No more typing reviews! Try our Samantha, our new voice AI agent.

Apiiro vs Checkmarx SAST comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Apiiro
Ranking in Static Application Security Testing (SAST)
23rd
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
4
Ranking in other categories
Software Composition Analysis (SCA) (15th), API Security (14th), Software Supply Chain Security (10th), Risk-Based Vulnerability Management (18th), Application Security Posture Management (ASPM) (10th)
Checkmarx SAST
Ranking in Static Application Security Testing (SAST)
19th
Average Rating
7.6
Reviews Sentiment
6.0
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Static Application Security Testing (SAST) category, the mindshare of Apiiro is 1.4%, up from 0.8% compared to the previous year. The mindshare of Checkmarx SAST is 2.2%, up from 1.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
Checkmarx SAST2.2%
Apiiro1.4%
Other96.4%
Static Application Security Testing (SAST)
 

Featured Reviews

Abimael Ferreira - PeerSpot reviewer
Security at Blaze Information Security
Centralized code analysis has improved my workflow and prioritizes critical vulnerabilities
Apiiro offers several features that I consider the best, such as the ability to have multiple developers and AppSec professionals working on the same project, and through the platform, we can see the number of vulnerabilities, generate reports, and integrate Snyk within our workflow. Before the code goes to production, Apiiro can read all that code and determine if everything is okay or if improvements are needed. The reports generated by Apiiro and its integration with Snyk contribute to my development process by giving us visibility into what is actually vulnerable, as automation like Apiiro makes it much easier to track vulnerabilities without spending too much time manually checking for issues, thus generating meaningful reports afterward. Apiiro manages permissions very effectively, which is interesting from an organizational standpoint because it allows us to separate which people can access a given project and designate project administrators who can approve or reject changes once a fix is made. I found the accuracy and reliability of Apiiro's results to be very good, as it can predict issues based on its existing data.
RR
Incident Manager at a computer software company with 1,001-5,000 employees
Improved code security reporting has streamlined reviews but response times still need work
I assess the accuracy and efficiency of Checkmarx SAST and notice that sometimes there are false positives, so we bring it up to the vendor and ask them to add ignore rules to prevent it from appearing again when they see a particular pattern. This is how we have been notifying Checkmarx SAST about false positives. The detailed reports from Checkmarx SAST help with our security process by showing details about which line is actually vulnerable, which is beneficial for the developers, and I do not have any suggestions or inputs on that area. The ability to generate actionable insights from Checkmarx SAST impacts our software development lifecycle by allowing developers to generate reports. We have explained the options for generating both detailed reports and executive reports, and once they generate it, they get JIRA tickets to work off, although I doubt they open Checkmarx SAST user interface frequently.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Apiiro's secrets detection feature has saved us several times, which we appreciate greatly."
"The positive impact I have seen from working with Apiiro for my company includes the metrics that we get from Apiiro, which have been extremely helpful."
"The workflow automation is likely the best aspect of the solution."
"Apiiro manages permissions very effectively, which is interesting from an organizational standpoint because it allows us to separate which people can access a given project and designate project administrators who can approve or reject changes once a fix is made."
"The most important feature is that Checkmarx protects our company against attacks."
"The detailed reports from Checkmarx SAST help with our security process by showing details about which line is actually vulnerable, which is beneficial for the developers, and I do not have any suggestions or inputs on that area."
"This helps us a lot in identifying vulnerabilities in early stages, and the integration within the IDEs helps developers get the results into their IDE itself, making it easier for them to fix vulnerabilities."
"The CX1 is a unified platform that covers all components such as SAST, SCA, DAST, container scanning, and infrastructure code, which is quite beneficial because some clients need one-stop solutions for all their needs."
"The most important competitive advantage and benefit is the ability to identify vulnerabilities in the source code immediately without needing to complete the coding."
 

Cons

"User management is a little bit clunky."
"The UI sometimes helps but can also be a bit confusing."
"I would like support for our self-hosted Git server, other than GitHub, just regular Git."
"My first feedback for Apiiro is that it is very slow, extremely slow."
"The main challenge with Checkmarx SAST is the price. The price is a challenge because Checkmarx SAST is a very big brand, and many mid-sized companies cannot afford it as they are very price-conscious."
"The accuracy of the results depends on various factors, as some of the test folders tend to give us false positives, which makes a huge impact on the vulnerabilities."
"The on-premises version is more expensive compared to the cloud version."
"I believe that nothing in particular could be improved about Checkmarx SAST, only the turnaround time and the fact that technical account managers keep moving around, which leads to some lag in communication."
"We had some issues where Checkmarx did not recognize a vulnerability. We had to talk with the vendor, and they had to include an improvement in the tool to resolve this issue."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
12%
Construction Company
8%
Comms Service Provider
8%
Financial Services Firm
17%
Manufacturing Company
10%
Computer Software Company
10%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What needs improvement with Apiiro?
One area Apiiro could improve is reporting customization and dashboard flexibility with more advanced filtering and easier communication.
What is your primary use case for Apiiro?
Apiiro is primarily used for code scanning and integration with source code control. The main use cases include code scanning and code snippet analysis. Apiiro provides security and visibility by h...
What advice do you have for others considering Apiiro?
Based on my experience with Apiiro, I would recommend it to organizations looking to strengthen their application security processes and integrate security into their development workflows. One of ...
What is your experience regarding pricing and costs for Checkmarx SAST?
We were users in a small country, and we paid one consolidated bill for all the tools, so I don't know the specific amount for Checkmarx.
What needs improvement with Checkmarx SAST?
I believe that nothing in particular could be improved about Checkmarx SAST, only the turnaround time and the fact that technical account managers keep moving around, which leads to some lag in com...
What is your primary use case for Checkmarx SAST?
I manage the application security side of the products here, currently utilizing solutions such as Checkmarx, Akamai, Traceable, and Invicti, which are the security scanning tools that we use. In t...
 

Comparisons

 

Also Known As

Apiiro Control Plane (ASOC), Apiiro API Security (SAST), Apiiro Open Source (SCA)
SAST
 

Overview

 

Sample Customers

Morgan Stanley, Rakuten, Jack Henry, SoFi, Colgate, Navan
Information Not Available
Find out what your peers are saying about Apiiro vs. Checkmarx SAST and other solutions. Updated: November 2026.
920,929 professionals have used our research since 2012.