Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs Spirent CyberFlood comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Checkmarx One
Ranking in Application Security Tools
3rd
Ranking in Static Application Security Testing (SAST)
3rd
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
71
Ranking in other categories
Vulnerability Management (24th), Static Code Analysis (3rd), API Security (5th), DevSecOps (4th), Risk-Based Vulnerability Management (9th)
Spirent CyberFlood
Ranking in Application Security Tools
47th
Ranking in Static Application Security Testing (SAST)
31st
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Application Security Tools category, the mindshare of Checkmarx One is 10.0%, down from 14.5% compared to the previous year. The mindshare of Spirent CyberFlood is 0.2%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Syed Hasan - PeerSpot reviewer
Partner experiences excellent technical support and seamless initial setup
In my opinion, if we are able to extract or show the report, and because everything is going towards agent tech and GenAI, it would be beneficial if it could get integrated with our code base and do the fix automatically. It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from. This would be really helpful.
Jos Badimo - PeerSpot reviewer
Test assurance improves compliance and products with good performance
The user interface could be improved to facilitate easier navigation. The most significant issue I encounter with the solution is the user interface. It would be beneficial if I could remain on one screen most of the time. Even if the system navigates me to another screen, it should effectively return me to the main screen.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product's most valuable feature is static code and supply chain effect analysis. It provides a lot of visibility."
"The main advantage of this solution is its centralized reporting functionality, which lets us track issues, then see and report on the priorities via a web portal."
"Checkmarx offers many valuable features, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Infrastructure as Code (IAC), Supply Chain Security, and API Security."
"The identification of verification-related security vulnerabilities is really important and one of the key things. It also identifies vulnerabilities for any kind of third-party tool coming into the system or any third-party tools that you are using, which is very useful for avoiding random hacking."
"The setup is very easy. There is a lot of information in the documents which makes the install not difficult at all."
"It is a stable product."
"Vulnerability details is valuable."
"Overall, the ability to find vulnerabilities in the code is better than the tool that we were using before."
"CyberFlood is flexible."
"The testing compliance feature is particularly impressive."
"The testing compliance feature is particularly impressive."
"Our customers use it to check for unauthorized file transfer."
"The feature I find most valuable is the traffic generator."
"CyberFlood's best features are its user-friendliness and scheduling function."
 

Cons

"The resolutions should also be provided. For example, if the user faces any problem regarding an installation due to the internal security policies of their company, there should be a resolution offered."
"The Dynamic Application Security Testing (DAST) feature should be better."
"Checkmarx has a slightly difficult compilation with the CI/CD pipeline."
"Checkmarx reports many false positives that we need to manually segregate and mark “Not exploitable”."
"I can't create a business case with multiple-factor authentication."
"Checkmarx needs to be more scalable for large enterprise companies."
"Checkmarx could improve the solution reports and false positives. The false positives could be reduced. For example, we have alerts that are tagged as vulnerabilities but when you drill down they are not."
"They could work to improve the user interface. Right now, it really is lacking."
"The initial setup is not straightforward and can be quite challenging."
"The solution needs more ports, more speed, and more gigabytes."
"Sometimes, when you configure parameters the hardware can't run, it will get stuck at those points without telling you what happened. It would be helpful if the error reporting provided more details about why the test setting is not running. It would be nice if there were a space in the hardware module for you to add some external hardware for more rigorous testing."
"CyberFlood's accessibility and support for multiple browsers could be better."
"I would also like to see updates on a more frequent schedule."
"The user interface could be improved to facilitate easier navigation."
 

Pricing and Cost Advice

"​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."
"Its price is fair. It is in or around the right spot. Ultimately, if the price is wrong, customers won't commit, but they do tend to commit. It is neither too cheap nor too expensive."
"The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
"The average deal size was usually anywhere between $120K to $175K on an annual basis, which could be divided across 12 months."
"The tool's pricing is fine."
"I believe pricing is better compared to other commercial tools."
"We're using a commercial version of Checkmarx, and we paid for the solution for one year. The price is high and could be reduced."
"CyberFlood is reasonably priced."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
856,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Computer Software Company
14%
Manufacturing Company
10%
Government
6%
Manufacturing Company
16%
Computer Software Company
14%
Comms Service Provider
10%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What needs improvement with Spirent CyberFlood?
The user interface could be improved to facilitate easier navigation. The most significant issue I encounter with the solution is the user interface. It would be beneficial if I could remain on one...
What is your primary use case for Spirent CyberFlood?
I have been using the solution for a year now. The customers I work with are focused on both custom test assurance and test automation. The solution is utilized in the financial services sector and...
What advice do you have for others considering Spirent CyberFlood?
The language barrier and time difference pose significant issues with customer support. The price is competitive. The biggest benefits I find are test assurance, the reliability of the test results...
 

Also Known As

No data available
CyberFlood Virtual, Spirent Mu Dynamics Application Security Testing, Mu Dynamics Application Security Testing
 

Overview

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Digicel
Find out what your peers are saying about Checkmarx One vs. Spirent CyberFlood and other solutions. Updated: June 2025.
856,873 professionals have used our research since 2012.