Checkmarx One vs Fortinet FortiDDoS vs Imperva Application Security Platform comparison

The compared Checkmarx and Fortinet solutions aren't in the same category. Checkmarx is ranked #2 in AS , with an average rating of 8.2, and holds a 9.9% mindshare in the category. Fortinet is ranked #12 in DDOS , with an average rating of 8.0, and holds a 2.3% mindshare. Additionally, 88% of Checkmarx users are willing to recommend the solution, compared to 90% of Fortinet users who would recommend it.

Checkmarx One

Read 81 Checkmarx One reviews

18,489 Views
13,497 Comparison Views

88% willing to recommend

Fortinet FortiDDoS

Read 15 Fortinet FortiDDoS reviews

1,461 Views
1,125 Comparison Views

90% willing to recommend

Imperva Application Securit...

Read 133 Imperva Application Security Platform reviews

10,598 Views
3,391 Comparison Views

95% willing to recommend

Checkmarx One

Fortinet FortiDDoS

Imperva Application Securit...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Checkmarx One, Fortinet FortiDDoS, and Imperva Application Security Platform based on real PeerSpot user reviews.

Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools.

To learn more, read our detailed Application Security Tools Report (Updated: February 2026).

Buyer's Guide

Application Security Tools

February 2026

Download the complete report

Helped 881,757 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Mindshare comparison

Application Security Tools Market Share Distribution
Product	Market Share (%)
Checkmarx One	9.9%
SonarQube	16.9%
Snyk	5.6%
Other	67.6%

Application Security Tools

Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
Product	Market Share (%)
Fortinet FortiDDoS	2.3%
Cloudflare	16.6%
Arbor DDoS	9.3%
Other	71.8%

Distributed Denial-of-Service (DDoS) Protection

Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
Product	Market Share (%)
Imperva Application Security Platform	8.2%
Cloudflare	16.6%
Arbor DDoS	9.3%
Other	65.9%

Distributed Denial-of-Service (DDoS) Protection

Featured Reviews

Shahzad Shahzad

Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution

Enable secure development workflows while identifying opportunities for faster scans and improved AI guidance

Checkmarx One is a very strong platform, but there are several areas where it can improve to support modern DevSecOps workflows even better. For example, better real-time developer guidance is needed. The IDE plugin should offer richer AI-powered auto-fixes similar to SNYK Code or GitHub Copilot Security, as current guidance is good but not deeply contextual for large-scale enterprise codebases. This matters because it reduces developer friction and accelerates shift-left adoption. More transparency control over the correlation engines is another need. The correlation engine is powerful but not fully transparent. Users want to understand why vulnerabilities were correlated or de-prioritized, which helps AppSec teams trust the prioritization logic. Faster SAST scan and more language coverage is needed since SAST scan can still be slow for very large mono-repos and there is limited deep support for new language frameworks like Rust and Go, along with advanced coverage for serverless-specific frameworks. This matters because large organizations want sub-minute scans in CI/CD as cloud-native ecosystems evolve fast. A strong API security module is another area for enhancement. API security scanning could be improved with active testing, API discovery, full Swagger, OpenAPI, drift detection, and schema-based fuzzing. This is important as API attacks are one of the biggest AppSec risks in 2025. Checkmarx One is strong, but I see a few areas for improvement including faster SAST scanning for large mono-repos, deeper language framework support, more transparent correlation logic, and stronger API security that includes discovery and runtime context. The IDE plugin could offer more AI-assisted fixes, and the SBOM lifecycle tracking can evolve further. Enhancing integration with SIEM and SOAR would also make enterprise adoption smoother, and these improvements would help developers and AppSec teams move faster with more accuracy.

Read full review

Marcos AntonioOliveira

IT Analyst at Evapco, Inc.

Reliable protection and smooth setup enhance company security

Currently, I have two firewalls, with one located in Sorocaba, model 90D, and the other in São Paulo, model 30D. They are connected by VPN. I use the firewalls for VPN and final protection for my company, and my equipment is maintained by an internet company called Multiprox The equipment works…

Read full review

reviewer1247523

Head of Sales Services Department at a comms service provider with 51-200 employees

Solution ensures website availability and proactive threat mitigation

Over the seven years, the most valuable features of Imperva DDoS that I have found are related to DDoS attacks, which are a group of attacks, and not all of them can be resolved on the endpoint level before the website. Using the web firewall before the website is a common use case to protect against malicious requests to the website. I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website. It allows me to granularly grant or deny access to certain parts of our website. This helps when we know our customers and the types of requests that can be sent from them, enabling us to block some malicious requests. Imperva DDoS has User Behavior Analytics and Threat Intelligence on its board, and this helps us to be protected proactively. Imperva DDoS connects to its database of threats, storing whole information about attacks all over the world in one simple engine. Everyone can use this feature, which can connect to this engine and get information about what is going on at the world level. That is the way to be protected at the company's level. The integration capabilities of Imperva DDoS are very easy and simple. We can run it in 2 hours.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The main thing we find valuable about Checkmarx is the ease of use. It's easy to initiate scans and triage defects."

"I have seen a return on investment from Checkmarx One."

"Checkmarx has helped us deliver more secure products. We are able to do static code analysis with the tool before shipping our code to production. When the integration is in the pipeline, this tool gives us early notifications on code fixes."

"The features and technologies are very good. The flexibility and the roadmap have also been very good. They're at the forefront of delivering the additional capabilities that are required with cloud delivery, etc. Their ability to deliver what customers require and when they require is very important."

"Overall, I use Checkmarx One as a strategic control point to improve developer velocity while strengthening application security across the full software lifecycle."

"The most valuable feature is the simple user interface."

"We use the solution to validate the source code and do SAST and security analysis."

"Checkmarx One has definitely helped us to save time and reduce the need for additional security resources, meaning employees."

More Checkmarx One pros

"Packet inspection has been effective for mitigating DDoS attacks."

"The equipment works very well, and I have not encountered any issues with it."

"It allows me to see all the traffic on my network."

"It is a user-friendly product in terms of monitoring and updating policies."

"The product allows the users to adjust the thresholds."

"The solution already has security profiles and it can protect from DDoS attacks and other kinds of attacks."

"This solution can protect Layer 3, Layer 4 and Layer 7 attacks of applications for us."

"We have researched them all, and it's a good solution all around."

More Fortinet FortiDDoS pros

"I am impressed with the product's scalability, availability, easy management, and security. We were able to integrate the product with Azure and Sentinel."

"Provides Anti-DDoS protection, as well as other protections like SQL injection, Cross-Site Scripting, and antiscanner. These types of protection are valuable to the business due to the daily attacks on our portals, and that often cannot be seen without a tool like this."

"I like the user-friendly interface."

"We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping."

"Configuration for different application sources is most valuable. We can segregate the traffic that an application is carrying and identify the sizing in Imperva."

"It fits our requirements, as well as our budget."

"Imperva WAF's strongest features are the detection of web application threats and vulnerabilities in the source code."

"There are some features that are configured by default, so even without doing much, it can still provide a level of protection."

More Imperva Application Security Platform pros

Cons

"You can't use it in the continuous delivery pipeline because the scanning takes too much time."

"The solution's user interface could be improved because it seems outdated."

"Checkmarx could improve the solution reports and false positives. The false positives could be reduced. For example, we have alerts that are tagged as vulnerabilities but when you drill down they are not."

"Licensing models and Swift language support are the aspects in which this product needs to improve. Swift is a new language, in which major customers require support for lower prices."

"We have received some feedback from our customers who are receiving a large number of false positives."

"It provides us with quite a handful of false positive issues. If Checkmarx could reduce this number, it would be a great tool to use."

"The cost per user is high and should be reduced."

"There is nothing particular that I don't like in this solution. It can have more integrations, but the integrations that we would like are in the roadmap anyway, and they just need to deliver the roadmap. What I like about the roadmap is that it is going where it needs to go. If I were to look at the roadmap, there is nothing that is jumping out there that says to me, "Yeah. I'd like something else on the roadmap." What they're looking to deliver is what I would expect and forecast them to deliver."

More Checkmarx One cons

"I find that there have been issues in the past year with the solution hanging. It freezes often."

"The solution can be a little more user-friendly and it can be more affordable."

"I would like to see analytics, big data."

"There aren't really any aspects of the solution we are unhappy with. It's been a positive experience overall."

"The primary area for improvement is the on-premises capacity limit, currently fixed at 10 GB."

"All the thresholds that need to be configured should be included in the default so that user will not forget or misconfigure."

"The web interface could be much better."

"The only thing they need to do is to automate it. Today, you must create tools that do not require the use of an expert or anyone with special skills."

More Fortinet FortiDDoS cons

"Some of the features should be included in the next release is a file integrating monitoring tool. This feature should be improved."

"I am not sure if this application has a policy where you can create your custom policy and run it as our firewall. We should have some ability to also create some custom policy, then run it as a firewall."

"It needs to be improved every time there are new attacks."

"The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process."

"The signature updates could be faster. Sometimes we have to upload signatures to the Imperva portal for checking and analysis before we can use them."

"There's always room for improvement. Occasionally, there might be false-positive alerts."

"It would be beneficial to include vulnerability management in the solution, similar to what they have for their on-premise solution."

"The cost could be lower; our end clients need to have a high budget to purchase this solution."

More Imperva Application Security Platform cons

Pricing and Cost Advice

"We're using a commercial version of Checkmarx, and we paid for the solution for one year. The price is high and could be reduced."

"For around 250 users or committers, the cost is approximately $500,000."

"Checkmarx is comparatively costlier than other products, which is why some of the customers feel reluctant to go for it, though performance-wise, Checkmarx can compete with other products."

"It is a good product but a little overpriced."

"The solution is costly."

"It is the right price for quality delivery."

"The average deal size was usually anywhere between $120K to $175K on an annual basis, which could be divided across 12 months."

"Most of my customers opted for a perpetual license. They prefer to pay the highest amount up front for the perpetual license and then pay for additional support annually."

More Checkmarx One pricing and cost advice

"The solution is reasonably priced."

"It's quite pricey."

"The product’s pricing needs improvement."

"For enterprise contracts you will be in touch with a dedicated account manager who will guide you regarding licensing."

"There are a couple of different licensing models."

"It's an excellent product, but it can be very costly."

"The pricing is somewhat expensive. It is actually a huge investment when compared to other countries."

"Imperva Web Application Firewall price is higher compared to other solutions. However, everything is included in the price."

"Licensing can range from one to twenty thousand dollars annually. Additionally, some features, including software support, require an annual subscription as well."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."

"Imperva Web Application Firewall is expensive."

More Imperva Application Security Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

881,757 professionals have used our research since 2012.

Comparison Review

it_user68487

Security Expert with 51-200 employees

Nov 6, 2013

CloudFlare vs Incapsula: Web Application Firewall

CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

18%

Computer Software Company

10%

Manufacturing Company

10%

Government

Manufacturing Company

12%

Comms Service Provider

10%

Financial Services Firm

Government

Financial Services Firm

12%

Computer Software Company

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	32
Midsize Enterprise	9
Large Enterprise	46

By reviewers
Company Size	Count
Small Business	10
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	83
Midsize Enterprise	25
Large Enterprise	61

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as ...

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

Checkmarx One is a premium solution, so budget accordingly. Make sure you understand how licensing scales with additi...

See all answers

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?

Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would...

See all answers

What is your experience regarding pricing and costs for Fortinet FortiDDoS?

Fortinet FortiDDoS offers lower costs compared to other solutions. The licensing costs are annually renewed.

See all answers

What needs improvement with Fortinet FortiDDoS?

There is a need for more features that protect personal information, especially given the PDP issue in Indonesia.

See all answers

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?

Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...

See all answers

What do you like most about Imperva Incapsula?

We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.

See all answers

What is your experience regarding pricing and costs for Imperva DDoS?

The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...

See all answers

Comparisons

SonarQube vs Checkmarx One

Compared 47% of the time

Veracode vs Checkmarx One

Compared 4% of the time

Checkmarx SAST vs Checkmarx One

Compared 4% of the time

OpenText Core Application Security vs Checkmarx One

Compared 3% of the time

OWASP Zap vs Checkmarx One

Compared 2% of the time

More Checkmarx One Competitors

Arbor DDoS vs Fortinet FortiDDoS

Compared 20% of the time

Radware DDoS vs Fortinet FortiDDoS

Compared 10% of the time

VMware NSX vs Fortinet FortiDDoS

Compared 8% of the time

Cloudflare vs Fortinet FortiDDoS

Compared 8% of the time

Check Point DDoS Protector vs Fortinet FortiDDoS

Compared 6% of the time

More Fortinet FortiDDoS Competitors

Cloudflare vs Imperva Application Security Platform

Compared 12% of the time

Akamai vs Imperva Application Security Platform

Compared 6% of the time

Fortinet FortiWeb vs Imperva Application Security Platform

Compared 5% of the time

F5 Advanced WAF vs Imperva Application Security Platform

Compared 4% of the time

AWS WAF vs Imperva Application Security Platform

Compared 4% of the time

More Imperva Application Security Platform Competitors

Product Reports

Buyer's Guide

Checkmarx One

February 2026

Download Checkmarx One product report

Buyer's Guide

Distributed Denial-of-Service (DDoS) Protection

February 2026

Download Fortinet FortiDDoS product report

Buyer's Guide

Imperva Application Security Platform

January 2026

Imperva Application Security Platform report

Download Imperva Application Security Platform product report

Also Known As

No data available

Fortinet DDoS, FortiDDos

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

Distributed Denial of Service (DDoS) attacks are ever-evolving and use a variety of technologies. To successfully combat these attacks, you need a dynamic, multi-layered security solution. FortiDDoS protects from both known and zero day attacks with very low latency. It’s easy to deploy and manage, and includes comprehensive reporting and analysis tools.

Fortinet

Imperva Application Security Platform delivers comprehensive and continuous web threat protection. Renowned for its ease of use, it shields web applications and databases from various cyber threats while integrating seamlessly with cloud and on-premises environments.

Imperva Application Security Platform protects web environments by offering advanced security measures against threats like DDoS attacks, SQL injections, and cross-site scripting. As a robust web application firewall, it provides extensive monitoring and bot management capabilities. The platform integrates content delivery networks for enhanced performance and scalability, while real-time traffic analysis ensures consistent protection. Despite its strengths, improvements can be made in policy management and customization options. Users seek better integration with third-party tools and more competitive pricing models. The inclusion of AI for enhanced analytics is also anticipated.

What are the key features of Imperva Application Security Platform?

Correlated Attack Validation: Enhances threat assessment by linking related security events.
Threat Radar: Offers visibility into potential and ongoing threats.
Virtual Patching: Provides protection against vulnerabilities without immediate code changes.
IncapRules: Allows creation of custom security policies.
DDoS Protection: Defends against large-scale distributed denial-of-service attacks.
CDN Integration: Improves content delivery speed and reliability.

What benefits should users look for in reviews?

User-Friendly Administration: Simplifies setup and ongoing management tasks.
Seamless Integration: Ensures smooth operation with existing infrastructure.
Comprehensive Threat Protection: Shields digital assets from a wide range of threats.
Hands-On Support: Provides timely and effective customer service assistance.

Imperva Application Security Platform is implemented in industries needing strong database and application protection. Companies use it to enforce geolocation restrictions and manage bots, benefiting sectors like finance and e-commerce where data security and threat monitoring are critical. Its ability to protect and ensure data accessibility makes it integral to business operations prioritizing cyber resilience.

Imperva

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.

Buyer's Guide

Application Security Tools

February 2026

Download Free Report

Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: February 2026.

DOWNLOAD NOW

881,757 professionals have used our research since 2012.