No more typing reviews! Try our Samantha, our new voice AI agent.

Checkmarx One vs Kore.ai comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Checkmarx One
Ranking in AI Security
3rd
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
81
Ranking in other categories
Application Security Tools (2nd), Static Application Security Testing (SAST) (2nd), Vulnerability Management (12th), Container Security (15th), Static Code Analysis (2nd), API Security (5th), Dynamic Application Security Testing (DAST) (2nd), DevSecOps (3rd), Risk-Based Vulnerability Management (9th), Application Security Posture Management (ASPM) (4th)
Kore.ai
Ranking in AI Security
6th
Average Rating
7.8
Number of Reviews
16
Ranking in other categories
AI Agent Builders (7th), AI Customer Experience Personalization (7th), AI Customer Support (2nd), AI IT Support (7th)
 

Mindshare comparison

As of October 2026, in the AI Security category, the mindshare of Checkmarx One is 1.1%, down from 3.6% compared to the previous year. The mindshare of Kore.ai is 0.4%. It is calculated based on PeerSpot user engagement data.
AI Security Mindshare Distribution
ProductMindshare (%)
Checkmarx One1.1%
Kore.ai0.4%
Other98.5%
AI Security
 

Featured Reviews

Shahzad Shahzad - PeerSpot reviewer
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution
Enable secure development workflows while identifying opportunities for faster scans and improved AI guidance
Checkmarx One is a very strong platform, but there are several areas where it can improve to support modern DevSecOps workflows even better. For example, better real-time developer guidance is needed. The IDE plugin should offer richer AI-powered auto-fixes similar to SNYK Code or GitHub Copilot Security, as current guidance is good but not deeply contextual for large-scale enterprise codebases. This matters because it reduces developer friction and accelerates shift-left adoption. More transparency control over the correlation engines is another need. The correlation engine is powerful but not fully transparent. Users want to understand why vulnerabilities were correlated or de-prioritized, which helps AppSec teams trust the prioritization logic. Faster SAST scan and more language coverage is needed since SAST scan can still be slow for very large mono-repos and there is limited deep support for new language frameworks like Rust and Go, along with advanced coverage for serverless-specific frameworks. This matters because large organizations want sub-minute scans in CI/CD as cloud-native ecosystems evolve fast. A strong API security module is another area for enhancement. API security scanning could be improved with active testing, API discovery, full Swagger, OpenAPI, drift detection, and schema-based fuzzing. This is important as API attacks are one of the biggest AppSec risks in 2025. Checkmarx One is strong, but I see a few areas for improvement including faster SAST scanning for large mono-repos, deeper language framework support, more transparent correlation logic, and stronger API security that includes discovery and runtime context. The IDE plugin could offer more AI-assisted fixes, and the SBOM lifecycle tracking can evolve further. Enhancing integration with SIEM and SOAR would also make enterprise adoption smoother, and these improvements would help developers and AppSec teams move faster with more accuracy.
Judin Augustin - PeerSpot reviewer
Associate Data Scientist at Guide House
Automation has reduced large call centers and provides real-time outbound support for patients
Kore.ai is a low-code platform, and you do not necessarily have to be an expert in artificial intelligence or generative AI to use this platform. However, if you have that experience, it will be a valuable add-on. The main advantage is that it has almost every kind of plugin available to use, whether for live agents or if you want to use it as a call center. You have real-time capabilities and the most useful plugins available, with almost every kind of model available with configurations. We can configure the ML models and train them. The platform is very user-friendly with explanatory features and a great UI. One significant feature is the live testing platform with Kore.ai. When you are creating a workflow, you have an interactive, real-time testing platform that reflects every change you make. This makes it easy to debug errors or add new features. Additionally, Kore.ai has many different tools and platforms that cater to different needs, whether for a call center, normal workflow, or machine learning workflow, which is really useful. Because of Kore.ai, it was much easier than creating something manually. A low-code platform always helps, and when that platform has this much capability, it provides far more value than manual development. It was particularly helpful for our team that we could create a POC and get that project into production. Kore.ai helped our team build a generative AI outbound calling chatbot, and it truly helped our customers. If you have a hospital with a thousand employees in a call center, you might consider outsourcing. However, with Kore.ai's outbound calling capabilities, you can eliminate the outsourcing part. You do not need a thousand call center employees. You can accomplish this through automation with just one or two employees if people need to switch to agents. This represented a significant cost reduction.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of Checkmarx is the user interface, it is very easy to use, and we do not need to configure anything, we only have to scan to see the results."
"Checkmarx One has positively impacted my organization because in the past, when Checkmarx One scan was not implemented, we faced a lot of issues finding vulnerabilities inside the repository, but now, since we have integrated Checkmarx One into our repository, we can smoothly and very easily find vulnerabilities and manage those effectively."
"We have used this product to verify the dev department's code in order to minimize security holes."
"In my opinion, Checkmarx gives better results, and its protection is better than SonarQube."
"It is very useful because it fits our requirements. It is also easy to use. It is not complex, and we are satisfied with the results."
"We are using Checkmarx for analyzing threats."
"Overall, we are very satisfied with Checkmarx and it is a product that I recommend."
"Vulnerability details is valuable."
"Kore.ai offers multiple support and services, including API integration, webhook integration, and multiple channels, making it easy to design your own layout, integrate with multiple channels and webhooks, deploy quickly, and track any errors that occur, so it is a good way to start and easy to learn."
"Kore.ai is outstanding compared to other AI agent platforms such as Copilot Studio due to the centralized nature and integration of different apps within a single platform."
"Kore.ai has positively impacted my organization because we are implementors, and I would say that approximately 80% of our income comes from developed projects with Kore.ai."
"It impacted my organization by helping us move into being AI-native, and it helped a lot to show other clients that we have worked in AI."
"The best feature of Kore.ai is that it is a cost-saving tool because when we use IVR, we have to assign agents at the backend, but using Kore.ai, we can automate all of those functions."
"Kore.ai helps in operational efficiency and faster time-to-market, which is development velocity."
"Because of Kore.ai, it was much easier than creating something manually, and when that platform has this much capability, it provides far more value than manual development."
"Compared to other tools, Kore.ai provides a well-organized chatbot experience that others do not offer."
 

Cons

"Checkmarx needs improvement in its Dynamic Application Security Testing (DAST) and API security features."
"This solution is not very easily scalable, and seems to lack the capability to manage a high volume of applications."
"The integration could improve by including, for example, DevSecOps."
"Checkmarx One is strong, but I see a few areas for improvement including faster SAST scanning for large mono-repos, deeper language framework support, more transparent correlation logic, and stronger API security that includes discovery and runtime context."
"When we have many applications to check, I need to wait a long time in the queue."
"The product's reporting feature could be better. The feature works well for developers, but reports generated to be shared with external parties are poor, it lacks the details one gets when viewing the results directly from the Checkmarx One platform."
"When we first ran it on a big project, there wasn't enough memory on the computer. It originally ran with eight gigabytes, and now it runs with 32. The software stopped at some point, and while I don't think it said it ran out of memory, it just said "stopped" and something else. We had to go to the logs and send them to the integrator, and eventually, they found a memory issue in the logs and recommended increasing the memory. We doubled it once, and it didn't seem enough. We doubled it again, and it helped."
"The accessibility for customized Checkmarx rules is currently limited and should be improved."
"I would suggest incorporating pre-recorded videos in the tutorials and enhancing the documentation area to make it more user-friendly."
"One thing I have learned is the unpredictability of LLMs and how buggy Kore.ai is as a software."
"We sometimes faced challenges with the integration process due to a lack of in-depth knowledge in the documentation."
"I rated Kore.ai an 8 out of 10 because additional features could be added to it."
"I rated Kore.ai eight out of ten because of the potential for these additional improvements."
"Kore.ai can be improved by enhancing their documentation, which is currently a bit disorganized."
"To improve Kore.ai, I suggest focusing on more agentic automation, such as offering MCP kind of features with an orchestration layer for use cases."
"In support, the team is not the greatest, but it works."
 

Pricing and Cost Advice

"We're using a commercial version of Checkmarx, and we paid for the solution for one year. The price is high and could be reduced."
"The solution is costly."
"We have purchased an annual license to use this solution. The price is reasonable."
"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."
"I believe pricing is better compared to other commercial tools."
"It's relatively expensive."
"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."
"​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
Information not available
report
Use our free recommendation engine to learn which AI Security solutions are best for your needs.
915,341 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
9%
Outsourcing Company
7%
Computer Software Company
7%
Outsourcing Company
12%
Manufacturing Company
12%
Construction Company
11%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise9
Large Enterprise46
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise3
Large Enterprise14
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What is the biggest difference between Veracode and Checkmarx?
According to my experience of using both the tools in different organizations Veracode is a Cloud-native, managed AppSec platform with strong focus on ease of use, it is SaaS delivery, and provide...
What is your experience regarding pricing and costs for Checkmarx?
Checkmarx One is a premium solution, so budget accordingly. Make sure you understand how licensing scales with additional applications and users. I advise negotiating multi-year contracts or bundle...
What is your experience regarding pricing and costs for Kore.ai?
The experience with pricing, setup cost, and licensing of Kore.ai is that the price is low, and the licensing is also not costly.
What needs improvement with Kore.ai?
Kore.ai could be improved by offering more in-depth trainings and assignments with the platform itself so that anyone could learn how to use it better. We sometimes faced challenges with the integr...
What is your primary use case for Kore.ai?
Kore.ai is designed to create AI chatbots for agents working with clients, integrating agents for their main duties. I completed a personal project using Kore.ai to build an agent for university ad...
 

Comparisons

 

Overview

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Leading banks & Enterprise Companies
Find out what your peers are saying about Checkmarx One vs. Kore.ai and other solutions. Updated: September 2026.
915,341 professionals have used our research since 2012.