Checkmarx One vs Polyspace Code Prover comparison

Checkmarx and MathWorks are both solutions in the Application Security Tools category. Checkmarx is ranked #3 with an average rating of 7.8, while MathWorks is ranked #19 with an average rating of 7.8. Checkmarx holds a 10.7% mindshare in AS, compared to MathWorks’s 1.2% mindshare. Additionally, 87% of Checkmarx users are willing to recommend the solution, compared to 83% of MathWorks users who would recommend it.

Checkmarx One

Read 70 Checkmarx One reviews

21,297 Views
14,284 Comparison Views

87% willing to recommend

Polyspace Code Prover

Read 6 Polyspace Code Prover reviews

1,615 Views
1,024 Comparison Views

83% willing to recommend

Checkmarx One

Polyspace Code Prover

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Checkmarx One and Polyspace Code Prover deliver robust solutions for software security and verification. Polyspace Code Prover slightly edges out in advanced static code analysis, though Checkmarx One is favored for affordability and support services.

Features: Checkmarx One integrates well and offers comprehensive security scanning, advantageous for DevOps teams. Polyspace Code Prover excels in sophisticated static analysis and proving code correctness without execution while also providing precise identification of coding flaws.

Room for Improvement: Checkmarx One could enhance its scanning speed and the navigation intuitiveness of its tools. Polyspace Code Prover could improve scalability and parallel processing capabilities. Checkmarx needs quicker scanning, contrasting with Polyspace's scalability needs.

Ease of Deployment and Customer Service: Checkmarx One ensures straightforward deployment and reliable customer service, aiding smoother integration. Polyspace Code Prover demands more setup time, but offers responsive and knowledgeable support. Checkmarx offers seamless initial experiences, while Polyspace requires significant setup effort but maintains high support quality.

Pricing and ROI: Checkmarx One is seen as budget-friendly, offering better pricing options for users seeking value. Polyspace Code Prover’s advanced features justify its higher setup costs, delivering long-term cost-effectiveness for thorough code analysis.

To learn more, read our detailed Checkmarx One vs. Polyspace Code Prover Report (Updated: March 2025).

Buyer's Guide

Checkmarx One vs. Polyspace Code Prover

March 2025

Download the complete report

Helped 845,406 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Checkmarx One

Ranking in Application Security Tools

3rd

Average Rating

7.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (3rd), Vulnerability Management (21st), Static Code Analysis (2nd), API Security (3rd), DevSecOps (2nd), Risk-Based Vulnerability Management (8th)

Polyspace Code Prover

Ranking in Application Security Tools

19th

Average Rating

7.8

Reviews Sentiment

8.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of April 2025, in the Application Security Tools category, the mindshare of Checkmarx One is 10.7%, down from 15.1% compared to the previous year. The mindshare of Polyspace Code Prover is 1.2%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Rohit Kesharwani

Manager, Engineering at 7-Eleven.

Provides good security analysis and security identification within the source code

We integrate Checkmarx into our software development cycle using GitLab's CI/CD pipeline. Checkmark has been the most helpful for us in the development stage. The solution's incremental scanning feature has impacted our development speed. The solution's vulnerability detection is around 80% to 90% accurate. I would recommend Checkmarx to other users because it is one of the good tools for doing security analysis and security identification within the source code. Overall, I rate Checkmarx a nine out of ten.

Read full review

Aman Singla

Senior Engineer at a manufacturing company with 10,001+ employees

Easy to setup with reliable outputs and good reliability

It is easy to set up the solution. We can actually modify it using script also. It's pretty easy to link it with our in-house toolchain with the Polyspace configuration settings. If we have small amounts of data, it's quick and you can set it up within ten to 15 minutes. However, depending on the size of the data and the variables, it could take a while since you have to provide a range for all variables. If you have, for example, 500 variables, you'll be configuring a lot. However, the input extremes can be fed using an Excel file or some other format.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The setup is fairly easy. We didn't struggle with the process at all."

"What I like best about Checkmarx is that it has fewer false positives than other products, giving you better results."

"Helps us check vulnerabilities in our SAP Fiori application."

"The user interface is modern and nice to use."

"Checkmarx pinpoints the vulnerability in the code and also presents the flow of malicious input across the application."

"We use the solution for dynamic application testing."

"It's not an obstacle for developers. They can easily write their code and make it more secure with Checkmarx."

"It gives the proper code flow of vulnerabilities and the number of occurrences."

More Checkmarx One pros

"When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts, and null pointer dereferences."

"Polyspace Code Prover is a very user-friendly tool."

"The product detects memory corruptions."

"The outputs are very reliable."

"Polyspace Code Prover has made me realize it differs from other static code analysis tools because it runs the code. So it's quite distinct in that aspect."

Cons

"With Checkmarx, normally you need to use one tool for quality and you need to use another tool for security. I understand that Checkmarx is not in the parity space because it's totally different, but they could include some free features or recommendations too."

"Checkmarx needs improvement in its Dynamic Application Security Testing (DAST) and API security features."

"Integration into the SDLC (i.e. support for last version of SonarQube) could be added."

"I would like to see the DAST solution in the future."

"The lack of ability to review compiled source code. It would then be able to compete with other scanning tools, such as Veracode."

"I really would like to integrate it as a service along with the SAP HANA Cloud Platform. It will then be easy to use it directly as a service."

"It provides us with quite a handful of false positive issues. If Checkmarx could reduce this number, it would be a great tool to use."

"We can run only one project at a time."

More Checkmarx One cons

"The tool has some stability issues."

"Automation could be a challenge."

"I'd like the data to be taken from any format."

"Using Code Prover on large applications crashes sometimes."

"One of the main disadvantages is the time it takes to initiate the first run."

Pricing and Cost Advice

"The interface used to create custom rules comes at an additional cost."

"It is a good product but a little overpriced."

"I would rate the solution’s pricing an eight out of ten. The tool’s pricing is higher than others and it is for the license alone."

"If you want more, you have to pay more. You have to pay for additional modules or functionalities."

"The number of users and coverage for languages will have an impact on the cost of the license."

"Before implementing the product I would evaluate if it is really necessary to scan so many different languages and frameworks. If not, I think there must be a cheaper solution for scanning Java-only applications (which are 90% of our applications)."

"The price of Checkmarx could be reduced to match their competitors, it is expensive."

"We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."

More Checkmarx One pricing and cost advice

"We use the paid version."

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

845,406 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

14%

Manufacturing Company

10%

Government

Manufacturing Company

39%

Computer Software Company

12%

Transportation Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?

I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.

See all answers

What do you like most about Checkmarx?

Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.

See all answers

What is your experience regarding pricing and costs for Checkmarx?

The pricing is relatively expensive due to the product's quality and performance, but it is worth it.

See all answers

What do you like most about Polyspace Code Prover?

When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts,...

See all answers

What is your experience regarding pricing and costs for Polyspace Code Prover?

We use the paid version.

See all answers

What needs improvement with Polyspace Code Prover?

I'm still trying to use constraints with range propagation, but I can't get it to work properly, and I haven't found any documentation. It require support. There could be an issue with range propag...

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs Checkmarx One

Compared 43% of the time

Veracode vs Checkmarx One

Compared 12% of the time

Fortify on Demand vs Checkmarx One

Compared 6% of the time

Checkmarx SAST vs Checkmarx One

Compared 5% of the time

OWASP Zap vs Checkmarx One

Compared 4% of the time

More Checkmarx One Competitors

Coverity vs Polyspace Code Prover

Compared 30% of the time

SonarQube Server (formerly SonarQube) vs Polyspace Code Prover

Compared 26% of the time

Klocwork vs Polyspace Code Prover

Compared 17% of the time

CodeSonar vs Polyspace Code Prover

Compared 9% of the time

Snyk vs Polyspace Code Prover

Compared 2% of the time

More Polyspace Code Prover Competitors

Product Reports

Buyer's Guide

Checkmarx One

March 2025

Download Checkmarx One product report

Buyer's Guide

Polyspace Code Prover

March 2025

Download Polyspace Code Prover product report

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
API security
Dynamic Application Security Testing (DAST)
Container security
IaC security
Correlation, prioritization, and risk management
Codebashing secure code training
AI security
Tech partnerships extending AppSec into runtime analysis
Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Checkmarx

Polyspace Code Prover is a sound static analysis tool that proves the absence of overflow, divide-by-zero, out-of-bounds array access, and certain other run-time errors in C and C++ source code. It produces results without requiring program execution, code instrumentation, or test cases. Polyspace Code Prover uses semantic analysis and abstract interpretation based on formal methods to verify software interprocedural, control, and data flow behavior. You can use it on handwritten code, generated code, or a combination of the two. Each operation is color-coded to indicate whether it is free of run-time errors, proven to fail, unreachable, or unproven.

MathWorks

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC

Alenia Aermacchi, CSEE Transport, Delphi Diesel Systems, EADS, Institute for Radiological Protection and Nuclear Safety, Korean Air, KOSTAL, Miracor, NASA Ames Research Center

Buyer's Guide

Checkmarx One vs. Polyspace Code Prover

March 2025

Free Report: Checkmarx One vs. Polyspace Code Prover

Find out what your peers are saying about Checkmarx One vs. Polyspace Code Prover and other solutions. Updated: March 2025.

DOWNLOAD NOW

845,406 professionals have used our research since 2012.

See our Checkmarx One vs. Polyspace Code Prover report.

See our list of best Application Security Tools vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.