Try our new research platform with insights from 80,000+ expert users
Checkmarx One Logo

Checkmarx One Reviews

Vendor: Checkmarx
3.9 out of 5
Badge Leader
Leave a review

What is Checkmarx One?

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Get the Checkmarx One Buyer's Guide and find out what your peers are saying about Checkmarx One, SonarQube, Wiz and more!
Checkmarx One is the #2 ranked solution in top Static Code Analysis solutions, #2 ranked solution in top Dynamic Application Security Testing (DAST) solutions, #2 ranked solution in top AI Security solutions, #3 ranked solution in application security solutions, #3 ranked solution in AST tools, #3 ranked solution in API Security Solutions, #3 ranked solution in top DevSecOps solutions, #3 ranked solution in top Application Security Posture Management (ASPM) solutions, #8 ranked solution in top Risk-Based Vulnerability Management solutions, #15 ranked solution in Container Security Solutions, and #16 ranked solution in top Vulnerability Management solutions. PeerSpot users give Checkmarx One an average rating of 7.8 out of 10. Checkmarx One is most commonly compared to SonarQube: Checkmarx One vs SonarQube. Checkmarx One is popular among the large enterprise segment, accounting for 65% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 18% of all views.
Buyer's Guide
Checkmarx One
January 2026
Get the report
Helped 881,082 peers since 2012

Featured Checkmarx One reviews

Read more reviews

Checkmarx One mindshare

Product category:
Application Security Tools
As of January 2026, the mindshare of Checkmarx One in the Application Security Tools category stands at 10.2%, down from 11.8% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
Checkmarx One10.2%
SonarQube17.9%
Snyk5.7%
Other66.2%
Application Security Tools

PeerResearch reports based on Checkmarx One reviews

TypeTitleDate
CategoryApplication Security ToolsJan 26, 2026Download
ProductReviews, tips, and advice from real usersJan 26, 2026Download
ComparisonCheckmarx One vs SonarQubeJan 26, 2026Download
ComparisonCheckmarx One vs VeracodeJan 26, 2026Download
ComparisonCheckmarx One vs GitHubJan 26, 2026Download
Suggested products
TitleRatingMindshareRecommending
SonarQube4.017.9%83%134 interviewsAdd to research
Wiz4.5N/A96%33 interviewsAdd to research
 
 
Key learnings from peers
Last updated Jan 25, 2026

Valuable Features

Checkmarx One offers valuable features such as automated code scanning, identification of vulnerabilities without compiling, and ease of use. Its ability to integrate with multiple repositories and CI/CD tools enhances developer productivity. The interface is intuitive, supporting a wide range of programming languages and frameworks. It reduces false positives, provides detailed reports, and offers real-time feedback within IDEs. Organizations appreciate its comprehensive security checks and efficient SAST and SCA capabilities.
  • "The best features Checkmarx One offers, in my opinion, are that it is easy to use, and there is not much deep diving into this."
  • "Checkmarx One has positively impacted my organization because in the past, when Checkmarx One scan was not implemented, we faced a lot of issues finding vulnerabilities inside the repository, but now, since we have integrated Checkmarx One into our repository, we can smoothly and very easily find vulnerabilities and manage those effectively."
  • "Checkmarx One has positively impacted our organization as we tend to find vulnerabilities very early in the development cycle."

Room for Improvement

Checkmarx One could enhance its functionality by improving role management, reducing false positives, and expanding language support. Integration with third-party systems and better licensing models are needed. Improving the user interface, adding real-time developer guidance, and optimizing reporting and scanning speeds would benefit users. Enhanced dashboarding and support for dynamic application security testing are necessary for increased efficiency.
  • "There are some downtimes when Checkmarx One is being upgraded to the latest version or some improvement is there."
  • "For Checkmarx One, I think that adding repositories and scanning impromptu code could improve it."
  • "Checkmarx One can be improved by reducing noise and improving false positive filtering."

ROI

Checkmarx One has enabled teams to deliver secure solutions quicker by identifying issues during development, significantly reducing rework periods. It minimizes troubleshooting and manual review costs, decreasing dependence on additional security personnel. Clients see improvements in production timelines, with vulnerabilities detected early and resolved swiftly. Enhanced security practices reduce breaches, yielding financial returns. The software automates processes, saving time and resources, providing significant cost benefits in security management across entire organizations.

Pricing

Enterprise clients find Checkmarx One licensing modular and consumption-based, with options such as module-based, repo-based, or LOC-based licensing. While recognized for its quality and security, the cost is generally considered high but negotiable. Pricing varies widely, depending on team size and needed features, ranging from $30K to over $1M. Savings can be achieved via multi-year contracts and Marketplace deals, which offer easier contract approval and up to 20% cost reduction.
  • "For around 250 users or committers, the cost is approximately $500,000."
  • "The tool's pricing is fine."
  • "The solution's price is high and you pay based on the number of users."

Popular Use Cases

Checkmarx One is primarily used for static application security testing, code vulnerability evaluation, and source code scanning. Users utilize it for integration into CI/CD pipelines, identifying vulnerabilities during software development, and conducting penetration testing. It assists in ensuring compliance, managing security across Git repositories, and reducing vulnerability discovery time in software code to enhance overall application security. It can be deployed in both on-premises and cloud environments.

Service and Support

Checkmarx One customer service is well-rated, with fast response times and knowledgeable staff. Technical support is generally good, though some feel it could be faster. Many find the team skilled and helpful, addressing queries promptly. However, delays in resolving cases or providing solutions were noted by some. The service is considered reliable, with proactive assistance and clear guidance. Checkmarx One's support team effectively manages cases and offers comprehensive assistance.

Deployment

Checkmarx One's initial setup is often described as straightforward and simple to deploy, with users appreciating its easy-to-follow steps and comprehensive documentation. Many note the installation process is facilitated by an installer wizard and can typically be completed within a day. However, some users face challenges with complex configurations, especially when involving additional integrations or specific environment requirements, requiring technical expertise and potentially external support.

Scalability

Checkmarx One scales effectively for many organizations, handling increased workloads and large environments. Users note its ability to manage global needs efficiently and its compatibility with cloud infrastructure enhances scalability. Some mention that licensing can impact expansion, but others highlight the ease of scaling engine capacity. While some report no issues, others suggest that specific configurations may influence scalability outcomes. Many rate Checkmarx One's scalability highly, appreciating its ability to accommodate diverse user demands.

Stability

Checkmarx One displays stability, though users report occasional issues with large code scanning, memory consumption, and configuration. Some note sessions not logging out properly, performance slowdowns with extensive scans, or needing service restarts. Despite variances, many find it reliable, stable in updates, and well-integrated in workflows, rating stability between six to ten. There are reports of high dependability, but some highlight areas for stability improvement, especially with larger applications.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Checkmarx One Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business24
Midsize Enterprise9
Large Enterprise42
By reviewers
By visitors reading reviews
Company SizeCount
Small Business586
Midsize Enterprise351
Large Enterprise1719
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
18%
Manufacturing Company
10%
Computer Software Company
10%
Government
5%
Insurance Company
4%
Healthcare Company
4%
Educational Organization
4%
Retailer
4%
Energy/Utilities Company
4%
Comms Service Provider
4%
University
3%
Media Company
3%
Outsourcing Company
3%
Performing Arts
3%
Real Estate/Law Firm
2%
Non Profit
2%
Transportation Company
2%
Consumer Goods Company
2%
Legal Firm
2%
Construction Company
1%
Wholesaler/Distributor
1%
Recreational Facilities/Services Company
1%
Hospitality Company
1%
Pharma/Biotech Company
1%
Engineering Company
1%
Aerospace/Defense Firm
1%
Logistics Company
1%
Marketing Services Firm
1%

Compare Checkmarx One with alternative products

Go!

Learn more about Checkmarx One

Checkmarx One offers comprehensive application scanning across the SDLC:

  • Static Application Security Testing (SAST)
  • Software Composition Analysis (SCA)
  • API security
  • Dynamic Application Security Testing (DAST)
  • Container security
  • IaC security
  • Correlation, prioritization, and risk management
  • Codebashing secure code training
  • AI security
  • Tech partnerships extending AppSec into runtime analysis
  • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx One customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech

Case Study: Liveperson Implements Innovative Secure SDLC

Related questions

  • 57
What is the biggest difference between Veracode and Checkmarx?
  • 36
Checkmarx or Veracode. Which should we choose?
  • 318
What is the Biggest Difference Between Checkmarx and Fortify?
  • 36
What is the biggest difference between Checkmarx and SonarQube?
  • 91
Checkmarx vs SonarQube; SonarQube interoperability with Checkmarx or Veracode
  • 137
If you had to both encrypt and compress data during transmission, which would you do first and why?
  • 44
When evaluating Application Security, what aspect do you think is the most important to look for?
  • 101
What are the Top 5 cybersecurity trends in 2022?
  • 128
What are the threats associated with using ‘bogus’ cybersecurity tools?
  • 54
We're evaluating Tripwire, what else should we consider?

Product Categories

Product Categories
Application Security Tools
Static Application Security Testing (SAST)
Vulnerability Management
Container Security
Static Code Analysis
API Security
Dynamic Application Security Testing (DAST)
DevSecOps
Risk-Based Vulnerability Management
Application Security Posture Management (ASPM)
AI Security

Popular Comparisons

Popular Comparisons
SonarQube vs Checkmarx One Logo
SonarQube vs Checkmarx One
Wiz vs Checkmarx One Logo
Wiz vs Checkmarx One
SentinelOne Singularity Cloud Security vs Checkmarx One Logo
SentinelOne Singularity Cloud Security vs Checkmarx One
Snyk vs Checkmarx One Logo
Snyk vs Checkmarx One
Microsoft Defender for Cloud vs Checkmarx One Logo
Microsoft Defender for Cloud vs Checkmarx One
Prisma Cloud by Palo Alto Networks vs Checkmarx One Logo
Prisma Cloud by Palo Alto Networks vs Checkmarx One
GitLab vs Checkmarx One Logo
GitLab vs Checkmarx One
Veracode vs Checkmarx One Logo
Veracode vs Checkmarx One
Imperva Application Security Platform vs Checkmarx One Logo
Imperva Application Security Platform vs Checkmarx One
Coverity Static vs Checkmarx One Logo
Coverity Static vs Checkmarx One
CrowdStrike Falcon Cloud Security vs Checkmarx One Logo
CrowdStrike Falcon Cloud Security vs Checkmarx One
JFrog Xray vs Checkmarx One Logo
JFrog Xray vs Checkmarx One
GitHub Advanced Security vs Checkmarx One Logo
GitHub Advanced Security vs Checkmarx One
Tenable Security Center vs Checkmarx One Logo
Tenable Security Center vs Checkmarx One
Orca Security vs Checkmarx One Logo
Orca Security vs Checkmarx One
See all alternatives
 
Checkmarx One Reviews Summary
Author infoRatingReview Summary
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution3.5I’ve used Checkmarx One extensively to improve developer workflow and application security, appreciating its strong SAST, SCA, and CI/CD integrations, though it could benefit from faster scans, deeper language support, and more contextual IDE guidance.
Senior Software Engineer at a tech vendor with 10,001+ employees4.5I've been using Checkmarx One for years to streamline code validation, improve quality, and ensure compliance, saving significant time weekly, though I’d like to see faster reporting speeds and a more intuitive UI.
Cyber Security Expert at a manufacturing company with 10,001+ employees4.5I use Checkmarx One for SAST and SCA scans, appreciating its CI/CD integration and SCM support; while reporting could improve, it’s boosted our speed to market and handles extensive global code scanning effectively.
Senior GenAI Engineer at a tech vendor with 10,001+ employees4.0I've used Checkmarx One for three years to streamline vulnerability detection through CI/CD integration, saving time and reducing manual reviews, though it could improve scan speed, false positives, and integration with modern development tools.
ML Engineer - Specialist at a tech vendor with 10,001+ employees4.5I've used Checkmarx One extensively in DevSecOps for secure code scanning and CI/CD integration; it's versatile and stable, though scan speed and false positives could improve. It supports many languages and helps ensure compliance in cloud and on-prem environments.
Chief Technology Officer at 3CS Aquarah Limited4.0I implement Checkmarx One for clients, and it's reliable, easy to set up, and delivers quick results, especially in secure code development. Its Codebashing feature stands out, though I’d like to see RASP capabilities in the future.
Specialist Leader at Deloitte4.5I work as a partner with Checkmarx One and find its initial setup straightforward, although hybrid deployment is preferred. The tool shows clear ROI, but automated code fixing would enhance its capabilities. Enterprise clients benefit from its effective security scans.
Software Engineer at a manufacturing company with 10,001+ employees4.5I've used Checkmarx One daily for three years, mainly for SAST scans and vulnerability detection. It's easy to use, integrates well with our pipeline, helps reduce vulnerabilities quickly, and support is responsive within 24 hours.