Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs Sweet Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Ranking in Vulnerability Management
5th
Average Rating
8.8
Reviews Sentiment
7.9
Number of Reviews
115
Ranking in other categories
Cloud and Data Center Security (2nd), Container Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd)
Checkmarx One
Ranking in Vulnerability Management
22nd
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
71
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Container Security (23rd), Static Code Analysis (3rd), API Security (6th), Dynamic Application Security Testing (DAST) (4th), DevSecOps (5th), Risk-Based Vulnerability Management (10th), Application Security Posture Management (ASPM) (3rd)
Sweet Security
Ranking in Vulnerability Management
34th
Average Rating
9.0
Reviews Sentiment
8.0
Number of Reviews
3
Ranking in other categories
Cloud Workload Protection Platforms (CWPP) (18th), Cloud Security Posture Management (CSPM) (21st), Cloud-Native Application Protection Platforms (CNAPP) (17th), Identity Threat Detection and Response (ITDR) (12th), Cloud Detection and Response (CDR) (6th)
 

Mindshare comparison

As of October 2025, in the Vulnerability Management category, the mindshare of SentinelOne Singularity Cloud Security is 2.3%, up from 1.0% compared to the previous year. The mindshare of Checkmarx One is 1.2%, up from 1.2% compared to the previous year. The mindshare of Sweet Security is 0.4%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Cloud Security2.3%
Checkmarx One1.2%
Sweet Security0.4%
Other96.1%
Vulnerability Management
 

Featured Reviews

Ritesh P. - PeerSpot reviewer
It's more scalable and flexible than our previous solution because we don't need to install any agents
The reporting works well, but sometimes the severity classifications are inaccurate. Sometimes, it flags an issue as high-impact, but it should be a lower severity. For example, it might highlight an exposed AWS encryption key, a critical compliance issue, but it isn't tagged as a high-risk problem. That only happens about 10 percent of the time. It shows a true positive 80-90 percent of the time.
Syed Hasan - PeerSpot reviewer
Partner experiences excellent technical support and seamless initial setup
In my opinion, if we are able to extract or show the report, and because everything is going towards agent tech and GenAI, it would be beneficial if it could get integrated with our code base and do the fix automatically. It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from. This would be really helpful.
Reviewer302234 - PeerSpot reviewer
Real-time insights have reduced false positives and improved cross-team collaboration
I find the UX/UI to be comfortable. The insights that it brings us are related to the business logic of our company, which is important. If something is flagged as a critical alert, this indicates that it must be observed closely. We have used the real-time monitoring feature of Sweet Security, and this specific solution has given us real detection that helps us find what is actually important against what is not important. It saves us a lot of investigation time that isn't required anymore. It's a very good product, I'm happy we have it. We looked into the CPU consumption and it's the lowest against the benchmark. The time savings from Sweet Security have varied, but the impact has been significant. It has reduced the need for back-and-forth discussions between teams such as Security, DevOps, and R&D. It only flags the important and critical risks. It saves developers time from looking into fixes for false positives. We use the customizable dashboards in Sweet Security. These dashboards have helped in managing our security posture by presenting all the relevant information that the security team needs to see. The correlation between the information is very efficient. They made a lot of improvements to this over the last year. It's a lot better now than it was a year ago. The insights are good. The reporting is very good because we can customize it to what we actually want to see. The value of having real-time visibility in our cloud environment with Sweet Security changes everything because it differentiates between identifying and reacting to something that is not really a risk and something that is truly a risk that needs to be treated. Sweet Security has had a big impact on mitigating risks and aiding development.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Support has been very helpful and provides regular feedback and help whenever needed. They've been very useful."
"It is very straightforward. It is not complicated. For the information that it provides, it does a pretty good job."
"The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best features."
"It is advantageous in terms of time-saving and cost reduction."
"SentinelOne Singularity Cloud Security stands out for its user-friendly interface and intuitive software, making it easy to navigate and use."
"Cloud Native Security's best feature is its ability to identify hard-coded secrets during pull request reviews."
"The most valuable feature is the ability to gain deep visibility into the workloads inside containers."
"It is pretty easy to integrate with this platform. When properly integrated, it monitors end-to-end."
"Apart from software scanning, software composition scanning is valuable."
"Helps us check vulnerabilities in our SAP Fiori application."
"The most valuable features of Checkmarx are its integration with multiple SCM solutions and CICD tools, its ability to scale according to user licenses, and the quick scanning process."
"The solution allows us to create custom rules for code checks."
"Our static operation security has been able to identify more security issues since implementing this solution."
"I have seen a return on investment from Checkmarx One."
"Both automatic and manual code review (CxQL) are valuable."
"It is a stable product."
"The value we see from having real-time visibility into our cloud environment is significant, as Sweet Security serves as our eyes and ears inside AWS, telling us what we are doing wrong so we can fix it."
"The value of having real-time visibility in our cloud environment with Sweet Security changes everything because it differentiates between identifying and reacting to something that is not really a risk and something that is truly a risk that needs to be treated."
"Before we had Sweet Security, upon any type of detection of activity, we needed to conduct lots of investigations in different platforms and logs until we could build the larger picture, but once we inserted Sweet Security, we are able to actually see each and every request being made from the application level towards the infrastructure, making it much easier and reducing the time for an analyst to understand what's really happening."
 

Cons

"The alerting system of the product is an area that I look at and sometimes get confused about. I feel the alerting feature needs improvement."
"The cloud-based operations might pose challenges in areas with limited or unavailable internet connectivity. Desktop features might be useful for smaller organizations with less complex security needs."
"The Singularity Cloud Security console is experiencing delays in clearing resolved issues, which can take over an hour to be removed from the display."
"I would prefer to see SentinelOne Singularity Cloud Security develop into a single pane of glass for ASPM and CSPM."
"The Kubernetes scanning on the Oracle Cloud needs to be improved. It's on the roadmap. AWS has this capability, but it's unavailable for Oracle Cloud."
"A beneficial improvement for SentinelOne Singularity Cloud Security would be integration with Jira, allowing for a more streamlined ticketing system."
"The application module focuses on the different codes and libraries that can be run on the machines. It is very important for Singularity EDR to detect what type of codes and what type of libraries can run in the machine. If they can implement a white list or a black list of codes or libraries that can be used in the machine, it would be very helpful. They can focus more on the application module."
"One of the issues with the product stems from the fact that it clubs different resources under one ticket."
"I expect application security vendors to cover all aspects of application security, including SAST, DAST, and even mobile application security testing. And it would be much better if they provided an on-premises and cloud option for all these main application security features."
"Some of the descriptions were found to be missing or were not as elaborate as compared to other descriptions. Although, they could be found across various standard sources but it would save a lot of time for developers, if this was fixed."
"We can run only one project at a time."
"The reports are good, but they still need to be improved considering what the UI offers."
"Checkmarx needs improvement in its Dynamic Application Security Testing (DAST) and API security features."
"Checkmarx has a slightly difficult compilation with the CI/CD pipeline."
"Its pricing model can be improved. Sometimes, it is a little complex to understand its pricing model."
"If it is a very large code base then we have a problem where we cannot scan it."
"There was something a year ago that caused a production issue in my company, but they fixed it within an hour."
"The option to run specific playbooks through Sweet Security platform would help us a lot, but these must be fully customizable."
"One area for improvement could be the alerts, as we have an issue with the alert time, the time it takes for the system to send the alert, but besides that, there is nothing special."
 

Pricing and Cost Advice

"PingSafe is not very expensive compared to Prisma Cloud, but it's also not that cheap. However, because of its features, it makes sense to us as a company. It's fairly priced."
"The cost for PingSafe is average when compared to other CSPM tools."
"PingSafe is affordable."
"For pricing, it currently seems to be in line with market rates."
"It is cost-effective compared to other solutions in the market."
"The pricing tends to be high."
"The tool is cost-effective."
"PingSafe is fairly priced."
"The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."
"The solution's price is high and you pay based on the number of users."
"The pricing was not very good. This is just a framework which shouldn’t cost so much."
"It is a good product but a little overpriced."
"We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
"The average deal size was usually anywhere between $120K to $175K on an annual basis, which could be divided across 12 months."
"The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
Information not available
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
10%
Government
5%
Financial Services Firm
19%
Computer Software Company
13%
Manufacturing Company
10%
Government
6%
Wellness & Fitness Company
17%
Healthcare Company
10%
Financial Services Firm
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise20
Large Enterprise54
By reviewers
Company SizeCount
Small Business30
Midsize Enterprise9
Large Enterprise38
No data available
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
I don't handle the price part, but it isn't more expensive than Palo Alto Prisma Cloud. It's not cheap, but it is wor...
What needs improvement with PingSafe?
There is scope for more application security posture management features. Additionally, the runtime protection needs ...
What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as ...
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
What is your experience regarding pricing and costs for Sweet Security?
I am not aware of the pricing details; that is a different department.
What needs improvement with Sweet Security?
There is room for improvement. We have a very close relationship with Sweet Security and have a weekly meeting where ...
What is your primary use case for Sweet Security?
We use Sweet Security primarily for vulnerability management on all of our cloud assets, mainly AWS, but we also use ...
 

Also Known As

PingSafe
No data available
No data available
 

Overview

 

Sample Customers

Information Not Available
YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Information Not Available
Find out what your peers are saying about Tenable, Wiz, Qualys and others in Vulnerability Management. Updated: September 2025.
869,566 professionals have used our research since 2012.