Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs NinjaOne comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Average Rating
9.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Vulnerability Management (27th), Continuous Threat Exposure Management (CTEM) (6th)
Checkmarx One
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
70
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (21st), Static Code Analysis (2nd), API Security (3rd), DevSecOps (2nd), Risk-Based Vulnerability Management (8th)
NinjaOne
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
18
Ranking in other categories
Network Monitoring Software (30th), Server Monitoring (11th), IT Service Management (ITSM) (6th), Remote Access (20th), Mobile Device Management (MDM) (5th), IT Alerting and Incident Management (10th), Remote Monitoring and Management (RMM) (1st), Patch Management (5th), MSP Backup (4th), Unified Endpoint Management (UEM) (8th)
 

Mindshare comparison

As of May 2025, in the Vulnerability Management category, the mindshare of Zafran Security is 0.6%, up from 0.0% compared to the previous year. The mindshare of Checkmarx One is 0.7%, up from 0.3% compared to the previous year. The mindshare of NinjaOne is 0.5%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
Rohit Kesharwani - PeerSpot reviewer
Provides good security analysis and security identification within the source code
We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.
Jörg Köhler - PeerSpot reviewer
Enhances remote access and integration with third-party tools
I use NinjaOne for managing smaller clients, specifically their devices and software, for small to medium businesses. I provide remote management services through NinjaOne. It allows clients to use NinjaOne for remote access to their computers for home office purposes. This feature is highly…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Zafran is an excellent tool."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"The feature that I have found most valuable is that its number of false positives is less than the other security application platforms. Its ease of use is another good feature. It also supports most of the languages."
"The most valuable feature is the application tracking reporting."
"The solution communicates where to fix the issue for the purpose of less iterations."
"The solution is always updating to continuously add items that create a level of safety from vulnerabilities. It's one of the key features they provide that's an excellent selling point. They're always ahead of the game when it comes to finding any vulnerabilities within the database."
"The product's most valuable feature is static code and supply chain effect analysis. It provides a lot of visibility."
"The setup is fairly easy. We didn't struggle with the process at all."
"The solution allows us to create custom rules for code checks."
"Helps us check vulnerabilities in our SAP Fiori application."
"The best feature of NinjaOne is the SLA system. Every IT person can check their performance, how long it takes to resolve an issue, and how many SLAs are breached."
"The most relevant feature is the monitoring, which provides built-in tools for sending commands."
"NinjaOne helps us view the status of software patching, whether the PC is locked or unlocked."
"The most valuable features of NinjaOne include remote desktop management, support and assistive tools, and screen sharing."
"NinjaOne has a feature where we can create custom scripts that we can run on devices remotely."
"The policies are probably the most valuable features. They're similar in function to Microsoft group policies where we can have it monitor certain things or push out software on a schedule. I would rate the policies eight out of 10. They're robust, I could monitor most of the things that Windows Performance Monitoring keeps tabs on."
"We can use it for remote monitoring, and it also works great as a troubleshooting tool. We are able to open up a command line or a PowerShell session remotely without having to disrupt the user. They have a limited network device monitoring capability, but for workstation servers, we have the event logs. We can do performance monitoring, system changes, software deployment, and patch management. We can also push scripts. It has a very simple web interface. There are no additional things to do there. Security is also pretty good. It does the same things that the other competitor's tools do. One of the advantages of Ninja is that they have a more capable mobile app, which allows you to see the alerts immediately. I get alerted to major critical issues."
"The software's automation tools have solved critical deployment problems for small businesses."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"I think the CxAudit tool has room for improvement. At the beginning you can choose a scan of a project, but in any event the project must be scanned again (wasting time)."
"We want to have a holistic view of the portfolio-level dashboard and not just an individual technical project level."
"Implementing a blackout time for any user or teams: Needs improvement."
"Checkmarx is not good because it has too many false positive issues."
"Checkmarx reports many false positives that we need to manually segregate and mark “Not exploitable”."
"It would be really helpful if the level of confidence was included, with respect to identified issues."
"I would like to see the DAST solution in the future."
"Checkmarx has a slightly difficult compilation with the CI/CD pipeline."
"The remote connectivity could be better. It works most of the time, but sometimes, there are issues."
"It can have more integrations with third-party providers, such as Deep Instinct. They do partner with certain antivirus or remote access tool partners, but they can increase their portfolio to have more choices."
"Improvements could be made to reduce NinjaOne's functionalities to focus more on inventory or remote help tools."
"The inclusion of XENServer and Proxmox as virtual platforms in NinjaOne is currently missing."
"The NinjaOne distribution server is highly dependent on an active directory."
"The inclusion of XENServer and Proxmox as virtual platforms in NinjaOne is currently missing."
"NinjaOne's pricing and user interface needs improvement."
"I want NinjaOne to improve the reports."
 

Pricing and Cost Advice

Information not available
"The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
"Most of my customers opted for a perpetual license. They prefer to pay the highest amount up front for the perpetual license and then pay for additional support annually."
"It is an expensive solution."
"This solution is expensive. The customized package allows you to buy additional users at any time."
"If you want more, you have to pay more. You have to pay for additional modules or functionalities."
"The solution is costly."
"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."
"Be cautious of the one-year subscription date. Once it expires, your price will go up."
"NinjaRMM uses a subscription model."
"NinjaOne is a little expensive but is still cheaper than competitors like Acronis or Veeam."
"We currently pay $1.20 per device on a monthly basis."
"I rate the solution’s pricing a five out of ten, where one is the lowest and ten is the most expensive."
"NinjaOne's price is fine since my workplace is an educational institution, so we get the product at a really good price considering that we do not pay taxes, making the prices very fair and worth the product."
"Its pricing is great."
"The pricing is reasonable and cheaper than ConnectWise."
"We got a pretty good deal. It was fairly affordable."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
12%
Manufacturing Company
7%
Government
6%
Financial Services Firm
21%
Computer Software Company
14%
Manufacturing Company
10%
Government
5%
Computer Software Company
16%
Government
8%
Retailer
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
I find that the pricing for Zafran aligns well with the comprehensive features it offers. The asset and user-based li...
What needs improvement with Zafran Security?
Zafran is a new startup. Features are continuously being added or improved. 1) Continued integrations with existing (...
What is your primary use case for Zafran Security?
We connect this to our vulnerability scanner as input, our security tools to better determine risk, and our change ma...
What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as ...
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What do you like most about NinjaOne?
NinjaOne helps us view the status of software patching, whether the PC is locked or unlocked.
What is your experience regarding pricing and costs for NinjaOne?
The price or licensing of NinjaOne is a little bit high.
What needs improvement with NinjaOne?
The network monitoring needs to be improved.
 

Overview

 

Sample Customers

Information Not Available
YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Status Pros, Mitchell and Company
Find out what your peers are saying about Checkmarx One vs. NinjaOne and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.