Check Point CloudGuard WAF vs Checkmarx One comparison

Cancel
You must select at least 2 products to compare!
Check Point Software Technologies Logo
442 views|128 comparisons
100% willing to recommend
Checkmarx Logo
34,421 views|22,385 comparisons
86% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Check Point CloudGuard WAF and Checkmarx One based on real PeerSpot user reviews.

Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Check Point CloudGuard WAF vs. Checkmarx One Report (Updated: May 2024).
771,157 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"It is a highly scalable solution with a quick turnaround time for deployment and running of the software across any IT system.""Whenever there was a new CVE, Check Point CloudGuard WAF used to block them.""It offers high performance and improved productivity for users.""The app control is very sensitive, and the threat detection and prevention is better than other Check Point solutions. There is a centralized management console for threat protection and self-inspection.""The tool performs device health checkups and updates us. It helps us to be compliant with regulatory policies.""With the solution, we managed to obtain complete comprehensive visibility of the entire environment in the cloud, thus having better control of each of the resources.""The tool's most valuable feature is AI, which makes operations easier. Moreover, it is easy to deploy.""User attitude reviews help us keep all online users compliant with company regulations and policies."

More Check Point CloudGuard WAF Pros →

"From my point of view, it is the best product on the market.""The solution improved the efficiency of our code security reviews. It helps tremendously because it finds hundreds of potential problems sometimes.""The reports are very good because they include details on the code level, and make suggestions about how to fix the problems.""Both automatic and manual code review (CxQL) are valuable.""Checkmarx has helped us deliver more secure products. We are able to do static code analysis with the tool before shipping our code to production. When the integration is in the pipeline, this tool gives us early notifications on code fixes.""The solution allows us to create custom rules for code checks.""The solution is scalable, but other solutions are better.""It allows for SAST scanning of uncompiled code. Further, it natively integrates with all key repos formats (Git, TFS, SVN, Perforce, etc)."

More Checkmarx One Pros →

Cons
"A feature we'd like to see in the future is something that could protect against other attack vectors, with a focus on application protection.""I do not know if it is already there, but I would like to have complete visibility between the posture management and firewall as a service.""I have faced issues with the tool's blocking aspects. It is hard to open or block web services due to the multitude of cloud centers. I have to do the process manually at times. We have a bug which is hard to solve.""I would like to be able to integrate the theme of Artificial Intelligence to help review issues and to monitor and view the security issue while also suggesting and interpreting and additionally configuring solutions - basically, acting as an interpreter.""Check Point CloudGuard Application Security needs to improve updates on integrations. It also needs to incorporate real-time monitoring features.""I advise proactive threat detection intelligence offline, which can also help monitor and ensure system checks and compliances are in place.""One of the big problems we found in Check Point, in general, is the support.""They should improve in the delivery of more detailed reports with more information."

More Check Point CloudGuard WAF Cons →

"Integration into the SDLC (i.e. support for last version of SonarQube) could be added.""C, C++, VB and T-SQL are not supported by this product. Although, C and C++ were advertised as being supported.""I would like to see the tool’s pricing improved.""The integration could improve by including, for example, DevSecOps.""We can run only one project at a time.""Micro-services need to be included in the next release.""You can't use it in the continuous delivery pipeline because the scanning takes too much time.""We want to have a holistic view of the portfolio-level dashboard and not just an individual technical project level."

More Checkmarx One Cons →

Pricing and Cost Advice
  • "The tool's licensing costs are yearly and competitive."
  • "The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
  • "Check Point CloudGuard Application Security's pricing is not friendly."
  • "Considering all the benefits we've observed, we find the price to be satisfactory."
  • "It is not cheap, but it is worth it."
  • "I find the pricing to be reasonable."
  • "If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"
  • "Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
  • More Check Point CloudGuard WAF Pricing and Cost Advice →

  • "It is the right price for quality delivery."
  • "I believe pricing is better compared to other commercial tools."
  • "The pricing was not very good. This is just a framework which shouldn’t cost so much."
  • "The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
  • "It is a good product but a little overpriced."
  • "The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
  • "​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
  • "We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
  • More Checkmarx One Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
    771,157 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and it was amazing to see the results.
    Top Answer:This is where I have a different opinion. If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because… more »
    Top Answer:In terms of features, I do not have any negatives. Their integration is extremely quick. It is better than others I have been involved with in the past. Their pricing model, however, can be better.
    Top Answer:I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
    Top Answer:Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
    Top Answer:The solution's price is high and you pay based on the number of users.
    Ranking
    Views
    442
    Comparisons
    128
    Reviews
    26
    Average Words per Review
    608
    Rating
    8.9
    Views
    34,421
    Comparisons
    22,385
    Reviews
    21
    Average Words per Review
    508
    Rating
    7.7
    Comparisons
    Also Known As
    Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
    Learn More
    Overview

    Check Point CloudGuard Web Application Firewall (WAF) is a cloud-based security solution engineered to safeguard web applications and APIs against diverse cyber threats. Offering protection against sophisticated attacks, it identifies vulnerabilities listed in the OWASP Top 10 and blocks new threats. Utilizing contextual AI, the system reduces false positives, allowing security professionals to focus on genuine threats. With a zero-configuration setup, it automatically adapts to application changes, ensuring minimal configuration requirements. Promising swift deployments in as little as 48 hours and robust API security, CloudGuard WAF aims to streamline application security management while delivering comprehensive protection.

    Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

    Checkmarx One offers comprehensive application scanning across the SDLC:

    • Static Application Security Testing (SAST)
    • Software Composition Analysis (SCA)
    • API security
    • Dynamic Application Security Testing (DAST)
    • Container security
    • IaC security
    • Correlation, prioritization, and risk management
    • Codebashing secure code training
    • AI security
    • Tech partnerships extending AppSec into runtime analysis
    • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

    Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

    Sample Customers
    Information Not Available
    YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
    Top Industries
    REVIEWERS
    Security Firm19%
    Financial Services Firm14%
    Cloud Solution Provider10%
    Comms Service Provider10%
    VISITORS READING REVIEWS
    Security Firm32%
    Financial Services Firm21%
    Comms Service Provider7%
    Computer Software Company7%
    REVIEWERS
    Computer Software Company31%
    Financial Services Firm19%
    Comms Service Provider9%
    Manufacturing Company9%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company15%
    Manufacturing Company9%
    Insurance Company5%
    Company Size
    REVIEWERS
    Small Business61%
    Midsize Enterprise18%
    Large Enterprise21%
    VISITORS READING REVIEWS
    Small Business39%
    Midsize Enterprise13%
    Large Enterprise48%
    REVIEWERS
    Small Business38%
    Midsize Enterprise13%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise12%
    Large Enterprise72%
    Buyer's Guide
    Check Point CloudGuard WAF vs. Checkmarx One
    May 2024
    Find out what your peers are saying about Check Point CloudGuard WAF vs. Checkmarx One and other solutions. Updated: May 2024.
    771,157 professionals have used our research since 2012.

    Check Point CloudGuard WAF is ranked 11th in Application Security Tools with 30 reviews while Checkmarx One is ranked 3rd in Application Security Tools with 67 reviews. Check Point CloudGuard WAF is rated 9.0, while Checkmarx One is rated 7.6. The top reviewer of Check Point CloudGuard WAF writes "Automation capabilities also help streamline security processes and smooths down API integration processes and detects API availability". On the other hand, the top reviewer of Checkmarx One writes "The report function is a great, configurable asset but sometimes yields false positives". Check Point CloudGuard WAF is most compared with SonarQube, whereas Checkmarx One is most compared with SonarQube, Veracode, Fortify on Demand, Snyk and Coverity. See our Check Point CloudGuard WAF vs. Checkmarx One report.

    See our list of best Application Security Tools vendors.

    We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.