Try our new research platform with insights from 80,000+ expert users

Checkmarx One vs Trend Vision One - Cloud Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Ranking in Vulnerability Management
18th
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Continuous Threat Exposure Management (CTEM) (3rd)
Checkmarx One
Ranking in Vulnerability Management
16th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
81
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Container Security (15th), Static Code Analysis (2nd), API Security (3rd), Dynamic Application Security Testing (DAST) (2nd), DevSecOps (3rd), Risk-Based Vulnerability Management (8th), Application Security Posture Management (ASPM) (3rd), AI Security (2nd)
Trend Vision One - Cloud Se...
Ranking in Vulnerability Management
14th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
23
Ranking in other categories
Container Security (16th), Cloud Workload Protection Platforms (CWPP) (9th), Hybrid Cloud Computing Platforms (6th), Extended Detection and Response (XDR) (14th), Cloud Security Posture Management (CSPM) (9th), Cloud-Native Application Protection Platforms (CNAPP) (9th), Attack Surface Management (ASM) (9th), Cloud Infrastructure Entitlement Management (CIEM) (3rd), Cloud Detection and Response (CDR) (4th), AI Security (6th)
 

Mindshare comparison

As of January 2026, in the Vulnerability Management category, the mindshare of Zafran Security is 1.1%, up from 0.2% compared to the previous year. The mindshare of Checkmarx One is 1.3%, up from 1.2% compared to the previous year. The mindshare of Trend Vision One - Cloud Security is 1.2%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Trend Vision One - Cloud Security1.2%
Checkmarx One1.3%
Zafran Security1.1%
Other96.4%
Vulnerability Management
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
Shahzad Shahzad - PeerSpot reviewer
Senior Solution Architect | L3+ Systems & Cloud Engineer | SRE Specialist at Canada Cloud Solution
Enable secure development workflows while identifying opportunities for faster scans and improved AI guidance
Checkmarx One is a very strong platform, but there are several areas where it can improve to support modern DevSecOps workflows even better. For example, better real-time developer guidance is needed. The IDE plugin should offer richer AI-powered auto-fixes similar to SNYK Code or GitHub Copilot Security, as current guidance is good but not deeply contextual for large-scale enterprise codebases. This matters because it reduces developer friction and accelerates shift-left adoption. More transparency control over the correlation engines is another need. The correlation engine is powerful but not fully transparent. Users want to understand why vulnerabilities were correlated or de-prioritized, which helps AppSec teams trust the prioritization logic. Faster SAST scan and more language coverage is needed since SAST scan can still be slow for very large mono-repos and there is limited deep support for new language frameworks like Rust and Go, along with advanced coverage for serverless-specific frameworks. This matters because large organizations want sub-minute scans in CI/CD as cloud-native ecosystems evolve fast. A strong API security module is another area for enhancement. API security scanning could be improved with active testing, API discovery, full Swagger, OpenAPI, drift detection, and schema-based fuzzing. This is important as API attacks are one of the biggest AppSec risks in 2025. Checkmarx One is strong, but I see a few areas for improvement including faster SAST scanning for large mono-repos, deeper language framework support, more transparent correlation logic, and stronger API security that includes discovery and runtime context. The IDE plugin could offer more AI-assisted fixes, and the SBOM lifecycle tracking can evolve further. Enhancing integration with SIEM and SOAR would also make enterprise adoption smoother, and these improvements would help developers and AppSec teams move faster with more accuracy.
ND
Senior Manager at Gsfc Ltd
The executive dashboard offers centralized visibility for added security
We are currently utilizing all three components of Trend Vision One across our entire infrastructure. Trend Vision One is deployed on our servers, provides anti-spam measures for our email through a cloud solution, and functions as an antivirus solution on end-user devices. All three products are sourced from Trend Micro. Trend Vision One - Cloud Security offers centralized visibility across all protection layers, enabling 24/7 monitoring of our environment and immediate issue resolution. If needed, we can also submit a ticket to Trend Micro for assistance. The executive dashboard helps identify abnormalities by highlighting them, allowing for immediate action. The primary benefit of implementing Trend Vision One has been the noticeable increase in network security. Since its implementation, we have observed a significant reduction in attacks on our network. Trend Vision One consolidates security across our network, enabling rapid response capabilities. Trend Vision One helps decrease our threat detection and response time. The platform suggests system improvements as needed, which we then review and implement. Trend Vision One helps decrease the time spent investigating false positives.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"We saw benefits from Zafran Security almost immediately after deploying it."
"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran is an excellent tool."
"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"The tool's valuable features include integrating GPT and Copilot. Additionally, the UI web representation is very user-friendly, making navigation easy. GPT has made several improvements to my security code."
"It is very useful because it fits our requirements. It is also easy to use. It is not complex, and we are satisfied with the results."
"It can integrate very well with DAST solutions. So both of them are combined into an integrated solution for customers running application security."
"Overall, I use Checkmarx One as a strategic control point to improve developer velocity while strengthening application security across the full software lifecycle."
"It is a stable product."
"The most valuable feature of Checkmarx is the user interface, it is very easy to use. We do not need to configure anything, we only have to scan to see the results."
"Checkmarx One has positively impacted our organization as we tend to find vulnerabilities very early in the development cycle."
"The most valuable features of Checkmarx are its integration with multiple SCM solutions and CICD tools, its ability to scale according to user licenses, and the quick scanning process."
"The security is good."
"Trend Vision One - Cloud Security's most valuable features include its comprehensive dashboard, which provides a clear overview of all services and systems, confirming their installation location and update status."
"Trend Vision One - Cloud Security has positively impacted our organization by providing a single pane of glass visibility across all the cloud solutions that we have and reducing the number of threats we used to see earlier in the cloud."
"The storage and computing features are valuable."
"I really like Trend Vision One - Cloud Security's dashboard."
"Trend Vision One - Cloud Security does not utilize a lot of resources which allows our users to keep working even during a scan."
"Virtual patching is one of the key features, which is executed with their IPS."
"Trend Vision One stands out for its stability and reliability compared to its competitors."
 

Cons

"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"They could work to improve the user interface. Right now, it really is lacking."
"We would like to be able to run scans from our local system, rather than having to always connect to the product server, which is a longer process."
"I would like the product to include more debugging and developed tools. It needs to also add enhancements on the coding side."
"Its user interface could be improved and made more friendly."
"Meta data is always needed."
"As the solution becomes more complex and feature rich, it takes more time to debug and resolve problems. Feature-wise, we have no complaints, but Checkmarx becomes harder to maintain as the product becomes more complex. When I talk to support, it takes them longer to fix the problem than it used to."
"The plugins for the development environment have room for improvements such as for Android Studio and X code."
"If it is a very large code base then we have a problem where we cannot scan it."
"The workbook insights generate a massive list, making it inconvenient to review."
"Securing S3 using Trend Vision One - Cloud Security can cost too much. Trend Vision One - Cloud Security has a tool that requires lots of privileges. From my understanding, it's only for static application testing, so they need to add dynamic application testing, and there should be more collaboration with the application testing tools on the market. We have not used this product, and I don't know if they plan to decommission it or something. They should focus on application security because this tool's unique feature is multi-cloud support. However, they should improve integration with tools for these kinds of use cases, especially application security and dynamic scanning. For example, I would like it to support Dell SecureOps. I'd also like to see some enhancements to API gateway security."
"The pricing can get high."
"The solution should include more integrations and a universal connector with other firewalls for SNMP protocols."
"Currently, we must procure and configure the server hardware independently, as we obtain the software separately from Trend Micro."
"While it provides some data protection within its security framework, it doesn't allow users to customize policies or create their own for specific needs."
"The initial setup can be complex for the inexperienced."
"One area for improvement in Trend Vision One - Cloud Security is marketing; in particular, Trend Vision should update the marketing documentation. The information needs to be more comprehensive."
 

Pricing and Cost Advice

Information not available
"This solution is expensive. The customized package allows you to buy additional users at any time."
"We have a subscription license that is on a yearly basis, and it's a pretty competitive solution."
"It's relatively expensive."
"We're using a commercial version of Checkmarx, and we paid for the solution for one year. The price is high and could be reduced."
"We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
"​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
"Checkmarx is comparatively costlier than other products, which is why some of the customers feel reluctant to go for it, though performance-wise, Checkmarx can compete with other products."
"The number of users and coverage for languages will have an impact on the cost of the license."
"One year ago, Trend transitioned to a credit system for licensing, which has confused users."
"Two years ago, it cost $200 for 20 credits, which was a high cost."
"It's a slightly expensive product."
"The Trend Vision One pricing is reasonable."
"While Trend Vision One - Cloud Security was a cost-effective solution for us in 2021, we've noticed a recent price increase that makes it less affordable."
"With everything I deal with, Trend Micro Cloud One's pricing is somewhere in the middle."
"The pricing for Cloud One is reasonable because my costs scale up and down based on my infrastructure usage."
"I rate the solution's pricing a six out of ten."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
881,114 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Manufacturing Company
8%
Computer Software Company
8%
Outsourcing Company
6%
Financial Services Firm
18%
Manufacturing Company
10%
Computer Software Company
10%
Government
5%
Computer Software Company
10%
Manufacturing Company
9%
Performing Arts
8%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise9
Large Enterprise46
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise6
Large Enterprise9
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as ...
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
What is your experience regarding pricing and costs for Checkmarx?
Checkmarx One is a premium solution, so budget accordingly. Make sure you understand how licensing scales with additi...
What do you like most about Trend Micro Cloud One Container Security?
Vision One is versatile and can be integrated with many SIEMs. You're not limited to only one SIEM, such as Microsoft...
What is your experience regarding pricing and costs for Trend Micro Cloud One Container Security?
The pricing for Trend Vision One - Cloud Security is very straightforward; we are using credits for calculating the s...
What needs improvement with Trend Micro Cloud One Container Security?
I would like to see more third-party integrations being added into Trend Vision One - Cloud Security, as it currently...
 

Also Known As

No data available
No data available
Trend Micro Cloud One , Cloud One Workload Security, Trend Micro Cloud One Container Security, Trend Micro Cloud One Application Security, Cloud One File Storage Security, Cloud One Network Security, Cloud One Conformity
 

Overview

 

Sample Customers

Information Not Available
YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Information Not Available
Find out what your peers are saying about Checkmarx One vs. Trend Vision One - Cloud Security and other solutions. Updated: January 2026.
881,114 professionals have used our research since 2012.