Apiiro vs Checkmarx One comparison

Cancel
You must select at least 2 products to compare!
Apiiro Logo
329 views|190 comparisons
100% willing to recommend
Checkmarx Logo
31,565 views|20,243 comparisons
86% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Apiiro and Checkmarx One based on real PeerSpot user reviews.

Find out in this report how the two Static Application Security Testing (SAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Apiiro vs. Checkmarx One Report (Updated: May 2024).
772,679 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The workflow automation is likely the best aspect of the solution.""Apiiro's secrets detection feature has saved us several times, which we appreciate greatly."

More Apiiro Pros →

"Our static operation security has been able to identify more security issues since implementing this solution.""Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.""It allows for SAST scanning of uncompiled code. Further, it natively integrates with all key repos formats (Git, TFS, SVN, Perforce, etc).""The ability to track the vulnerabilities inside the code (origin and destination of weak variables or functions).""Helps us check vulnerabilities in our SAP Fiori application.""The setup is very easy. There is a lot of information in the documents which makes the install not difficult at all.""Apart from software scanning, software composition scanning is valuable.""The most valuable features of Checkmarx are the SCA module and the code-checking module. Additionally, the solutions are explanatory and helpful."

More Checkmarx One Pros →

Cons
"I would like support for our self-hosted Git server, other than GitHub, just regular Git.""User management is a little bit clunky."

More Apiiro Cons →

"The plugins for the development environment have room for improvements such as for Android Studio and X code.""Checkmarx being Windows only is a hindrance. Another problem is: why can't I choose PostgreSQL?""We have received some feedback from our customers who are receiving a large number of false positives.""I expect application security vendors to cover all aspects of application security, including SAST, DAST, and even mobile application security testing. And it would be much better if they provided an on-premises and cloud option for all these main application security features.""The product's reporting feature could be better. The feature works well for developers, but reports generated to be shared with external parties are poor, it lacks the details one gets when viewing the results directly from the Checkmarx One platform.""If it is a very large code base then we have a problem where we cannot scan it.""The product can be improved by continuing to expand the application languages and frameworks that can be scanned for vulnerabilities. This includes expanded coverage for mobile applications as well as open-source development tools.""We can run only one project at a time."

More Checkmarx One Cons →

Pricing and Cost Advice
Information Not Available
  • "It is the right price for quality delivery."
  • "I believe pricing is better compared to other commercial tools."
  • "The pricing was not very good. This is just a framework which shouldn’t cost so much."
  • "The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
  • "It is a good product but a little overpriced."
  • "The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
  • "​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
  • "We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
  • More Checkmarx One Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
    772,679 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Apiiro's secrets detection feature has saved us several times, which we appreciate greatly.
    Top Answer:My understanding is the pricing is pretty competitive.
    Top Answer:Apiiro recently integrated SaaS, and we would love to see them expand on that. They provide many integrations to different products, including SaaS products such as Snyk. Ideally, Apiiro would include… more »
    Top Answer:I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
    Top Answer:Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
    Top Answer:The solution's price is high and you pay based on the number of users.
    Ranking
    Views
    329
    Comparisons
    190
    Reviews
    2
    Average Words per Review
    1,148
    Rating
    8.5
    Views
    31,565
    Comparisons
    20,243
    Reviews
    19
    Average Words per Review
    508
    Rating
    7.8
    Comparisons
    Snyk logo
    Compared 49% of the time.
    Ox Security logo
    Compared 16% of the time.
    Cycode logo
    Compared 13% of the time.
    SonarQube logo
    Compared 12% of the time.
    SonarQube logo
    Compared 52% of the time.
    Veracode logo
    Compared 13% of the time.
    Fortify on Demand logo
    Compared 6% of the time.
    Snyk logo
    Compared 4% of the time.
    Coverity logo
    Compared 3% of the time.
    Also Known As
    Apiiro Control Plane (ASOC), Apiiro API Security (SAST), Apiiro Open Source (SCA)
    Learn More
    Overview

    Apiiro is the leader in application security posture management (ASPM), unifying risk visibility, prioritization, and remediation with deep code analysis and runtime context.

    Companies like Morgan Stanley, SoFi, Rakuten, and Navan leverage Apiiro's ASPM to...

    Get complete application and risk visibility: Apiiro takes a deep, code-based approach to ASPM. Its Cloud Application Security Platform analyzes source code and pulls in runtime context to build a continuous, graph-based inventory of application and software supply chain components.

    Prioritize risks with code-to-runtime context: With its proprietary Risk Graph™️, Apiiro contextualizes security alerts from third-party tools and native security solutions based on the likelihood and impact of risk to uniquely minimize alert backlogs and triage time by 95%.

    Fix and prevent risks that matter—faster: By tying risks to code owners, providing LLM-enriched remediation guidance, and embedding risk-based guardrails directly into developer tools and workflows, Apiiro improves remediation times (MTTR) by up to 85%.

    Apiiro's native security solutions include API security testing in code, secrets detection and validation, software bill of materials (SBOM) generation, sensitive data exposure prevention, software composition analysis (SCA), and CI/CD and SCM security.



    Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

    Checkmarx One offers comprehensive application scanning across the SDLC:

    • Static Application Security Testing (SAST)
    • Software Composition Analysis (SCA)
    • API security
    • Dynamic Application Security Testing (DAST)
    • Container security
    • IaC security
    • Correlation, prioritization, and risk management
    • Codebashing secure code training
    • AI security
    • Tech partnerships extending AppSec into runtime analysis
    • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

    Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

    Sample Customers
    Morgan Stanley, Rakuten, Jack Henry, SoFi, Colgate, Navan
    YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
    Top Industries
    VISITORS READING REVIEWS
    Computer Software Company24%
    Comms Service Provider10%
    Outsourcing Company8%
    Manufacturing Company8%
    REVIEWERS
    Computer Software Company31%
    Financial Services Firm19%
    Comms Service Provider9%
    Manufacturing Company9%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company15%
    Manufacturing Company9%
    Government5%
    Company Size
    VISITORS READING REVIEWS
    Small Business40%
    Midsize Enterprise21%
    Large Enterprise40%
    REVIEWERS
    Small Business38%
    Midsize Enterprise13%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise12%
    Large Enterprise71%
    Buyer's Guide
    Apiiro vs. Checkmarx One
    May 2024
    Find out what your peers are saying about Apiiro vs. Checkmarx One and other solutions. Updated: May 2024.
    772,679 professionals have used our research since 2012.

    Apiiro is ranked 21st in Static Application Security Testing (SAST) with 2 reviews while Checkmarx One is ranked 3rd in Static Application Security Testing (SAST) with 67 reviews. Apiiro is rated 8.6, while Checkmarx One is rated 7.6. The top reviewer of Apiiro writes "A great secrets detection feature, good visibility, and integrates well". On the other hand, the top reviewer of Checkmarx One writes "The report function is a great, configurable asset but sometimes yields false positives". Apiiro is most compared with Snyk, Ox Security, Cycode and SonarQube, whereas Checkmarx One is most compared with SonarQube, Veracode, Fortify on Demand, Snyk and Coverity. See our Apiiro vs. Checkmarx One report.

    See our list of best Static Application Security Testing (SAST) vendors, best API Security vendors, and best Risk-Based Vulnerability Management vendors.

    We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.