Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the category report

Prominent pros & cons

PROS

Checkmarx SAST offers the competitive advantage of identifying vulnerabilities in source code immediately, even before coding is complete.
Checkmarx protects companies against attacks, providing essential security features.
The CX1 platform is unified and beneficial for covering SAST, SCA, DAST, container scanning, and infrastructure code for clients seeking comprehensive solutions.
The integration within IDEs aids developers by embedding results directly, facilitating early vulnerability identification and resolution.
Detailed reports from Checkmarx SAST enhance security processes by pinpointing exact lines of code that are vulnerable, aiding developers effectively.

CONS

On-premises version is more expensive compared to the cloud version.
Checkmarx did not identify some vulnerabilities, requiring vendor intervention for tool improvement.
Price is a major challenge, with many mid-sized companies finding it unaffordable.
Accuracy issues arise from false positives, impacting vulnerability assessments.
Turnaround time and frequent changes in technical account managers cause communication delays.
 

Checkmarx SAST Pros review quotes

Cuneyt KALPAKOGLU Phd. - PeerSpot reviewer
Founder & Chairman at Endpoint-labs Cyber Security R&D
Oct 7, 2024
The most important competitive advantage and benefit is the ability to identify vulnerabilities in the source code immediately without needing to complete the coding.
reviewer2392968 - PeerSpot reviewer
IT Transformation Project Manager at a financial services firm with 10,001+ employees
Dec 16, 2024
The most important feature is that Checkmarx protects our company against attacks.
reviewer1635690 - PeerSpot reviewer
Key Account Manager at a tech services company with 11-50 employees
Sep 5, 2025
The CX1 is a unified platform that covers all components such as SAST, SCA, DAST, container scanning, and infrastructure code, which is quite beneficial because some clients need one-stop solutions for all their needs.
Find out what your peers are saying about Checkmarx, Qualys, SonarSource Sàrl and others in Static Application Security Testing (SAST). Updated: January 2026.
881,082 professionals have used our research since 2012.
Tharindu Malwenna - PeerSpot reviewer
Senior Application Security Engineer at a newspaper with 5,001-10,000 employees
Oct 17, 2025
This helps us a lot in identifying vulnerabilities in early stages, and the integration within the IDEs helps developers get the results into their IDE itself, making it easier for them to fix vulnerabilities.
RaghavendraRao PV - PeerSpot reviewer
Senior Manager at Newfold Digital
Jan 12, 2026
The detailed reports from Checkmarx SAST help with our security process by showing details about which line is actually vulnerable, which is beneficial for the developers, and I do not have any suggestions or inputs on that area.
 

Checkmarx SAST Cons review quotes

Cuneyt KALPAKOGLU Phd. - PeerSpot reviewer
Founder & Chairman at Endpoint-labs Cyber Security R&D
Oct 7, 2024
The on-premises version is more expensive compared to the cloud version.
reviewer2392968 - PeerSpot reviewer
IT Transformation Project Manager at a financial services firm with 10,001+ employees
Dec 16, 2024
We had some issues where Checkmarx did not recognize a vulnerability.
reviewer1635690 - PeerSpot reviewer
Key Account Manager at a tech services company with 11-50 employees
Sep 5, 2025
The main challenge with Checkmarx SAST is the price. The price is a challenge because Checkmarx SAST is a very big brand, and many mid-sized companies cannot afford it as they are very price-conscious.
Find out what your peers are saying about Checkmarx, Qualys, SonarSource Sàrl and others in Static Application Security Testing (SAST). Updated: January 2026.
881,082 professionals have used our research since 2012.
Tharindu Malwenna - PeerSpot reviewer
Senior Application Security Engineer at a newspaper with 5,001-10,000 employees
Oct 17, 2025
The accuracy of the results depends on various factors, as some of the test folders tend to give us false positives, which makes a huge impact on the vulnerabilities.
RaghavendraRao PV - PeerSpot reviewer
Senior Manager at Newfold Digital
Jan 12, 2026
I believe that nothing in particular could be improved about Checkmarx SAST, only the turnaround time and the fact that technical account managers keep moving around, which leads to some lag in communication.