No more typing reviews! Try our Samantha, our new voice AI agent.

Apiiro vs Checkmarx One comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Apiiro
Ranking in Static Application Security Testing (SAST)
23rd
Ranking in API Security
14th
Ranking in Risk-Based Vulnerability Management
18th
Ranking in Application Security Posture Management (ASPM)
10th
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
4
Ranking in other categories
Software Composition Analysis (SCA) (15th), Software Supply Chain Security (10th)
Checkmarx One
Ranking in Static Application Security Testing (SAST)
2nd
Ranking in API Security
6th
Ranking in Risk-Based Vulnerability Management
10th
Ranking in Application Security Posture Management (ASPM)
4th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
81
Ranking in other categories
Application Security Tools (2nd), Vulnerability Management (13th), Container Security (15th), Static Code Analysis (2nd), Dynamic Application Security Testing (DAST) (2nd), DevSecOps (3rd), AI Security (4th)
 

Mindshare comparison

As of November 2026, in the Application Security Posture Management (ASPM) category, the mindshare of Apiiro is 5.5%, up from 4.2% compared to the previous year. The mindshare of Checkmarx One is 8.6%, down from 11.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Posture Management (ASPM) Mindshare Distribution
ProductMindshare (%)
Checkmarx One8.6%
Apiiro5.5%
Other85.9%
Application Security Posture Management (ASPM)
 

Featured Reviews

Abimael Ferreira - PeerSpot reviewer
Security at Blaze Information Security
Centralized code analysis has improved my workflow and prioritizes critical vulnerabilities
Apiiro offers several features that I consider the best, such as the ability to have multiple developers and AppSec professionals working on the same project, and through the platform, we can see the number of vulnerabilities, generate reports, and integrate Snyk within our workflow. Before the code goes to production, Apiiro can read all that code and determine if everything is okay or if improvements are needed. The reports generated by Apiiro and its integration with Snyk contribute to my development process by giving us visibility into what is actually vulnerable, as automation like Apiiro makes it much easier to track vulnerabilities without spending too much time manually checking for issues, thus generating meaningful reports afterward. Apiiro manages permissions very effectively, which is interesting from an organizational standpoint because it allows us to separate which people can access a given project and designate project administrators who can approve or reject changes once a fix is made. I found the accuracy and reliability of Apiiro's results to be very good, as it can predict issues based on its existing data.
Shahzad Shahzad - PeerSpot reviewer
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution
Enable secure development workflows while identifying opportunities for faster scans and improved AI guidance
Checkmarx One is a very strong platform, but there are several areas where it can improve to support modern DevSecOps workflows even better. For example, better real-time developer guidance is needed. The IDE plugin should offer richer AI-powered auto-fixes similar to SNYK Code or GitHub Copilot Security, as current guidance is good but not deeply contextual for large-scale enterprise codebases. This matters because it reduces developer friction and accelerates shift-left adoption. More transparency control over the correlation engines is another need. The correlation engine is powerful but not fully transparent. Users want to understand why vulnerabilities were correlated or de-prioritized, which helps AppSec teams trust the prioritization logic. Faster SAST scan and more language coverage is needed since SAST scan can still be slow for very large mono-repos and there is limited deep support for new language frameworks like Rust and Go, along with advanced coverage for serverless-specific frameworks. This matters because large organizations want sub-minute scans in CI/CD as cloud-native ecosystems evolve fast. A strong API security module is another area for enhancement. API security scanning could be improved with active testing, API discovery, full Swagger, OpenAPI, drift detection, and schema-based fuzzing. This is important as API attacks are one of the biggest AppSec risks in 2025. Checkmarx One is strong, but I see a few areas for improvement including faster SAST scanning for large mono-repos, deeper language framework support, more transparent correlation logic, and stronger API security that includes discovery and runtime context. The IDE plugin could offer more AI-assisted fixes, and the SBOM lifecycle tracking can evolve further. Enhancing integration with SIEM and SOAR would also make enterprise adoption smoother, and these improvements would help developers and AppSec teams move faster with more accuracy.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The workflow automation is likely the best aspect of the solution."
"Apiiro manages permissions very effectively, which is interesting from an organizational standpoint because it allows us to separate which people can access a given project and designate project administrators who can approve or reject changes once a fix is made."
"The positive impact I have seen from working with Apiiro for my company includes the metrics that we get from Apiiro, which have been extremely helpful."
"Apiiro's secrets detection feature has saved us several times, which we appreciate greatly."
"Checkmarx One has positively impacted the organization, and since replacing the previous tool, SAST and SCA scans are conducted in a couple of minutes instead of hours or days, saving time and increasing speed to market by reducing the timeline from three or four days to one day only."
"The tool's valuable features include integrating GPT and Copilot. Additionally, the UI web representation is very user-friendly, making navigation easy. GPT has made several improvements to my security code."
"Scan reviews can occur during the development lifecycle."
"The administration in Checkmarx is very good."
"It has made our organization more efficient with our whole code scan/deployment process for our software applications."
"The biggest advantage we have seen is that we're able to develop and deliver secure solutions in a faster time."
"From my point of view, it is the best product on the market."
"They have some of the best features which make the product wonderful."
 

Cons

"I would like support for our self-hosted Git server, other than GitHub, just regular Git."
"User management is a little bit clunky."
"The UI sometimes helps but can also be a bit confusing."
"My first feedback for Apiiro is that it is very slow, extremely slow."
"It takes around 30 to 40 minutes for checking a build. If you can make it within five minutes or 10 minutes, that would be great."
"Licensing models and Swift language support are the aspects in which this product needs to improve. Swift is a new language, in which major customers require support for lower prices."
"I would like the product to include more debugging and developed tools. It needs to also add enhancements on the coding side."
"They can support the remaining languages that are currently not supported. They can also create a different model that can identify zero-day attacks. They can work on different patterns to identify and detect zero-day vulnerability attacks."
"The reports are good, but they still need to be improved considering what the UI offers."
"Checkmarx needs to improve the false positives and provide more accuracy in identifying vulnerabilities. It misses important vulnerabilities."
"There is nothing particular that I don't like in this solution. It can have more integrations, but the integrations that we would like are in the roadmap anyway, and they just need to deliver the roadmap. What I like about the roadmap is that it is going where it needs to go. If I were to look at the roadmap, there is nothing that is jumping out there that says to me, "Yeah. I'd like something else on the roadmap." What they're looking to deliver is what I would expect and forecast them to deliver."
"Unfortunately, Checkmarx doesn't do any automated backups which is quite inconvenient."
 

Pricing and Cost Advice

Information not available
"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."
"Most of my customers opted for a perpetual license. They prefer to pay the highest amount up front for the perpetual license and then pay for additional support annually."
"It is the right price for quality delivery."
"The number of users and coverage for languages will have an impact on the cost of the license."
"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."
"It is not expensive, but sometimes, their pricing model or licensing model is not very clear. There are similar variables, such as projects or developers, and sometimes, it is a little bit confusing."
"It is a good product but a little overpriced."
"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."
report
Use our free recommendation engine to learn which Application Security Posture Management (ASPM) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
12%
Construction Company
8%
Comms Service Provider
8%
Financial Services Firm
14%
Manufacturing Company
9%
Outsourcing Company
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise9
Large Enterprise46
 

Questions from the Community

What needs improvement with Apiiro?
One area Apiiro could improve is reporting customization and dashboard flexibility with more advanced filtering and easier communication.
What is your primary use case for Apiiro?
Apiiro is primarily used for code scanning and integration with source code control. The main use cases include code scanning and code snippet analysis. Apiiro provides security and visibility by h...
What advice do you have for others considering Apiiro?
I would highly recommend Apiiro and a clear understanding of the API landscape and integration requirements before implementing it. Apiiro provides the most value to organizations that have multipl...
What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What is the biggest difference between Veracode and Checkmarx?
According to my experience of using both the tools in different organizations Veracode is a Cloud-native, managed AppSec platform with strong focus on ease of use, it is SaaS delivery, and provide...
What is your experience regarding pricing and costs for Checkmarx?
Checkmarx One is a premium solution, so budget accordingly. Make sure you understand how licensing scales with additional applications and users. I advise negotiating multi-year contracts or bundle...
 

Comparisons

 

Also Known As

Apiiro Control Plane (ASOC), Apiiro API Security (SAST), Apiiro Open Source (SCA)
No data available
 

Overview

 

Sample Customers

Morgan Stanley, Rakuten, Jack Henry, SoFi, Colgate, Navan
YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Find out what your peers are saying about Apiiro vs. Checkmarx One and other solutions. Updated: October 2026.
920,769 professionals have used our research since 2012.