

Checkmarx One and Radware Cloud WAF Service compete in the application security category. Checkmarx One appears to have the upper hand in features, providing comprehensive security solutions that integrate well with developers' workflows, while Radware Cloud WAF excels in web application protection and automated attack prevention.
Features: Checkmarx One offers Static Application Security Testing (SAST), Software Composition Analysis (SCA), and API security, with broad language support and ease of integration with development tools. Radware Cloud WAF Service provides DDoS protection, bot management, and automated attack prevention, focusing on application-layer defenses and blocking unknown threats.
Room for Improvement: Checkmarx One needs to address false positives and improve code scanning speed while simplifying CI/CD pipeline integration. Radware Cloud WAF Service could benefit from better SSL certificate management, enhanced integration with enterprise tools like SIEMs, and improved dashboard capabilities.
Ease of Deployment and Customer Service: Checkmarx One is typically deployed in hybrid and on-premises environments and offers direct customer support, although it varies by location. Radware Cloud WAF Service, primarily cloud-based, offers flexible deployment options and initial setup support, but ongoing customer service also varies regionally.
Pricing and ROI: Checkmarx One is notable for high pricing linked to its comprehensive features, offering modular licensing that can be favorable for enterprises. Radware Cloud WAF Service follows a mid-range pricing strategy, which might be expensive for smaller businesses, but provides significant technical benefits, reducing operational costs related to web application security.
Overall, between the fast scanning, automation, automatic reporting, and easy detection, it has reduced manual effort enough that we did not need an extra reviewer, even as our codebase or team size grew.
Based on my interactions with the clients, I can tell that there is a return on investment because if something is not profitable and it's not helping to save costs or vulnerabilities, clients wouldn't come back to renew their license year after year.
With our on-prem solution, we spent a lot of time on maintenance tasks, OS updates, and ensuring appliances ran smoothly, but with Cloud WAF, all that is managed by the cloud team, allowing us to focus on alert analysis.
We get major insights from the analytics rules and dashboards, allowing us to pinpoint main issues.
The Radware API Discovery has definitely helped us because once it was implemented, we are not facing any SLA breach issues with the customers whose network we are protecting via this service, helping us save a lot of money.
If you raise a support case with Checkmarx, it is handled smoothly.
The customer support team is amazing and they provide on-phone call, email support, and on-website support.
I have relied on Checkmarx One customer support hundreds of times for several things, and Checkmarx One support is very proactive and very responsive.
On a scale from one to ten, I would rate the technical support that Radware provides for Cloud WAF Service a perfect ten.
I would give the Radware technical support a ten out of ten. They are definitely outstanding.
On a scale from one to ten, I would rate customer support a ten.
Approximately four billion lines of code are being scanned monthly.
Since it is cloud-based, the infrastructure and PaaS, IaaS, and SaaS are taken care of by the cloud marketplace.
Checkmarx One's scalability has changed my organization because the strong collaboration between the development and security team helps us to do things much faster.
The scalability of Radware Cloud WAF Service rates as a perfect ten out of ten, as we haven't encountered any scaling issues.
The scalability of the Radware Cloud WAF Service deserves a full ten, as it is definitely scalable.
In terms of scalability, it's also a 10 out of 10 because we are using Radware Cloud WAF Service for more than 60,000 employees in our organization, and it works perfectly fine.
I would rate the stability of this solution a nine on a scale of 1 to 10 where one is low stability and 10 is high.
Checkmarx One is often down when the cloud provider experiences issues.
The stability of Radware Cloud WAF Service is excellent, and I would rate it as a ten.
The stability of Radware Cloud WAF Service is perfect; I would rate it a ten out of ten.
Regarding stability, I can say that in the last one and a half years, I haven't seen any downtime.
Integration into the IDE being used would be beneficial so that code does not need to be uploaded to the website and an IDE-friendly report could be generated.
It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from.
If you can improve the speed optimization, it takes around 30 to 40 minutes for checking a build. If you can make it within five minutes or 10 minutes, that would be great.
It would be beneficial if we could perform POST requests and integrate our applications more effectively.
The documentation is not up to par, as while the platform's system is robust, the documentation, particularly for API integration, could be more developer-friendly with real-world use cases.
To improve Radware Cloud WAF Service, I believe it should enable full application and API coverage to ensure all web applications and APIs, including internal and legacy web services, are onboarded.
For a small team under 50 developers, normal expenses come under 30 to 60K.
Due to the number of years I've implemented Checkmarx One, there are rebates and discounts from the OEM which makes it a lot more profitable.
The pricing should be reasonable, matching what we are paying for.
Pricing could be more competitive, especially for smaller customers.
I find Radware Cloud WAF to be a quite expensive product compared to others.
The pricing is not cheap; it is expensive, but it is effective.
Since replacing the previous tool, SAST and SCA scans are conducted in a couple of minutes instead of hours or days.
The best features Checkmarx One offers, over the past years, include broad language and technical support that Checkmarx provides, covering most languages.
Checkmarx One has positively impacted our organization as we tend to find vulnerabilities very early in the development cycle.
The most important aspect of Radware Cloud WAF is that it is over the cloud, offering a comprehensive solution that includes WAF, API protection, bots, and Layer 7 DDoS.
It has features such as API security that protect against advanced attacks, including business logic attacks.
The automated analytics for looking at events in Radware Cloud WAF Service are working for us; the automatic event correlation is very beneficial to analyze how the alerts and events occur and visualize the patterns of network traffic and other traffic going in and out from the application via Radware Cloud WAF Service.
| Product | Mindshare (%) |
|---|---|
| Radware Cloud WAF Service | 1.9% |
| Checkmarx One | 7.1% |
| Other | 91.0% |


| Company Size | Count |
|---|---|
| Small Business | 32 |
| Midsize Enterprise | 9 |
| Large Enterprise | 46 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 22 |
| Large Enterprise | 55 |
Checkmarx One delivers robust security through seamless integration with SCM and CI/CD tools, ensuring reliable SAST and SCA. Primarily used by organizations for vulnerability detection, it supports cloud and on-premises deployment to enhance secure coding practices.
Checkmarx One provides organizations with comprehensive tools for secure software development, integrating effectively with CI/CD pipelines to scan thousands of applications. Its capabilities extend to identifying vulnerabilities in both code bases and third-party software. Enhancing workflow by supporting SCM solutions, it assists in maintaining secure coding standards and compliance. While excelling in various areas, it requires improvements in scan speed, reduction of false positives, and broader platform integration, particularly for COBOL and Swift. Its pricing model is noted as high, and demand exists for better tutorials and documentation.
What are the key features of Checkmarx One?Industries implement Checkmarx One for secure coding compliance and vulnerability management across varying environments, choosing between cloud and on-premises deployment based on requirements. Its extensive language support and integration with DevSecOps practices make it a popular choice for organizations aiming to enhance software security.
Radware Cloud WAF Service empowers organizations with robust security, offering solutions like bot management and DDoS protection. It streamlines integration, enhancing scalability and providing a secure environment, but there is room for improved reporting and documentation.
Radware Cloud WAF Service stands out for its ability to protect applications across cloud environments such as AWS and Azure. With bot management, DDoS protection, and API discovery, it offers a multi-layered defense strategy. The scalable integrations and content delivery network accelerate processes, while machine learning minimizes false positives and identifies elusive threats. Users face challenges with reporting and technical support, and improvements are needed for the dashboard and SSL certificate processes. Although language support is limited, companies can secure applications by configuring custom rules and monitoring threats.
What are the key features of Radware Cloud WAF Service?In industries like finance and e-commerce, Radware Cloud WAF Service is crucial in protecting sensitive customer data and maintaining transactional integrity. By deploying on major cloud platforms, organizations can enhance application availability and security. Financial institutions rely on API discovery for regulatory compliance, while e-commerce companies utilize features to mitigate threats like SQL injections, ensuring a safe transactional environment.
We monitor all API Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.