

Checkmarx One and Skybox Security Suite compete in the cybersecurity domain, focusing on enterprise security solutions. Checkmarx One holds the upper hand with its strong scanning capabilities, while Skybox emphasizes robust compliance and network path analysis.
Features: Checkmarx One offers comprehensive scanning with minimal false positives, broad language support, and integration with SCM tools. It also delivers insightful vulnerability information that aids in secure coding and accelerates development. Skybox Security Suite excels in firewall assurance, network path analysis, and compliance, providing extensive device support and scalability.
Room for Improvement: Checkmarx One could improve by further minimizing false positives, expanding its language support, and enhancing dynamic testing capabilities. Skybox Security Suite would benefit from transitioning to a full web-based interface, improving firewall change management, and refining reporting features. Both products need to enhance false positive handling.
Ease of Deployment and Customer Service: Checkmarx One is flexible, offering hybrid and public cloud deployment options, though technical support feedback is mixed. Skybox Security Suite primarily supports on-premises deployment with hybrid cloud capabilities and is known for strong customer service quality.
Pricing and ROI: Checkmarx One has varied licensing models suitable for different sizes of organizations, but it faces criticism for high costs and complex licensing. Skybox Security Suite is premium priced, with users seeking more flexible licensing. Both products are recognized for substantial ROI due to enhanced security efficiencies despite ongoing cost concerns.
Overall, between the fast scanning, automation, automatic reporting, and easy detection, it has reduced manual effort enough that we did not need an extra reviewer, even as our codebase or team size grew.
Based on my interactions with the clients, I can tell that there is a return on investment because if something is not profitable and it's not helping to save costs or vulnerabilities, clients wouldn't come back to renew their license year after year.
If you raise a support case with Checkmarx, it is handled smoothly.
The customer support team is amazing and they provide on-phone call, email support, and on-website support.
I have relied on Checkmarx One customer support hundreds of times for several things, and Checkmarx One support is very proactive and very responsive.
A significant issue was contacting support after hours on the weekends.
Approximately four billion lines of code are being scanned monthly.
Since it is cloud-based, the infrastructure and PaaS, IaaS, and SaaS are taken care of by the cloud marketplace.
Checkmarx One's scalability has changed my organization because the strong collaboration between the development and security team helps us to do things much faster.
One issue I faced with scalability was the transition from Skybox Security Suite's 6500 platform to the 7500 series due to licensing costs becoming prohibitive.
I would rate the stability of this solution a nine on a scale of 1 to 10 where one is low stability and 10 is high.
Checkmarx One is often down when the cloud provider experiences issues.
Integration into the IDE being used would be beneficial so that code does not need to be uploaded to the website and an IDE-friendly report could be generated.
It could suggest how the code base is written and automatically populate the source code with three different solution options to choose from.
If you can improve the speed optimization, it takes around 30 to 40 minutes for checking a build. If you can make it within five minutes or 10 minutes, that would be great.
Reporting could have been improved, and feature requests often were not implemented.
Only the licensing part of Skybox had an edge. We were not renewing the licenses of Skybox every year, but in the case of other tools, we would have to renew if we wanted to use those tools.
It would be better if something more attractive or similar useful information found in AlgoSec was available.
For a small team under 50 developers, normal expenses come under 30 to 60K.
Due to the number of years I've implemented Checkmarx One, there are rebates and discounts from the OEM which makes it a lot more profitable.
The pricing should be reasonable, matching what we are paying for.
From a commercial perspective, AlgoSec is more expensive compared to Skybox Security Suite.
The pricing became prohibitive when transitioning between the 6500 and 7500 series models.
Since replacing the previous tool, SAST and SCA scans are conducted in a couple of minutes instead of hours or days.
The best features Checkmarx One offers, over the past years, include broad language and technical support that Checkmarx provides, covering most languages.
Checkmarx One has positively impacted our organization as we tend to find vulnerabilities very early in the development cycle.
The tool successfully helped in preventing vulnerabilities and breaches.
Skybox Security Suite's network modeling and path analysis is a good feature when we need to check regarding the connectivity.
The most helpful feature is the firewall analyzer.
| Product | Mindshare (%) |
|---|---|
| Checkmarx One | 1.6% |
| Skybox Security Suite | 0.7% |
| Other | 97.7% |


| Company Size | Count |
|---|---|
| Small Business | 32 |
| Midsize Enterprise | 9 |
| Large Enterprise | 46 |
| Company Size | Count |
|---|---|
| Small Business | 21 |
| Midsize Enterprise | 4 |
| Large Enterprise | 21 |
Checkmarx One delivers robust security through seamless integration with SCM and CI/CD tools, ensuring reliable SAST and SCA. Primarily used by organizations for vulnerability detection, it supports cloud and on-premises deployment to enhance secure coding practices.
Checkmarx One provides organizations with comprehensive tools for secure software development, integrating effectively with CI/CD pipelines to scan thousands of applications. Its capabilities extend to identifying vulnerabilities in both code bases and third-party software. Enhancing workflow by supporting SCM solutions, it assists in maintaining secure coding standards and compliance. While excelling in various areas, it requires improvements in scan speed, reduction of false positives, and broader platform integration, particularly for COBOL and Swift. Its pricing model is noted as high, and demand exists for better tutorials and documentation.
What are the key features of Checkmarx One?Industries implement Checkmarx One for secure coding compliance and vulnerability management across varying environments, choosing between cloud and on-premises deployment based on requirements. Its extensive language support and integration with DevSecOps practices make it a popular choice for organizations aiming to enhance software security.
Skybox Security Suite provides network path analysis, firewall assurance, change management, and vulnerability control. It supports diverse security operations with automation and threat insights through a comprehensive dashboard, offering scalability in large networks and integration with various vendors.
Skybox Security Suite excels in network visualization, firewall rule management, compliance checks, and vulnerability management. It enables cybersecurity teams to audit firewall configurations, ensure compliance with standards like NIST, and identify security gaps. It simplifies security operations for complex network environments with effective integration and optimization features. Despite its high pricing, the suite's automation capabilities, data extraction ease, and extensive threat insights are critical for network infrastructure optimization. Areas for improvement include a web interface, enhanced reporting and automation, broader vendor support, and improved customer support and integration with tools and devices.
What are the key features of Skybox Security Suite?Skybox Security Suite is utilized across industries for its robust network visualization, compliance, and vulnerability management capabilities. Financial services focus on auditing and firewall management to meet stringent regulatory standards. Healthcare relies on it for vulnerability monitoring and patient data protection. Energy sectors benefit from its change management and threat insight features to secure large and diverse infrastructures.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.