No more typing reviews! Try our Samantha, our new voice AI agent.

Checkmarx One vs Kore.ai comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Checkmarx One
Ranking in AI Security
4th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
81
Ranking in other categories
Application Security Tools (2nd), Static Application Security Testing (SAST) (2nd), Vulnerability Management (13th), Container Security (15th), Static Code Analysis (2nd), API Security (6th), Dynamic Application Security Testing (DAST) (2nd), DevSecOps (3rd), Risk-Based Vulnerability Management (10th), Application Security Posture Management (ASPM) (4th)
Kore.ai
Ranking in AI Security
8th
Average Rating
7.8
Number of Reviews
16
Ranking in other categories
AI Agent Builders (7th), AI Customer Experience Personalization (7th), AI Customer Support (2nd), AI IT Support (7th)
 

Mindshare comparison

As of November 2026, in the AI Security category, the mindshare of Checkmarx One is 1.1%, down from 3.8% compared to the previous year. The mindshare of Kore.ai is 0.4%. It is calculated based on PeerSpot user engagement data.
AI Security Mindshare Distribution
ProductMindshare (%)
Checkmarx One1.1%
Kore.ai0.4%
Other98.5%
AI Security
 

Featured Reviews

Shahzad Shahzad - PeerSpot reviewer
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution
Enable secure development workflows while identifying opportunities for faster scans and improved AI guidance
Checkmarx One is a very strong platform, but there are several areas where it can improve to support modern DevSecOps workflows even better. For example, better real-time developer guidance is needed. The IDE plugin should offer richer AI-powered auto-fixes similar to SNYK Code or GitHub Copilot Security, as current guidance is good but not deeply contextual for large-scale enterprise codebases. This matters because it reduces developer friction and accelerates shift-left adoption. More transparency control over the correlation engines is another need. The correlation engine is powerful but not fully transparent. Users want to understand why vulnerabilities were correlated or de-prioritized, which helps AppSec teams trust the prioritization logic. Faster SAST scan and more language coverage is needed since SAST scan can still be slow for very large mono-repos and there is limited deep support for new language frameworks like Rust and Go, along with advanced coverage for serverless-specific frameworks. This matters because large organizations want sub-minute scans in CI/CD as cloud-native ecosystems evolve fast. A strong API security module is another area for enhancement. API security scanning could be improved with active testing, API discovery, full Swagger, OpenAPI, drift detection, and schema-based fuzzing. This is important as API attacks are one of the biggest AppSec risks in 2025. Checkmarx One is strong, but I see a few areas for improvement including faster SAST scanning for large mono-repos, deeper language framework support, more transparent correlation logic, and stronger API security that includes discovery and runtime context. The IDE plugin could offer more AI-assisted fixes, and the SBOM lifecycle tracking can evolve further. Enhancing integration with SIEM and SOAR would also make enterprise adoption smoother, and these improvements would help developers and AppSec teams move faster with more accuracy.
Judin Augustin - PeerSpot reviewer
Associate Data Scientist at Guide House
Automation has reduced large call centers and provides real-time outbound support for patients
Kore.ai is a low-code platform, and you do not necessarily have to be an expert in artificial intelligence or generative AI to use this platform. However, if you have that experience, it will be a valuable add-on. The main advantage is that it has almost every kind of plugin available to use, whether for live agents or if you want to use it as a call center. You have real-time capabilities and the most useful plugins available, with almost every kind of model available with configurations. We can configure the ML models and train them. The platform is very user-friendly with explanatory features and a great UI. One significant feature is the live testing platform with Kore.ai. When you are creating a workflow, you have an interactive, real-time testing platform that reflects every change you make. This makes it easy to debug errors or add new features. Additionally, Kore.ai has many different tools and platforms that cater to different needs, whether for a call center, normal workflow, or machine learning workflow, which is really useful. Because of Kore.ai, it was much easier than creating something manually. A low-code platform always helps, and when that platform has this much capability, it provides far more value than manual development. It was particularly helpful for our team that we could create a POC and get that project into production. Kore.ai helped our team build a generative AI outbound calling chatbot, and it truly helped our customers. If you have a hospital with a thousand employees in a call center, you might consider outsourcing. However, with Kore.ai's outbound calling capabilities, you can eliminate the outsourcing part. You do not need a thousand call center employees. You can accomplish this through automation with just one or two employees if people need to switch to agents. This represented a significant cost reduction.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the simple user interface."
"The most valuable features of Checkmarx are difficult to pinpoint because of the way the functionalities and the features are intertwined, it's difficult to say which part of them I prefer most. You initiate the scan, you have a scan, you have the review set, and reporting, they all work together as one whole process. It's not like accounting software, where you have the different features, et cetera."
"The ability to track the vulnerabilities inside the code (origin and destination of weak variables or functions)."
"What I like best about Checkmarx is that it has fewer false positives than other products, giving you better results."
"The scalability of the solution is good."
"The reports are very good because they include details on the code level, and make suggestions about how to fix the problems."
"Checkmarx One has positively impacted the organization by providing resolution strategies and indicating which vulnerabilities need to be fixed."
"It moved our organization towards being agile vs. waterfall."
"Kore.ai has positively impacted my organization by helping us build intelligent chatbots and incorporating voice agents, enabling various clients to adopt these solutions, which have been revolutionary for their businesses."
"Kore.ai has positively impacted my organization because we are implementors, and I would say that approximately 80% of our income comes from developed projects with Kore.ai."
"The positive impacts we have seen include expected reductions in average handle time, which is typically around 40 to 50 percent for any BFSI industry use case."
"Kore.ai is outstanding compared to other AI agent platforms such as Copilot Studio due to the centralized nature and integration of different apps within a single platform."
"The best feature of Kore.ai is that it is a cost-saving tool because when we use IVR, we have to assign agents at the backend, but using Kore.ai, we can automate all of those functions."
"Because of Kore.ai, it was much easier than creating something manually, and when that platform has this much capability, it provides far more value than manual development."
"Kore.ai has positively impacted our organization by reducing error rates from around fifteen to twenty percent to just two to three percent after implementation."
"Kore.ai helped us integrate a lot through documentation and trial and error, making it straightforward to integrate overall, resulting in a very good experience for first-timers."
 

Cons

"I really would like to integrate it as a service along with the SAP HANA Cloud Platform. It will then be easy to use it directly as a service."
"The Dynamic Application Security Testing (DAST) feature should be better."
"It is an expensive solution."
"I think the CxAudit tool has room for improvement. At the beginning you can choose a scan of a project, but in any event the project must be scanned again (wasting time)."
"The product can be improved by continuing to expand the application languages and frameworks that can be scanned for vulnerabilities. This includes expanded coverage for mobile applications as well as open-source development tools."
"With Checkmarx, normally you need to use one tool for quality and you need to use another tool for security. I understand that Checkmarx is not in the parity space because it's totally different, but they could include some free features or recommendations too."
"The statistics module has a function that allows you to show some statistics, but I think it's limited. Maybe it needs more information."
"Scanning speed optimization is an area where improvements can be made, and we can reduce false positives."
"Kore.ai can be improved by enhancing their documentation, which is currently a bit disorganized."
"To improve Kore.ai, I suggest focusing on more agentic automation, such as offering MCP kind of features with an orchestration layer for use cases."
"In support, the team is not the greatest, but it works."
"I rated Kore.ai an 8 out of 10 because additional features could be added to it."
"I choose 7.5 out of 10 for Kore.ai because a few things already need to be improved, one of which I have mentioned."
"I would suggest incorporating pre-recorded videos in the tutorials and enhancing the documentation area to make it more user-friendly."
"This is a regret for me."
"The two points I deduct relate to the integrations, which were not as extensive as I initially expected."
 

Pricing and Cost Advice

"The solution's price is high and you pay based on the number of users."
"Checkmarx is comparatively costlier than other products, which is why some of the customers feel reluctant to go for it, though performance-wise, Checkmarx can compete with other products."
"Most of my customers opted for a perpetual license. They prefer to pay the highest amount up front for the perpetual license and then pay for additional support annually."
"I believe pricing is better compared to other commercial tools."
"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."
"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."
"It is an expensive solution."
"The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
Information not available
report
Use our free recommendation engine to learn which AI Security solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
9%
Outsourcing Company
8%
Computer Software Company
7%
Outsourcing Company
12%
Manufacturing Company
12%
Construction Company
11%
Retailer
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise9
Large Enterprise46
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise3
Large Enterprise14
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
What is the biggest difference between Veracode and Checkmarx?
According to my experience of using both the tools in different organizations Veracode is a Cloud-native, managed AppSec platform with strong focus on ease of use, it is SaaS delivery, and provide...
What is your experience regarding pricing and costs for Checkmarx?
Checkmarx One is a premium solution, so budget accordingly. Make sure you understand how licensing scales with additional applications and users. I advise negotiating multi-year contracts or bundle...
What is your experience regarding pricing and costs for Kore.ai?
The experience with pricing, setup cost, and licensing of Kore.ai is that the price is low, and the licensing is also not costly.
What needs improvement with Kore.ai?
Kore.ai could be improved by offering more in-depth trainings and assignments with the platform itself so that anyone could learn how to use it better. We sometimes faced challenges with the integr...
What is your primary use case for Kore.ai?
Kore.ai is designed to create AI chatbots for agents working with clients, integrating agents for their main duties. I completed a personal project using Kore.ai to build an agent for university ad...
 

Comparisons

 

Overview

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Leading banks & Enterprise Companies
Find out what your peers are saying about Checkmarx One vs. Kore.ai and other solutions. Updated: September 2026.
920,769 professionals have used our research since 2012.