Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs NetScaler comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Checkmarx One
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
71
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (24th), Static Code Analysis (3rd), API Security (5th), DevSecOps (5th), Risk-Based Vulnerability Management (9th)
NetScaler
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
107
Ranking in other categories
Application Delivery Controllers (ADC) (1st), Network Management Applications (5th), Web Application Firewall (WAF) (14th)
 

Mindshare comparison

Checkmarx One and NetScaler aren’t in the same category and serve different purposes. Checkmarx One is designed for Application Security Tools and holds a mindshare of 9.9%, down 14.3% compared to last year.
NetScaler, on the other hand, focuses on Application Delivery Controllers (ADC), holds 14.6% mindshare, down 16.3% since last year.
Application Security Tools
Application Delivery Controllers (ADC)
 

Featured Reviews

Syed Hasan - PeerSpot reviewer
Partner experiences excellent technical support and seamless initial setup
In my opinion, if we are able to extract or show the report, and because everything is going towards agent tech and GenAI, it would be beneficial if it could get integrated with our code base and do the fix automatically. It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from. This would be really helpful.
DEMİRHAN ÇAVUŞOĞLU - PeerSpot reviewer
A tool for centralized management including inventory and sales tracking
Citrix ADM has the ability to implement policies to tighten security. For instance, you can restrict access to your network from outsiders or lack necessary security measures such as antivirus programs. Additionally, there's the Delivery Controller, which allows for comprehensive monitoring and management tasks such as remote restarts, maintenance, and registration. Another essential component is the Director, which provides detailed insights into sessions, including identifying session failures, connection issues, user lockouts, etc. It presents a list of problems to address, enabling you to click on them and resolve them efficiently.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Helps us check vulnerabilities in our SAP Fiori application."
"The main advantage of this solution is its centralized reporting functionality, which lets us track issues, then see and report on the priorities via a web portal."
"We were using HPE Security Fortify to scan code for security vulnerabilities, but it can scan only after a successful compile. If the code has dependencies or build errors, the scan fails. With Checkmarx, pre-compile scanning is seamless. This allows us to scan more code."
"The administration in Checkmarx is very good."
"The solution has good performance, it is able to compute in 10 to 15 minutes."
"The solution communicates where to fix the issue for the purpose of less iterations."
"The most valuable features of Checkmarx are the SCA module and the code-checking module. Additionally, the solutions are explanatory and helpful."
"The feature that I have found most valuable is that its number of false positives is less than the other security application platforms. Its ease of use is another good feature. It also supports most of the languages."
"The NetScaler appliance has provided a lot of customers with greater high availability for their enterprise applications within a single site and across multiple locations."
"The web application firewalling component is a powerful feature."
"We appreciate that this solution facilitates our access to Citrix internet."
"We like the periodic upgrades and backups, also made via ADMs, and it makes our environment much more robust and reliable."
"Compared to other solutions, Citrix ADC is much more robust in terms of the native integration to cloud platforms. It is far more robust from an operational point of view as well."
"The best feature of Citrix is its track record of stability in its features."
"My customers have told me that the performance of this solution is good."
"I would say the rewriting and redirection functions are must-have's for us."
 

Cons

"Updating and debugging of queries is not very convenient."
"The integration could improve by including, for example, DevSecOps."
"Meta data is always needed."
"I would like to see the rate of false positives reduced."
"Its user interface could be improved and made more friendly."
"The plugins for the development environment have room for improvements such as for Android Studio and X code."
"They should make it more container-friendly and optimized for the CI pipeline. They should make it a little less heavy. Right now, it requires a SQL database, and the way the tool works is that it has an engine and then it has an analysis database in which it stores the information. So, it is pretty heavy from that perspective because you have to have a full SQL Server. They're working on something called Checkmarx Light, which is a slim-down version. They haven't released it yet, but that's what we need. There should be something a little more slimmed down that can just run the analysis and output the results in a format that's readable as opposed to having a full, really big, and thick deployment with a full database server."
"Checkmarx is not good because it has too many false positive issues."
"Should offer more flexible cost-effective licensing for small to medium sized organizations."
"Some features of Citrix ADM are available on the cloud, which could really be helpful if they were available on an on-premise version."
"If one device or switch fails, the failover to another device is not seamless which is painful."
"Deployment is complicated."
"The reporting is not so good. They don't have an application to connect the logs."
"Citrix ADC is a complex product, and it takes time to understand these things. But the documentation is poor, and the deployment is difficult. Integration could also be better because what I find is that you cannot easily integrate the panel in the second sector. What I have found is that in the last index, there is a limitation when getting validated. Technical support could also be better."
"In every release - and it doesn't matter if it's a minor release or a major release - they keep moving things around and they keep changing the mechanism. So certain things can work in one version one way, and everything works really well, then when you upgrade it to the next version, it breaks everything because they have a new way of doing it."
"I feel that Citrix NetScaler's customer support needs to improve."
 

Pricing and Cost Advice

"It is an expensive solution."
"The solution is costly."
"The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
"This solution is expensive. The customized package allows you to buy additional users at any time."
"The price of Checkmarx could be reduced to match their competitors, it is expensive."
"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."
"We have purchased an annual license to use this solution. The price is reasonable."
"Be cautious of the one-year subscription date. Once it expires, your price will go up."
"It is very pricey, but we get it. If you need the best, money shouldn't be a problem."
"The license for Citrix NetScaler is on an annual basis and it is reasonably priced."
"The tool is cheap."
"We have a yearly licencing fee, and there are no additional costs."
"We have all the features and functions of Citrix because we have a premium license."
"Licensing is adequate. I wanted to have a more prominent license, but until I do they don't give enough support. The additional cost would be too much."
"You get the value for your money. There aren't any hidden fees."
"The licensing costs for this solution vary depending on which model is being used."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
862,624 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
20%
Computer Software Company
14%
Manufacturing Company
10%
Government
6%
Computer Software Company
16%
Financial Services Firm
11%
Government
9%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What do you like most about Citrix ADC?
The most valuable feature for us is the application firewalling in Citrix NetScaler, ensuring only valid traffic enters our environment.
What is your experience regarding pricing and costs for Citrix ADC?
After deployment, Citrix Netscaler shifted to a subscription-based license scheme for support, which is slightly more expensive.
What needs improvement with Citrix ADC?
Citrix NetScaler is a robust product, but mastering it requires significant learning and training due to its complexity. While it could be easier to manage, it is like transitioning from driving a ...
 

Also Known As

No data available
Citrix ADC, Citrix NetScaler VPX, NetScaler Console, NetScaler Web Application Firewall
 

Overview

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
ABB Schweiz, Aer Lingus, AIDS Healthcare Foundation, Amnet Technology Solutions, Aramex International, Ascenty, Atos, Autodesk
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools. Updated: July 2025.
862,624 professionals have used our research since 2012.