No more typing reviews! Try our Samantha, our new voice AI agent.

Checkmarx Software Composition Analysis vs Upwind comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Checkmarx Software Composit...
Ranking in Software Composition Analysis (SCA)
12th
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
13
Ranking in other categories
No ranking in other categories
Upwind
Ranking in Software Composition Analysis (SCA)
20th
Average Rating
9.2
Reviews Sentiment
6.7
Number of Reviews
5
Ranking in other categories
Vulnerability Management (40th), Container Security (27th), Cloud Workload Protection Platforms (CWPP) (18th), Managed Detection and Response (MDR) (28th), API Security (12th), Cloud Security Posture Management (CSPM) (25th), Cloud-Native Application Protection Platforms (CNAPP) (16th), Attack Surface Management (ASM) (28th), Dynamic Application Security Testing (DAST) (13th), Data Security Posture Management (DSPM) (18th), Cloud Infrastructure Entitlement Management (CIEM) (8th), Cloud Detection and Response (CDR) (7th), Continuous Threat Exposure Management (CTEM) (14th), AI Security (10th)
 

Mindshare comparison

As of November 2026, in the Software Composition Analysis (SCA) category, the mindshare of Checkmarx Software Composition Analysis is 2.4%, down from 2.5% compared to the previous year. The mindshare of Upwind is 0.4%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Software Composition Analysis (SCA) Mindshare Distribution
ProductMindshare (%)
Checkmarx Software Composition Analysis2.4%
Upwind0.4%
Other97.2%
Software Composition Analysis (SCA)
 

Featured Reviews

Tharindu Malwenna - PeerSpot reviewer
Senior Application Security Engineer at a newspaper with 5,001-10,000 employees
Efficient library identification and upgrade suggestions improve application security
We have many third-party libraries in our organization. I used Checkmarx Software Composition Analysis to identify all the libraries we use and determine whether they are used or unused within the application Checkmarx Software Composition Analysis provides identification of libraries and…
Mohammed Mudasser - PeerSpot reviewer
AI/ML Engineer at a educational organization with 5,001-10,000 employees
Runtime context has transformed how we prioritize exploitable cloud risks and protect workloads
I appreciate runtime context, which helps connect vulnerabilities and misconfigurations with actual workload behavior and network relationships, making it easier to prioritize remediation based on real exposure rather than simply working through a long list of security findings. The best features that stand out to me are contextual vulnerability prioritization, cloud workload visibility, and runtime security. I especially value how Upwind connects vulnerabilities with actual runtime behavior, which helps focus on exploitable risk rather than working through a long list of findings. It has helped us focus on actual exploitable risk instead of treating every vulnerability equally. By considering runtime activity, exposure, reachability, and sensitive data context, the team can prioritize remediation much faster and reduce unnecessary alert noise. I also value the runtime visibility and attack path context because it connects security findings with network behavior and actual workload. This makes investigations more actionable and helps the team move from simply detecting issues to understanding their real impact. The biggest positive impact has been the prioritization of cloud security risk and improved visibility. Instead of chasing every vulnerability, we can focus on issues that are actually exposed or active at runtime, which makes the security team more efficient and remediation more targeted.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It has improved identification capabilities, scalability, and integration with AI, such as the AI-powered suggestions."
"It is very easy and user friendly. It never requires any kind of technical support. You can do everything on your own."
"We were able to reduce the number of vulnerable libraries by 50%, leading to significant operational improvement."
"The tool's visual scan analysis shows me all the libraries' vulnerabilities and license types. It helps identify the most complex issues with licenses. It provides good visibility. SCA shows me all libraries that are vulnerable and the extent of their vulnerability."
"The integration part is easy...It's a stable solution right now."
"I appreciate the user-friendly interface. The GUI is excellent, providing detailed information on outdated versions, including version numbers and the flow of library calls. This allows me to plan and prioritize library changes based on potential vulnerabilities, even if the affected library is indirectly used in my project. The tool offers specific guidance on addressing these issues."
"Checkmarx Software Composition Analysis is one of the most important products in the IT security market."
"The product is stable and scalable."
"My advice for others looking into using Upwind is that if you are seeking a strong CNAPP with an advanced runtime and strong CDR capabilities, this is the product."
"They are a great overall cloud security platform and they continue innovating and adding new features."
"Now, thanks to Upwind, everything is automated and I am saving around six hours per week since switching to Upwind."
"The combination of runtime visibility, security insights, and contextual risk prioritization makes it much easier to focus on the risks that actually matter."
"Upwind has positively impacted my organization by reducing time to action and time to response by half."
 

Cons

"It can have better licensing models."
"The quality of technical support has decreased over time, and it is not as good as it used to be."
"The solution could improve by determining the success factor of an upgrade, which is currently lacking."
"Parts of the implementation process could improve by making it more user-friendly."
"The performance of Checkmarx Software Composition Analysis also needs improvement because sometimes, it's slow, and in particular, scanning could take several hours."
"In terms of areas for improvement, what could be improved in Checkmarx Software Composition Analysis is pricing because customers always compare the pricing among secure DevOps solutions in the market. Checkmarx Software Composition Analysis has a lot of competitors yet its features aren't much different. Pricing is the first thing customers consider, and from a partner perspective, if you can offer affordable pricing to your customers, it's more likely you'll have a winning deal. The performance of Checkmarx Software Composition Analysis also needs improvement because sometimes, it's slow, and in particular, scanning could take several hours."
"I would rate the scalability a seven out of ten."
"Some of the recommendations provided by the product are generic. Even if the recommendations provided by the product are of low level, the appropriate ones can help users deal with vulnerabilities."
"I believe the user interface can use improvement because some features are quite tricky to find since they are not where you would expect them to be, but with enough time, you are able to find them."
"Upwind can be improved because its UI is a bit difficult to navigate."
 

Pricing and Cost Advice

"Pricing for Checkmarx Software Composition Analysis needs to be competitive."
"We don't have a license. The usage is limited to one, two, three, five, or ten people. It is currently used for all projects, and there are plans to increase its usage."
"It is a little bit high priced. It would be better if it was a little less expensive."
"The license model is somewhat perplexing as it comprises multiple aspects that can be confusing for customers. The model is determined by the number of registered users and the number of projects being scanned, along with a third component that adds to the complexity."
"My customers need to pay for the licensing part, and they need to opt for an annual subscription."
Information not available
report
Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Construction Company
13%
Outsourcing Company
8%
Performing Arts
6%
Outsourcing Company
13%
Financial Services Firm
9%
Comms Service Provider
8%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business7
Large Enterprise8
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Checkmarx Software Composition Analysis?
Pricing is complex and high for small organizations but offers great benefits for larger organizations. It is notably different compared to competitors like GitHub Advanced Security.
What needs improvement with Checkmarx Software Composition Analysis?
The solution could improve by determining the success factor of an upgrade, which is currently lacking.
What is your primary use case for Checkmarx Software Composition Analysis?
We have many third-party libraries in our organization. I used Checkmarx Software Composition Analysis to identify all the libraries we use and determine whether they are used or unused within the ...
What is your experience regarding pricing and costs for Upwind?
The pricing, setup cost, and licensing process were pretty reasonable.
What needs improvement with Upwind?
I would appreciate more customizable dashboards and reporting for different teams, such as security operations, engineering, and leadership. The runtime context is excellent, but tailoring those vi...
What is your primary use case for Upwind?
My main use case for Upwind is cloud security and workload protection. I primarily use it to gain visibility into cloud assets, vulnerabilities, and runtime risks, and I mainly use it to prioritize...
 

Also Known As

CxSCA
Upwind Security Upwind Platform for AWS Security Hub, Upwind Security Upwind for AWS Security Hub Extended
 

Overview

 

Sample Customers

AXA, Liveperson, Aaron's, Playtech, Morningstar
StockX, Yotpo, bill, Digital Turbine, nanit, CallRail, boomi
Find out what your peers are saying about Checkmarx Software Composition Analysis vs. Upwind and other solutions. Updated: October 2026.
921,523 professionals have used our research since 2012.