Checkmarx One vs ServiceNow Security Operations comparison

Checkmarx and ServiceNow are both solutions in the Risk-Based Vulnerability Management category. Checkmarx is ranked #5 with an average rating of 7.9, while ServiceNow is ranked #9 with an average rating of 7.4. Additionally, 86% of Checkmarx users are willing to recommend the solution, compared to 94% of ServiceNow users who would recommend it.

Checkmarx One

Read 70 Checkmarx One reviews

0 Views
42 Comparison Views

86% willing to recommend

ServiceNow Security Operations

Read 19 ServiceNow Security Operations reviews

135 Views
69 Comparison Views

94% willing to recommend

Checkmarx One

ServiceNow Security Operations

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Checkmarx One and ServiceNow Security Operations based on real PeerSpot user reviews.

Find out in this report how the two Risk-Based Vulnerability Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Checkmarx One vs. ServiceNow Security Operations Report (Updated: September 2024).

Buyer's Guide

Checkmarx One vs. ServiceNow Security Operations

September 2024

Download the complete report

Helped 812,628 peers since 2012

Categories and Ranking

Checkmarx One

Ranking in Risk-Based Vulnerability Management

5th

Average Rating

7.6

Reviews Sentiment

7.9

Number of Reviews

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Vulnerability Management (16th), Static Code Analysis (2nd), API Security (3rd), DevSecOps (2nd)

ServiceNow Security Operations

Ranking in Risk-Based Vulnerability Management

9th

Average Rating

8.0

Number of Reviews

Ranking in other categories

Security Incident Response (2nd), Security Orchestration Automation and Response (SOAR) (9th)

Featured Reviews

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Feb 19, 2024

Provides good security analysis and security identification within the source code

We use the solution to validate the source code and do SAST and security analysis. Checkmarx dynamics code analysis improved our software security posture by showcasing vulnerabilities within the code and identifying or providing recommendations on how to improve The solution's user interface…

Read full review

KishoreKumar4

Senior QE Lead at Cognizant

Jul 22, 2024

A low-cost and open-source tool for incident and change management

If we encounter challenges while deploying, we raise incidents. These incidents are categorized by priority: high, medium, and low. We assign an incident number and notify the relevant teams to address the issue. For instance, if we experience a problem with Cloud services or any other issue, we…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We use the solution to validate the source code and do SAST and security analysis."

"The SAST component was absolutely 100% stable."

"The most valuable feature for me is the Jenkins Plugin."

"Checkmarx has helped us deliver more secure products. We are able to do static code analysis with the tool before shipping our code to production. When the integration is in the pipeline, this tool gives us early notifications on code fixes."

"The most valuable features of Checkmarx are the SCA module and the code-checking module. Additionally, the solutions are explanatory and helpful."

"The solution allows us to create custom rules for code checks."

"One of the most valuable features is it is flexible."

"Less false positive errors as compared to any other solution."

More Checkmarx One pros

"It gives you the ability to bring data into the system. The workflows are out of the box, and it gives you the ability to auto-assign the incidents based on criteria and vulnerabilities."

"The ease of use is great."

"ServiceNow Security Operations also takes care of GRC, governance, risk and compliance, enabling it to provide risk assessment."

"What I found most valuable in ServiceNow Security Operations is that it's very useful for any incoming vulnerability. For example, if my team finds any vulnerability on servers such as the CA and CMDB integrated with ServiceNow Security Operations, my team can make some changes. My team can map the vulnerabilities found on the CA server, make the changes required, and resolve the vulnerabilities before the system is attacked. You can avoid vulnerability attacks through ServiceNow Security Operations, so this is the best feature of the solution. ServiceNow Security Operations is beneficial mainly for vulnerability response and engagement purposes."

"Multiple projects use the ServiceNow tool because it is a low-cost and open-source tool."

"The product has a very simple UI."

"My favorite feature is the application vulnerability scanner."

"We refer to the setup and installation guide provided by ServiceNow. They have good documentation, which makes it easier to handle the process."

More ServiceNow Security Operations pros

Cons

"The solution sometimes reports a false auditable code or false positive."

"Checkmarx could improve by reducing the price."

"You can't use it in the continuous delivery pipeline because the scanning takes too much time."

"Checkmarx has a slightly difficult compilation with the CI/CD pipeline."

"They can support the remaining languages that are currently not supported. They can also create a different model that can identify zero-day attacks. They can work on different patterns to identify and detect zero-day vulnerability attacks."

"It is an expensive solution."

"I think the CxAudit tool has room for improvement. At the beginning you can choose a scan of a project, but in any event the project must be scanned again (wasting time)."

"The validation process needs to be sped up."

More Checkmarx One cons

"The solution needs to make customization easier. You cannot do much customization immediately. It requires an extensive workload. If the customization process was user-friendly, it would be much better."

"There are limitations for the third-parties that are providing the inputs. They should increase the robustness of the solution."

"In future releases, I would like to add a follow-up and reminder feature. For the tickets in our queue, we could set reminders. This would help us prioritize older tickets before moving on to new ones."

"There is room for improvement in terms of developer support and documentation."

"It is challenging for the customers to understand the processes for SecOps. It needs to be simplified."

"It's very slow. When you click a button or update a field, it takes forever to actually react."

"The dashboard and playbook creation will need to improve"

"The threat intelligence module needs a better dashboard."

More ServiceNow Security Operations cons

Pricing and Cost Advice

"Checkmarx is comparatively costlier than other products, which is why some of the customers feel reluctant to go for it, though performance-wise, Checkmarx can compete with other products."

"I believe pricing is better compared to other commercial tools."

"Its price is fair. It is in or around the right spot. Ultimately, if the price is wrong, customers won't commit, but they do tend to commit. It is neither too cheap nor too expensive."

"We're using a commercial version of Checkmarx, and we paid for the solution for one year. The price is high and could be reduced."

"The tool's pricing is fine."

"It is not expensive, but sometimes, their pricing model or licensing model is not very clear. There are similar variables, such as projects or developers, and sometimes, it is a little bit confusing."

"The solution is costly."

"Be cautious of the one-year subscription date. Once it expires, your price will go up."

More Checkmarx One pricing and cost advice

"Compared to competitor tools, ServiceNow Security Operations is more affordable"

"The solution is more expensive than BMC Remedy, the other ITSM tool available in the market."

"The product is more expensive than other solutions."

"It is an expensive product."

"This product is a good value for the money."

"If you're going to implement it on your own, there would be internal costs. If you're going to implement it through a contractor or consultant, you have to pay for that."

See which vendors are best for you

Use our free recommendation engine to learn which Risk-Based Vulnerability Management solutions are best for your needs.

See recommendations

812,628 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

15%

Manufacturing Company

10%

Government

Financial Services Firm

20%

Computer Software Company

11%

Government

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

Checkmarx is not a cheap solution. For around 250 users or committers, the cost is approximately $500,000. However, the investment is justified considering the potential costs of security breaches ...

See all answers

What do you like most about ServiceNow Security Operations?

The most valuable aspect of working with ServiceNow is its meaningful and feature-rich product.

See all answers

What is your experience regarding pricing and costs for ServiceNow Security Operations?

The product is more expensive than other solutions like Archer but offers more features, making the pricing justifiable.

See all answers

What needs improvement with ServiceNow Security Operations?

One area for improvement for the product is the need to tailor and alter some codes for customization, which can cause issues during upgrades. It does not support customized operations.

See all answers

Comparisons

SonarQube vs Checkmarx One

Compared 51% of the time

Veracode vs Checkmarx One

Compared 13% of the time

Fortify on Demand vs Checkmarx One

Compared 6% of the time

Coverity vs Checkmarx One

Compared 4% of the time

Snyk vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Palo Alto Networks Cortex XSOAR vs ServiceNow Security Operations

Compared 27% of the time

Splunk SOAR vs ServiceNow Security Operations

Compared 19% of the time

Microsoft Sentinel vs ServiceNow Security Operations

Compared 18% of the time

IBM Resilient vs ServiceNow Security Operations

Compared 8% of the time

Swimlane vs ServiceNow Security Operations

Compared 5% of the time

More ServiceNow Security Operations Competitors

Product Reports

Buyer's Guide

Checkmarx One

October 2024

Download Checkmarx One product report

Buyer's Guide

ServiceNow Security Operations

September 2024

Download ServiceNow Security Operations product report

Learn More

Checkmarx

Video not available

ServiceNow

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

ServiceNow Security Operations is a cutting-edge security solution designed to elevate organizations' security incident response (SIR) processes through automation and orchestration. Going beyond traditional SOAR, this comprehensive Security Operations Suite integrates seamlessly with other ServiceNow products and offers a wide array of features. Its components include Security Incident Response (SIR), which automates incident workflows and offers pre-built playbooks; Security Configuration Compliance (SCC), continuously scanning and automating compliance tasks; Vulnerability Response (VR), prioritizing and remediating vulnerabilities; Threat Intelligence (TI), aggregating threat data for proactive threat hunting; and additional features like IT Service Management integration, Machine Learning and AI, reporting, and a mobile app. The benefits span improved incident response speed, reduced mean time to resolution, increased security posture, enhanced compliance, collaborative synergy between security and IT teams, and operational cost reductions.

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

DXC Technology, Freedom Security Alliance, Prime Therapeutics, Seton Hall University, York Risk Services

Buyer's Guide

Checkmarx One vs. ServiceNow Security Operations

September 2024

Free Report: Checkmarx One vs. ServiceNow Security Operations

Find out what your peers are saying about Checkmarx One vs. ServiceNow Security Operations and other solutions. Updated: September 2024.

DOWNLOAD NOW

812,628 professionals have used our research since 2012.

See our Checkmarx One vs. ServiceNow Security Operations report.

See our list of best Risk-Based Vulnerability Management vendors.

We monitor all Risk-Based Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.