web application security or firewall.
 

Overview

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Information Not Available
Find out what your peers are saying about Checkmarx One vs. F5 Distributed Cloud Services and other solutions. Updated: September 2025.
869,566 professionals have used our research since 2012.