Checkmarx One vs Fortify Software Security Center comparison

Checkmarx and OpenText are both solutions in the Static Application Security Testing (SAST) category. Checkmarx is ranked #3 with an average rating of 8.3, while OpenText is ranked #28 with an average rating of 8.0. Checkmarx holds a 10.0% mindshare in SAST, compared to OpenText’s 0.5% mindshare. Additionally, 87% of Checkmarx users are willing to recommend the solution, compared to 100% of OpenText users who would recommend it.

Checkmarx One

Read 71 Checkmarx One reviews

18,550 Views
15,582 Comparison Views

87% willing to recommend

Fortify Software Security C...

Read 7 Fortify Software Security Center reviews

593 Views
534 Comparison Views

100% willing to recommend

Checkmarx One

Fortify Software Security C...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Fortify Software Security Center and Checkmarx One are two prominent solutions competing in application security. Checkmarx One appears to have the upper hand due to its comprehensive features and ease of use.

Features: Fortify offers comprehensive vulnerability coverage, numerous integration options, and strong support. Checkmarx One is known for its intuitive functionality, robust scanning capabilities, and support for multiple programming languages.

Room for Improvement: Fortify users point out the need for improved reporting, faster scanning speeds, and enhanced analytics. Checkmarx One could benefit from better scan accuracy, a more user-friendly installation, and further optimization of its accuracy.

Ease of Deployment and Customer Service: Fortify's deployment is stable but has a steep learning curve. Customer service is proactive yet needs faster response times. Checkmarx One offers a smoother deployment and consistent customer support.

Pricing and ROI: Fortify has a manageable initial setup cost, though its ROI is questioned due to optimization time. Checkmarx One is more expensive but justifies its ROI with streamlined processes and faster integration.

To learn more, read our detailed Checkmarx One vs. Fortify Software Security Center Report (Updated: September 2025).

Buyer's Guide

Checkmarx One vs. Fortify Software Security Center

September 2025

Download the complete report

Helped 868,759 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Checkmarx One

Ranking in Static Application Security Testing (SAST)

3rd

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Application Security Tools (3rd), Vulnerability Management (23rd), Container Security (23rd), Static Code Analysis (3rd), API Security (6th), Dynamic Application Security Testing (DAST) (4th), DevSecOps (5th), Risk-Based Vulnerability Management (10th), Application Security Posture Management (ASPM) (3rd)

Fortify Software Security C...

Ranking in Static Application Security Testing (SAST)

28th

Average Rating

7.8

Reviews Sentiment

5.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of October 2025, in the Static Application Security Testing (SAST) category, the mindshare of Checkmarx One is 10.0%, down from 12.1% compared to the previous year. The mindshare of Fortify Software Security Center is 0.5%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST) Market Share Distribution
Product	Market Share (%)
Checkmarx One	10.0%
Fortify Software Security Center	0.5%
Other	89.5%

Static Application Security Testing (SAST)

Featured Reviews

Syed Hasan

Specialist Leader at Deloitte

Partner experiences excellent technical support and seamless initial setup

In my opinion, if we are able to extract or show the report, and because everything is going towards agent tech and GenAI, it would be beneficial if it could get integrated with our code base and do the fix automatically. It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from. This would be really helpful.

Read full review

Jonathan Steyn

Principal Technical Consultant at EOH

Comprehensive vulnerability analysis and customization features with decent pricing

Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances. WebInspect supports a number of APIs and web endpoints. I find its feature of macro recording allows for testing vulnerabilities during multi-factor authentication sessions very valuable. I appreciate the ability to further analyze data with tools like Audit Workbench.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The best thing about Checkmarx is the amount of vulnerabilities that it can find compared to other free tools."

"It shows in-depth code of where actual vulnerabilities are."

"The report function is the solution's greatest asset."

"The solution improved the efficiency of our code security reviews. It helps tremendously because it finds hundreds of potential problems sometimes."

"The reports are very good because they include details on the code level, and make suggestions about how to fix the problems."

"We use the solution to validate the source code and do SAST and security analysis."

"The features and technologies are very good. The flexibility and the roadmap have also been very good. They're at the forefront of delivering the additional capabilities that are required with cloud delivery, etc. Their ability to deliver what customers require and when they require is very important."

"Helps us check vulnerabilities in our SAP Fiori application."

More Checkmarx One pros

"This is a stable solution at the end of the day."

"You can easily download the tool's rule packs and update them."

"Software Security Center is highly customizable and helps me test all vulnerability data against the latest conventions like OWASP Top Ten, CVE Top twenty-five, and several other legal compliances."

"The reporting is very useful because you can always view an entire list of the issues that you have."

"Fortify Analytics' AI function helps scan and provides more detailed explanations and recommendations about vulnerabilities."

"The overall rating for this tool is ten out of ten."

"I like the explanation of issues provided by Fortify Software Security Center."

Cons

"Checkmarx being Windows only is a hindrance. Another problem is: why can't I choose PostgreSQL?"

"The interactive application security testing, or IAST, the interactive part where you're looking at an application that lives in a runtime environment on a server or virtual machine, needs improvement."

"I would like to see the rate of false positives reduced."

"The product can be improved by continuing to expand the application languages and frameworks that can be scanned for vulnerabilities. This includes expanded coverage for mobile applications as well as open-source development tools."

"Checkmarx is not good because it has too many false positive issues."

"Some of the descriptions were found to be missing or were not as elaborate as compared to other descriptions. Although, they could be found across various standard sources but it would save a lot of time for developers, if this was fixed."

"You can't use it in the continuous delivery pipeline because the scanning takes too much time."

"One area for improvement in Checkmarx is pricing, as it's more expensive than other products."

More Checkmarx One cons

"The product's overlap feature is restrictive and requires more customization efforts, which can be expensive."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"We are having issues with false positives that need to be resolved."

"Improvements needed for Software Security Center include better aggregation views of datasets."

"I am not satisfied with the percentage of false positives, which is around eighteen percent."

"This solution is difficult to implement, and it should be made more comfortable for the end-users."

"Fortify Software Security Center's setup is really painful."

Pricing and Cost Advice

"For around 250 users or committers, the cost is approximately $500,000."

"The price of Checkmarx could be reduced to match their competitors, it is expensive."

"Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."

"It is the right price for quality delivery."

"The solution's price is high and you pay based on the number of users."

"The interface used to create custom rules comes at an additional cost."

"I believe pricing is better compared to other commercial tools."

"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."

More Checkmarx One pricing and cost advice

"The solution is priced fair."

"This is a costly solution that could be cheaper."

"As a Fortify partner company providing technical support, I find the product expensive in our country, where local, inexpensive products are available."

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

868,759 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

19%

Computer Software Company

13%

Manufacturing Company

10%

Government

Manufacturing Company

19%

Financial Services Firm

14%

Computer Software Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	30
Midsize Enterprise	9
Large Enterprise	38

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	1
Large Enterprise	3

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

See all answers

What is your experience regarding pricing and costs for Micro Focus Software Security Center?

In the beginning, it was difficult for me to verify that our usage of Fortify Software Security Center corresponded to the license and criteria. Now, we have negotiated a number of details to respe...

See all answers

What needs improvement with Micro Focus Software Security Center?

I would like the false positive issue to diminish. I have experienced a lot of false positives, but I think this is due to using an older version. I hope the new version will resolve my problem.

See all answers

What is your primary use case for Micro Focus Software Security Center?

They use it to scan applications and fix bugs, which are my customers' main use cases for Fortify Software Security Center. As a reseller, I sell this product to provide application security becaus...

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs Checkmarx One

Compared 44% of the time

Veracode vs Checkmarx One

Compared 8% of the time

Checkmarx SAST vs Checkmarx One

Compared 7% of the time

OpenText Core Application Security vs Checkmarx One

Compared 5% of the time

GitHub Advanced Security vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

OpenText Core Application Security vs Fortify Software Security Center

Compared 40% of the time

Acunetix vs Fortify Software Security Center

Compared 32% of the time

Semgrep vs Fortify Software Security Center

Compared 16% of the time

GitLab vs Fortify Software Security Center

Compared 12% of the time

More Fortify Software Security Center Competitors

Product Reports

Buyer's Guide

Checkmarx One

September 2025

Download Checkmarx One product report

Buyer's Guide

Static Application Security Testing (SAST)

September 2025

Download Fortify Software Security Center product report

Also Known As

No data available

Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.

OpenText

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon

Buyer's Guide

Checkmarx One vs. Fortify Software Security Center

September 2025

Free Report: Checkmarx One vs. Fortify Software Security Center

Find out what your peers are saying about Checkmarx One vs. Fortify Software Security Center and other solutions. Updated: September 2025.

DOWNLOAD NOW

868,759 professionals have used our research since 2012.

See our Checkmarx One vs. Fortify Software Security Center report.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.