Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs HCL AppScan comparison

Checkmarx and HCLSoftware are both solutions in the Application Security Tools category. Checkmarx is ranked #3 with an average rating of 7.7, while HCLSoftware is ranked #14 with an average rating of 8.0. Checkmarx holds a 10.3% mindshare in AS, compared to HCLSoftware ’s 2.7% mindshare. Additionally, 87% of Checkmarx users are willing to recommend the solution, compared to 83% of HCLSoftware users who would recommend it.
Checkmarx One
Read 70 Checkmarx One reviews
  • 20,037 Views
  • 13,630 Comparison Views
87% willing to recommend
HCL AppScan
Read 43 HCL AppScan reviews
  • 3,673 Views
  • 2,799 Comparison Views
83% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Oct 8, 2024

HCL AppScan and Checkmarx One compete in the application security category. Checkmarx One seems to have the upper hand due to its advanced capabilities and integration flexibility, making it a favored choice for comprehensive security.

Features: HCL AppScan is known for thorough scanning capabilities, comprehensive vulnerability management, and effective pricing. Checkmarx One is valued for precise results, seamless integration with development tools, and insight-rich security analysis.

Room for Improvement: HCL AppScan users call for enhancements in scan speed, customization options, and interface design. Checkmarx One users highlight the need for improved setup documentation, more intuitive configuration processes, and additional training resources.

Ease of Deployment and Customer Service: HCL AppScan benefits from straightforward deployments but would gain from more robust customer service. Checkmarx One offers flexible deployment options and supportive customer service.

Pricing and ROI: HCL AppScan provides affordable options with a promising return on investment. Checkmarx One, despite being more expensive, is seen as justified by users due to its extensive features and long-term security benefits.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Checkmarx One vs. HCL AppScan Report (Updated: April 2025).
Buyer's Guide
Checkmarx One vs. HCL AppScan
April 2025
Download the complete report
Helped 851,604 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.5
Checkmarx One enhances security, speeds delivery, reduces costs, and returns ROI within six months for some users.
Sentiment score
3.2
HCL AppScan enhances architecture with fewer errors and improved security, achieving 50% return and 20% cost savings.
 

Customer Service

Sentiment score
7.1
Checkmarx One provides generally positive support, but response delays and unresolved tickets challenge some users, despite skilled assistance.
Sentiment score
6.8
HCL AppScan's support is responsive with mixed reviews, facing regional challenges and lagging behind competitors like Veracode.
No quotes available
For more quotes and insights, download the Checkmarx One report
Veracode provides excellent assistance and regularly scheduled calls to address customer concerns and updates.
For more quotes and insights, download the HCL AppScan report
 

Scalability Issues

Sentiment score
7.1
Checkmarx One offers strong scalability, supports automation, and manages scan engines, though may face processing time and licensing cost constraints.
Sentiment score
5.4
HCL AppScan is scalable yet varies by license, integration issues, infrastructure compatibility, and CI/CD pipeline design effectiveness.
 

Stability Issues

Sentiment score
7.1
Checkmarx One is generally stable, but users report occasional crashes and performance issues, varying stability ratings from 4-10.
Sentiment score
5.0
HCL AppScan is stable and reliable, with minor hardware issues, improved by recent upgrades enhancing performance and stability.
 

Room For Improvement

Checkmarx One requires enhancements in false positive reduction, language support, pricing, role management, UI, and support response time.
HCL AppScan requires improvements in vulnerability detection, usability, integration, performance, support, pricing, and language/codebase compatibility to stay competitive.
 

Setup Cost

Checkmarx One's pricing is costly but justified by its flexibility, competitive pricing, and enhanced security for enterprises.
HCL AppScan is considered expensive but cost-effective, with varied pricing opinions influenced by its premium features and discounts.
No quotes available
For more quotes and insights, download the Checkmarx One report
Companies often choose based on budget constraints, with Veracode being on the higher end cost-wise.
For more quotes and insights, download the HCL AppScan report
 

Valuable Features

Checkmarx One offers advanced code analysis, seamless repository integration, and user-friendly features for efficient security testing and vulnerability management.
HCL AppScan detects vulnerabilities, integrates with agile processes, offers scalability, user-friendly features, and AI-enhanced rapid scanning for security.
No quotes available
For more quotes and insights, download the Checkmarx One report
AppScan's most valuable features include its ability to identify vulnerabilities accurately, provide detailed remediation steps, and the newly introduced AI-powered features that enhance its functionality further.
For more quotes and insights, download the HCL AppScan report
 

Categories and Ranking

Checkmarx One
Ranking in Application Security Tools
3rd
Ranking in Static Application Security Testing (SAST)
3rd
Average Rating
7.6
Reviews Sentiment
6.9
Number of Reviews
70
Ranking in other categories
Vulnerability Management (24th), Static Code Analysis (2nd), API Security (4th), DevSecOps (2nd), Risk-Based Vulnerability Management (10th)
HCL AppScan
Ranking in Application Security Tools
14th
Ranking in Static Application Security Testing (SAST)
12th
Average Rating
7.8
Reviews Sentiment
6.1
Number of Reviews
43
Ranking in other categories
Dynamic Application Security Testing (DAST) (1st)
 

Mindshare comparison

As of May 2025, in the Application Security Tools category, the mindshare of Checkmarx One is 10.3%, down from 14.8% compared to the previous year. The mindshare of HCL AppScan is 2.7%, up from 2.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Rohit Kesharwani - PeerSpot reviewer
Provides good security analysis and security identification within the source code
We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.
Read full review
Rishi Anupam - PeerSpot reviewer
A stable and scalable scanning solution with good reporting feature
The solution is used for the vulnerabilities scan on the network side The reporting part is the most valuable feature. The penetration testing feature should be included. I have been using the solution for four years. It is a stable solution. I rate it seven out of ten. It is a scalable…
Read full review
report
See which vendors are best for you
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
See recommendations
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Computer Software Company
14%
Manufacturing Company
10%
Government
5%
Computer Software Company
18%
Financial Services Firm
14%
Government
12%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
See all answers
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
See all answers
What is your experience regarding pricing and costs for Checkmarx?
The pricing is relatively expensive due to the product's quality and performance, but it is worth it.
See all answers
What do you like most about HCL AppScan?
The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.
See all answers
What needs improvement with HCL AppScan?
AppScan needs to improve its handling of false positives. It also requires enhancements in customer support, similar to what Veracode provides. Regularly scheduling calls with clients to discuss fe...
See all answers
What is your primary use case for HCL AppScan?
The primary use case for AppScan is for security purposes. I compare AppScan with other tools such as Veracode. We use AppScan for vulnerability detection and auto-remediation of vulnerabilities wi...
See all answers
 

Comparisons

SonarQube Server (formerly SonarQube) vs Checkmarx One Logo
SonarQube Server (formerly SonarQube) vs Checkmarx One
Compared 39% of the time
Veracode vs Checkmarx One Logo
Veracode vs Checkmarx One
Compared 12% of the time
Fortify on Demand vs Checkmarx One Logo
Fortify on Demand vs Checkmarx One
Compared 6% of the time
Checkmarx SAST vs Checkmarx One Logo
Checkmarx SAST vs Checkmarx One
Compared 5% of the time
Acunetix vs Checkmarx One Logo
Acunetix vs Checkmarx One
Compared 1% of the time
More Checkmarx One Competitors
Acunetix vs HCL AppScan Logo
Acunetix vs HCL AppScan
Compared 16% of the time
SonarQube Server (formerly SonarQube) vs HCL AppScan Logo
SonarQube Server (formerly SonarQube) vs HCL AppScan
Compared 12% of the time
Veracode vs HCL AppScan Logo
Veracode vs HCL AppScan
Compared 10% of the time
Fortify on Demand vs HCL AppScan Logo
Fortify on Demand vs HCL AppScan
Compared 7% of the time
Qualys Web Application Scanning vs HCL AppScan Logo
Qualys Web Application Scanning vs HCL AppScan
Compared 6% of the time
More HCL AppScan Competitors
 

Product Reports

Buyer's Guide
Checkmarx One
May 2025
Checkmarx One reportDownload Checkmarx One product report
Buyer's Guide
HCL AppScan
May 2025
HCL AppScan reportDownload HCL AppScan product report
 

Also Known As

No data available
IBM Security AppScan, Rational AppScan, AppScan
 

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

  • Static Application Security Testing (SAST)
  • Software Composition Analysis (SCA)
  • API security
  • Dynamic Application Security Testing (DAST)
  • Container security
  • IaC security
  • Correlation, prioritization, and risk management
  • Codebashing secure code training
  • AI security
  • Tech partnerships extending AppSec into runtime analysis
  • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.

HCLSoftware
 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Essex Technology Group Inc., Cisco, West Virginia University, APIS IT
Buyer's Guide
Checkmarx One vs. HCL AppScan
April 2025
Free Report: Checkmarx One vs. HCL AppScan
Find out what your peers are saying about Checkmarx One vs. HCL AppScan and other solutions. Updated: April 2025.
DOWNLOAD NOW
851,604 professionals have used our research since 2012.
See our Checkmarx One vs. HCL AppScan report.
See our list of best Application Security Tools vendors and best Static Application Security Testing (SAST) vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.