Checkmarx One vs Fortinet FortiDDoS vs Imperva Application Security Platform comparison

The compared Checkmarx and Fortinet solutions aren't in the same category. Checkmarx is ranked #2 in AS , with an average rating of 8.2, and holds a 9.9% mindshare in the category. Fortinet is ranked #12 in DDOS , with an average rating of 8.0, and holds a 2.3% mindshare. Additionally, 88% of Checkmarx users are willing to recommend the solution, compared to 90% of Fortinet users who would recommend it.

Checkmarx One

Read 81 Checkmarx One reviews

18,489 Views
13,497 Comparison Views

88% willing to recommend

Fortinet FortiDDoS

Read 15 Fortinet FortiDDoS reviews

1,461 Views
1,125 Comparison Views

90% willing to recommend

Imperva Application Securit...

Read 133 Imperva Application Security Platform reviews

10,598 Views
3,391 Comparison Views

95% willing to recommend

Checkmarx One

Fortinet FortiDDoS

Imperva Application Securit...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Checkmarx One, Fortinet FortiDDoS, and Imperva Application Security Platform based on real PeerSpot user reviews.

Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools.

To learn more, read our detailed Application Security Tools Report (Updated: February 2026).

Buyer's Guide

Application Security Tools

February 2026

Download the complete report

Helped 881,757 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Mindshare comparison

Application Security Tools Market Share Distribution
Product	Market Share (%)
Checkmarx One	9.9%
SonarQube	16.9%
Snyk	5.6%
Other	67.6%

Application Security Tools

Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
Product	Market Share (%)
Fortinet FortiDDoS	2.3%
Cloudflare	16.6%
Arbor DDoS	9.3%
Other	71.8%

Distributed Denial-of-Service (DDoS) Protection

Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
Product	Market Share (%)
Imperva Application Security Platform	8.2%
Cloudflare	16.6%
Arbor DDoS	9.3%
Other	65.9%

Distributed Denial-of-Service (DDoS) Protection

Featured Reviews

Shahzad Shahzad

Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution

Enable secure development workflows while identifying opportunities for faster scans and improved AI guidance

Checkmarx One is a very strong platform, but there are several areas where it can improve to support modern DevSecOps workflows even better. For example, better real-time developer guidance is needed. The IDE plugin should offer richer AI-powered auto-fixes similar to SNYK Code or GitHub Copilot Security, as current guidance is good but not deeply contextual for large-scale enterprise codebases. This matters because it reduces developer friction and accelerates shift-left adoption. More transparency control over the correlation engines is another need. The correlation engine is powerful but not fully transparent. Users want to understand why vulnerabilities were correlated or de-prioritized, which helps AppSec teams trust the prioritization logic. Faster SAST scan and more language coverage is needed since SAST scan can still be slow for very large mono-repos and there is limited deep support for new language frameworks like Rust and Go, along with advanced coverage for serverless-specific frameworks. This matters because large organizations want sub-minute scans in CI/CD as cloud-native ecosystems evolve fast. A strong API security module is another area for enhancement. API security scanning could be improved with active testing, API discovery, full Swagger, OpenAPI, drift detection, and schema-based fuzzing. This is important as API attacks are one of the biggest AppSec risks in 2025. Checkmarx One is strong, but I see a few areas for improvement including faster SAST scanning for large mono-repos, deeper language framework support, more transparent correlation logic, and stronger API security that includes discovery and runtime context. The IDE plugin could offer more AI-assisted fixes, and the SBOM lifecycle tracking can evolve further. Enhancing integration with SIEM and SOAR would also make enterprise adoption smoother, and these improvements would help developers and AppSec teams move faster with more accuracy.

Read full review

Marcos AntonioOliveira

IT Analyst at Evapco, Inc.

Reliable protection and smooth setup enhance company security

Currently, I have two firewalls, with one located in Sorocaba, model 90D, and the other in São Paulo, model 30D. They are connected by VPN. I use the firewalls for VPN and final protection for my company, and my equipment is maintained by an internet company called Multiprox The equipment works…

Read full review

reviewer1247523

Head of Sales Services Department at a comms service provider with 51-200 employees

Solution ensures website availability and proactive threat mitigation

Over the seven years, the most valuable features of Imperva DDoS that I have found are related to DDoS attacks, which are a group of attacks, and not all of them can be resolved on the endpoint level before the website. Using the web firewall before the website is a common use case to protect against malicious requests to the website. I have utilized Imperva's Intelligent Traffic Filtering feature. This feature helps me understand how the attack is progressing and what is happening inside the requests to our website. It allows me to granularly grant or deny access to certain parts of our website. This helps when we know our customers and the types of requests that can be sent from them, enabling us to block some malicious requests. Imperva DDoS has User Behavior Analytics and Threat Intelligence on its board, and this helps us to be protected proactively. Imperva DDoS connects to its database of threats, storing whole information about attacks all over the world in one simple engine. Everyone can use this feature, which can connect to this engine and get information about what is going on at the world level. That is the way to be protected at the company's level. The integration capabilities of Imperva DDoS are very easy and simple. We can run it in 2 hours.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Less false positive errors as compared to any other solution."

"Both automatic and manual code review (CxQL) are valuable."

"The main thing we find valuable about Checkmarx is the ease of use. It's easy to initiate scans and triage defects."

"Checkmarx One has positively impacted my organization, especially in our CI/CD integration, where when we try to build any feature, they are always scanned by Checkmarx before they get released."

"We use the solution for dynamic application testing."

"Checkmarx One has positively impacted our organization as we tend to find vulnerabilities very early in the development cycle."

"It is very useful because it fits our requirements. It is also easy to use. It is not complex, and we are satisfied with the results."

"The solution is always updating to continuously add items that create a level of safety from vulnerabilities. It's one of the key features they provide that's an excellent selling point. They're always ahead of the game when it comes to finding any vulnerabilities within the database."

More Checkmarx One pros

"The solution is very user-friendly and very easy to use."

"The most valuable feature is the cloud DDoS scrubbing capability."

"This solution can protect Layer 3, Layer 4 and Layer 7 attacks of applications for us."

"It allows me to see all the traffic on my network."

"The equipment works very well, and I have not encountered any issues with it. It is a good solution for my company."

"The equipment works very well, and I have not encountered any issues with it."

"The product allows the users to adjust the thresholds."

"The product's initial setup phase was really easy."

More Fortinet FortiDDoS pros

"Imperva has a complete picture of how the applications are utilizing it. It is handy. DDoS is good. It has an internally managed database. It is very easy to integrate. We have integrated it with SIEM services."

"They're quite easy to install and quite easy to set up. Clients really like that. Especially when you're dealing with the cloud, it's really easy."

"The features I have found most valuable with Imperva Web Application Firewall are account takeover protection, advanced bot protection, and API security."

"Simplifies putting everything in code."

"It has threat intelligence and we are using Incapsula. With threat intelligence, we can separate HTTP and HTTPS traffic. We can use Incapsula to send all the threat intelligence to the WAF."

"Compared to other web application firewalls in the market, Imperva does things in the most accurate way."

"The compliance is the most valuable aspect."

"It's very pretty easy to onboard the URL."

More Imperva Application Security Platform pros

Cons

"This product requires you to create your own rulesets. You have to do a lot of customization."

"Checkmarx One is often down when the cloud provider experiences issues. A more fail-tolerant solution needs to be created."

"Checkmarx being Windows only is a hindrance. Another problem is: why can't I choose PostgreSQL?"

"The pricing can get a bit expensive, depending on the company's size."

"You can't use it in the continuous delivery pipeline because the scanning takes too much time."

"The statistics module has a function that allows you to show some statistics, but I think it's limited. Maybe it needs more information."

"Its user interface could be improved and made more friendly."

"If it is a very large code base then we have a problem where we cannot scan it."

More Checkmarx One cons

"I would like to see analytics, big data."

"There aren't really any aspects of the solution we are unhappy with. It's been a positive experience overall."

"The main improvement would be to change the firewall model, however, currently, everything is fixed and working well."

"Alerts and reporting features must be improved."

"The solution can be a little more user-friendly and it can be more affordable."

"The web interface could be much better."

"The challenge lies within the customer environment, particularly in Brazil, where companies have stringent security requirements for implementing solutions."

"The primary area for improvement is the on-premises capacity limit, currently fixed at 10 GB."

More Fortinet FortiDDoS cons

"Imperva Web Application Firewall can improve by providing better features, such as improved prevention of zero-day attacks. Additionally, it should include a VR meta-analysis."

"The log analytics interface within Incapsula isn't really good. For example, if you have to get all logs from there, it's a very cumbersome process."

"Sometimes, it takes a bit of time for the technical staff of the solution to get back to our company with a resolution for our problems."

"I would like to see improvements in the pooling of threats and attacks, possibly to enlarge the scale of indicators of compromise."

"The tool needs to improve CPU and storage memory."

"It should be more user-friendly. Like other web solutions, it would be helpful to be able to easily do policy configuration and identification inside the application. Understanding the in-depth configuration of a policy is somewhat difficult for an engineer, and they can improve that."

"I don't really use it and therefore can't speak to areas of improvement."

"Support is one thing I wish Imperva could improve."

More Imperva Application Security Platform cons

Pricing and Cost Advice

"The solution's price is high and you pay based on the number of users."

"The tool's pricing is fine."

"It is a good product but a little overpriced."

"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."

"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."

"We have purchased an annual license to use this solution. The price is reasonable."

"The number of users and coverage for languages will have an impact on the cost of the license."

"For around 250 users or committers, the cost is approximately $500,000."

More Checkmarx One pricing and cost advice

"The product’s pricing needs improvement."

"The solution is reasonably priced."

"It's quite pricey."

"The cost is on par with other solutions such as Cloudflare and Akamai."

"The price of Imperva Web Application Firewalls is expensive compared to others."

"The price is high compared to other solutions like FortiWeb."

"The pricing is somewhat expensive. It is actually a huge investment when compared to other countries."

"The data packages are higher than our needs so we end up paying for data that we don't use."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."

"The tool's pricing is good."

"Imperva Web Application Firewall is expensive."

More Imperva Application Security Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

881,757 professionals have used our research since 2012.

Comparison Review

it_user68487

Security Expert with 51-200 employees

Nov 6, 2013

CloudFlare vs Incapsula: Web Application Firewall

CloudFlare vs Incapsula: Round 2 Web Application Firewall Comparative Penetration Testing Analysis Report v1.0 Summary This document contains the results of a second comparative penetration test conducted by a team of security specialists at Zero Science Lab against two cloud-based Web…

Read full review

Top Industries

By visitors reading reviews

Financial Services Firm

18%

Computer Software Company

10%

Manufacturing Company

10%

Government

Manufacturing Company

12%

Comms Service Provider

10%

Financial Services Firm

Government

Financial Services Firm

12%

Computer Software Company

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	32
Midsize Enterprise	9
Large Enterprise	46

By reviewers
Company Size	Count
Small Business	10
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	83
Midsize Enterprise	25
Large Enterprise	61

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as ...

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

Checkmarx One is a premium solution, so budget accordingly. Make sure you understand how licensing scales with additi...

See all answers

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?

Arbor would be the best bid, apart from Arbor, Palo Alto and Fortinet have good solutions. As this is an ISP, I would...

See all answers

What is your experience regarding pricing and costs for Fortinet FortiDDoS?

Fortinet FortiDDoS offers lower costs compared to other solutions. The licensing costs are annually renewed.

See all answers

What needs improvement with Fortinet FortiDDoS?

There is a need for more features that protect personal information, especially given the PDP issue in Indonesia.

See all answers

Which Web Application Firewall (WAF) would you recommend? R&S or Imperva?

Imperva is a strong choice, given their security focus and ongoing R&D into the product in areas such as bot mana...

See all answers

What do you like most about Imperva Incapsula?

We use Imperva DDoS to stop DDoS attacks and reduce the amount of unwanted queries against web services or web scraping.

See all answers

What is your experience regarding pricing and costs for Imperva DDoS?

The pricing, setup costs, and licensing of Imperva DDoS are reasonable for the amount of technical capabilities provi...

See all answers

Comparisons

SonarQube vs Checkmarx One

Compared 47% of the time

Veracode vs Checkmarx One

Compared 4% of the time

Checkmarx SAST vs Checkmarx One

Compared 4% of the time

OpenText Core Application Security vs Checkmarx One

Compared 3% of the time

OWASP Zap vs Checkmarx One

Compared 2% of the time

More Checkmarx One Competitors

Arbor DDoS vs Fortinet FortiDDoS

Compared 20% of the time

Radware DDoS vs Fortinet FortiDDoS

Compared 10% of the time

VMware NSX vs Fortinet FortiDDoS

Compared 8% of the time

Cloudflare vs Fortinet FortiDDoS

Compared 8% of the time

Check Point DDoS Protector vs Fortinet FortiDDoS

Compared 6% of the time

More Fortinet FortiDDoS Competitors

Cloudflare vs Imperva Application Security Platform

Compared 12% of the time

Akamai vs Imperva Application Security Platform

Compared 6% of the time

Fortinet FortiWeb vs Imperva Application Security Platform

Compared 5% of the time

F5 Advanced WAF vs Imperva Application Security Platform

Compared 4% of the time

AWS WAF vs Imperva Application Security Platform

Compared 3% of the time

More Imperva Application Security Platform Competitors

Product Reports

Buyer's Guide

Checkmarx One

February 2026

Download Checkmarx One product report

Buyer's Guide

Distributed Denial-of-Service (DDoS) Protection

February 2026

Download Fortinet FortiDDoS product report

Buyer's Guide

Imperva Application Security Platform

January 2026

Imperva Application Security Platform report

Download Imperva Application Security Platform product report

Also Known As

No data available

Fortinet DDoS, FortiDDos

Imperva Bot Management, Imperva Web Application Firewall, Imperva API Security

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

Distributed Denial of Service (DDoS) attacks are ever-evolving and use a variety of technologies. To successfully combat these attacks, you need a dynamic, multi-layered security solution. FortiDDoS protects from both known and zero day attacks with very low latency. It’s easy to deploy and manage, and includes comprehensive reporting and analysis tools.

Fortinet

Imperva Application Security Platform delivers comprehensive and continuous web threat protection. Renowned for its ease of use, it shields web applications and databases from various cyber threats while integrating seamlessly with cloud and on-premises environments.

Imperva Application Security Platform protects web environments by offering advanced security measures against threats like DDoS attacks, SQL injections, and cross-site scripting. As a robust web application firewall, it provides extensive monitoring and bot management capabilities. The platform integrates content delivery networks for enhanced performance and scalability, while real-time traffic analysis ensures consistent protection. Despite its strengths, improvements can be made in policy management and customization options. Users seek better integration with third-party tools and more competitive pricing models. The inclusion of AI for enhanced analytics is also anticipated.

What are the key features of Imperva Application Security Platform?

Correlated Attack Validation: Enhances threat assessment by linking related security events.
Threat Radar: Offers visibility into potential and ongoing threats.
Virtual Patching: Provides protection against vulnerabilities without immediate code changes.
IncapRules: Allows creation of custom security policies.
DDoS Protection: Defends against large-scale distributed denial-of-service attacks.
CDN Integration: Improves content delivery speed and reliability.

What benefits should users look for in reviews?

User-Friendly Administration: Simplifies setup and ongoing management tasks.
Seamless Integration: Ensures smooth operation with existing infrastructure.
Comprehensive Threat Protection: Shields digital assets from a wide range of threats.
Hands-On Support: Provides timely and effective customer service assistance.

Imperva Application Security Platform is implemented in industries needing strong database and application protection. Companies use it to enforce geolocation restrictions and manage bots, benefiting sectors like finance and e-commerce where data security and threat monitoring are critical. Its ability to protect and ensure data accessibility makes it integral to business operations prioritizing cyber resilience.

Imperva

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Black Gold Regional Schools, Amadeus Hospitality, Jefferson County, Chunghwa Telecom, City of Boroondara, Dimension Data

Hitachi, BNZ, Bitstamp, Moz, InnoGames, BTCChina, Wix, LivePerson, Zillow and more.

Buyer's Guide

Application Security Tools

February 2026

Download Free Report

Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: February 2026.

DOWNLOAD NOW

881,757 professionals have used our research since 2012.