Checkmarx One vs XM Cyber comparison

Cancel
You must select at least 2 products to compare!
Checkmarx Logo
387 views|266 comparisons
86% willing to recommend
XM Cyber Logo
1,597 views|825 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Checkmarx One and XM Cyber based on real PeerSpot user reviews.

Find out in this report how the two Vulnerability Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Checkmarx One vs. XM Cyber Report (Updated: May 2024).
770,924 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The reports are very good because they include details on the code level, and make suggestions about how to fix the problems.""I like that you don't have to compile the code in order to execute static code analysis. So, it's very handy.""The solution has good performance, it is able to compute in 10 to 15 minutes.""The feature that I have found most valuable is that its number of false positives is less than the other security application platforms. Its ease of use is another good feature. It also supports most of the languages.""What I like best about Checkmarx is that it has fewer false positives than other products, giving you better results.""The most valuable feature is that it actually identifies the different criteria you can set to meet whatever standards you're trying to get your system accredited for.""The solution communicates where to fix the issue for the purpose of less iterations.""The setup is very easy. There is a lot of information in the documents which makes the install not difficult at all."

More Checkmarx One Pros →

"The platform's most valuable feature is attack simulation.""What I personally like very much, from my experience, is that it is very reliable."

More XM Cyber Pros →

Cons
"The reports are good, but they still need to be improved considering what the UI offers.""There is nothing particular that I don't like in this solution. It can have more integrations, but the integrations that we would like are in the roadmap anyway, and they just need to deliver the roadmap. What I like about the roadmap is that it is going where it needs to go. If I were to look at the roadmap, there is nothing that is jumping out there that says to me, "Yeah. I'd like something else on the roadmap." What they're looking to deliver is what I would expect and forecast them to deliver.""Checkmarx has a slightly difficult compilation with the CI/CD pipeline.""Checkmarx could improve the REST APIs by including automation.""You can't use it in the continuous delivery pipeline because the scanning takes too much time.""We would like to be able to run scans from our local system, rather than having to always connect to the product server, which is a longer process.""The cost per user is high and should be reduced.""The product's reporting feature could be better. The feature works well for developers, but reports generated to be shared with external parties are poor, it lacks the details one gets when viewing the results directly from the Checkmarx One platform."

More Checkmarx One Cons →

"XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas.""We'd like to see a cheaper price."

More XM Cyber Cons →

Pricing and Cost Advice
  • "It is the right price for quality delivery."
  • "I believe pricing is better compared to other commercial tools."
  • "The pricing was not very good. This is just a framework which shouldn’t cost so much."
  • "The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
  • "It is a good product but a little overpriced."
  • "The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
  • "​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
  • "We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
  • More Checkmarx One Pricing and Cost Advice →

  • "We have to pay standard licensing fees."
  • More XM Cyber Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
    770,924 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
    Top Answer:Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
    Top Answer:The solution's price is high and you pay based on the number of users.
    Top Answer:The platform's most valuable feature is attack simulation.
    Top Answer:We have to pay standard licensing fees. There are no additional costs. It is an expensive product. I rate the pricing a seven out of ten.
    Top Answer:XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas.
    Ranking
    11th
    Views
    387
    Comparisons
    266
    Reviews
    21
    Average Words per Review
    508
    Rating
    7.7
    26th
    Views
    1,597
    Comparisons
    825
    Reviews
    1
    Average Words per Review
    294
    Rating
    8.0
    Comparisons
    SonarQube logo
    Compared 52% of the time.
    Veracode logo
    Compared 13% of the time.
    Fortify on Demand logo
    Compared 6% of the time.
    Snyk logo
    Compared 4% of the time.
    Coverity logo
    Compared 3% of the time.
    Pentera logo
    Compared 29% of the time.
    Cymulate logo
    Compared 16% of the time.
    SafeBreach logo
    Compared 8% of the time.
    Tenable Security Center logo
    Compared 7% of the time.
    Picus Security logo
    Compared 7% of the time.
    Learn More
    Overview

    Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

    Checkmarx One offers comprehensive application scanning across the SDLC:

    • Static Application Security Testing (SAST)
    • Software Composition Analysis (SCA)
    • API security
    • Dynamic Application Security Testing (DAST)
    • Container security
    • IaC security
    • Correlation, prioritization, and risk management
    • Codebashing secure code training
    • AI security
    • Tech partnerships extending AppSec into runtime analysis
    • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

    Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

    XM Cyber is a leading hybrid cloud security company that’s changing the way innovative organizations approach cyber risk. Our attack path management platform continuously uncovers hidden attack paths to your critical assets across cloud and on-prem environments, so you can cut them off at key junctures and eradicate risk with a fraction of the effort. This overcomes the big disconnect that security teams experience when they’re presented with endless alerts, yet can’t see which exposures impact risk the most, how they come together to be exploited by an attacker, or how to efficiently eliminate them. This approach is a complete game-changer, which is why some of the world’s largest, most complex organizations choose XM Cyber to help eradicate risk. Founded by top executives from the Israeli cyber intelligence community, XM Cyber has offices in North America, Europe, and Israel.

    Sample Customers
    YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
    Hamburg Port Authority, Plymouth Rock Corporation
    Top Industries
    REVIEWERS
    Computer Software Company31%
    Financial Services Firm19%
    Comms Service Provider9%
    Manufacturing Company9%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company15%
    Manufacturing Company9%
    Insurance Company5%
    VISITORS READING REVIEWS
    Computer Software Company15%
    Financial Services Firm13%
    Government8%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business38%
    Midsize Enterprise13%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise12%
    Large Enterprise72%
    VISITORS READING REVIEWS
    Small Business26%
    Midsize Enterprise14%
    Large Enterprise60%
    Buyer's Guide
    Checkmarx One vs. XM Cyber
    May 2024
    Find out what your peers are saying about Checkmarx One vs. XM Cyber and other solutions. Updated: May 2024.
    770,924 professionals have used our research since 2012.

    Checkmarx One is ranked 11th in Vulnerability Management with 67 reviews while XM Cyber is ranked 26th in Vulnerability Management with 2 reviews. Checkmarx One is rated 7.6, while XM Cyber is rated 8.0. The top reviewer of Checkmarx One writes "The report function is a great, configurable asset but sometimes yields false positives". On the other hand, the top reviewer of XM Cyber writes "Reliable with no false-positives and helpful support". Checkmarx One is most compared with SonarQube, Veracode, Fortify on Demand, Snyk and Coverity, whereas XM Cyber is most compared with Pentera, Cymulate, SafeBreach, Tenable Security Center and Picus Security. See our Checkmarx One vs. XM Cyber report.

    See our list of best Vulnerability Management vendors.

    We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.