Checkmarx One vs GitHub comparison

Cancel
You must select at least 2 products to compare!
Checkmarx Logo
34,421 views|22,385 comparisons
86% willing to recommend
GitHub Logo
2,224 views|926 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Checkmarx One and GitHub based on real PeerSpot user reviews.

Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Checkmarx One vs. GitHub Report (Updated: May 2024).
772,649 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The most valuable feature for me is the Jenkins Plugin.""The solution allows us to create custom rules for code checks.""The administration in Checkmarx is very good.""The solution communicates where to fix the issue for the purpose of less iterations.""Scan reviews can occur during the development lifecycle.""The solution is scalable, but other solutions are better.""The ability to track the vulnerabilities inside the code (origin and destination of weak variables or functions).""The UI is user-friendly."

More Checkmarx One Pros →

"This solution is very easy to use which I like about it. The capacity to own artifacts and share them with others is another good feature. You don't have to write all your code from scratch, you can use available templates and alter the code according to your needs.""The product helps our team collaborate across different locations.""Our code is secure.""The most valuable feature is the source code management. It's very helpful and it's a great product.""GitHub provides good time reduction and this is what I value the most.""The product has a very user-friendly interface and user-friendly security.""We use GitHub instead of our regular shared drive. It offers instant access to shared folders as well as good security.""The ease of use is valuable."

More GitHub Pros →

Cons
"Checkmarx is not good because it has too many false positive issues.""Checkmarx needs to improve the false positives and provide more accuracy in identifying vulnerabilities. It misses important vulnerabilities.""The pricing can get a bit expensive, depending on the company's size.""The integration could improve by including, for example, DevSecOps.""I would like to see the rate of false positives reduced.""I would like to see the DAST solution in the future.""Micro-services need to be included in the next release.""Checkmarx could improve the speed of the scans."

More Checkmarx One Cons →

"GitHub's issue management could be improved a little from an organization standpoint. It would be helpful to have the ability to organize a work board or a backlog more comprehensively. For organizations migrating to GitHub from arbitrary systems, it's a little bit of a headache to move on to that system.""There could be more integration into Azure.""The solution should have less integration with the AI part, but it needs to add features with other automation tools so that it can be easily integrated.""We would like this solution to have a more user-friendly interface.""Could be more user friendly.""I cannot recall coming across any shortcomings of the product.""The security for this solution could be tightened up and improved.""From the recruiting standpoint, I would like to see email IDs and phone numbers and a brief introduction about their profile."

More GitHub Cons →

Pricing and Cost Advice
  • "It is the right price for quality delivery."
  • "I believe pricing is better compared to other commercial tools."
  • "The pricing was not very good. This is just a framework which shouldn’t cost so much."
  • "The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
  • "It is a good product but a little overpriced."
  • "The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
  • "​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
  • "We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
  • More Checkmarx One Pricing and Cost Advice →

  • "The private repositories are free, which is very good."
  • "It is open-source. There is no license for GitHub."
  • "The price of this solution is reasonable."
  • "If there are only 10 people using a particular repository, then GitHub is free. But if we increase the number of users, we need to pay the normal charge for GitHub."
  • "We have an enterprise licensing agreement, and I am not part of the finance department so I can't say how much it costs."
  • "I haven't had to pay anything for GitHub, I use the free version."
  • "The licensing model for GitHub is user-based. Whenever the new developer joins we have to get a new license and register their ID. The overall price of the solution is reasonable."
  • "The licensing model from GitHub is very clear."
  • More GitHub Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
    772,649 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
    Top Answer:Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
    Top Answer:The solution's price is high and you pay based on the number of users.
    Top Answer: The control is the most valuable feature as developers can work on a single code.
    Top Answer:We pay a subscription-based yearly licensing fee for the solution. If you buy extra support, you pay an additional cost.
    Top Answer:The solution's cost is high and should be reduced. Our company has a bundle product. Sometimes, people from outside our organization also need to collaborate with our code, and we need to integrate… more »
    Ranking
    Views
    34,421
    Comparisons
    22,385
    Reviews
    21
    Average Words per Review
    508
    Rating
    7.7
    Views
    2,224
    Comparisons
    926
    Reviews
    48
    Average Words per Review
    349
    Rating
    8.6
    Comparisons
    SonarQube logo
    Compared 52% of the time.
    Veracode logo
    Compared 13% of the time.
    Fortify on Demand logo
    Compared 6% of the time.
    Snyk logo
    Compared 4% of the time.
    GitLab logo
    Compared 1% of the time.
    Snyk logo
    Compared 28% of the time.
    AWS CodeCommit logo
    Compared 12% of the time.
    Fortify on Demand logo
    Compared 12% of the time.
    Bitbucket logo
    Compared 11% of the time.
    IBM Rational ClearCase logo
    Compared 4% of the time.
    Learn More
    Overview

    Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

    Checkmarx One offers comprehensive application scanning across the SDLC:

    • Static Application Security Testing (SAST)
    • Software Composition Analysis (SCA)
    • API security
    • Dynamic Application Security Testing (DAST)
    • Container security
    • IaC security
    • Correlation, prioritization, and risk management
    • Codebashing secure code training
    • AI security
    • Tech partnerships extending AppSec into runtime analysis
    • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

    Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

    GitHub is a web-based Git repository hosting service. It offers all of the distributed revision control and source code management (SCM) functionality of Git as well as adding its own features. Unlike Git, which is strictly a command-line tool, GitHub provides a Web-based graphical interface and desktop as well as mobile integration. It also provides access control and several collaboration features such as bug tracking, feature requests, task management, and wikis for every project.
    Sample Customers
    YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
    Dominion Enterprises, NASA, Braintree, SAP, CyberAgent
    Top Industries
    REVIEWERS
    Computer Software Company31%
    Financial Services Firm19%
    Comms Service Provider9%
    Manufacturing Company9%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company15%
    Manufacturing Company9%
    Insurance Company5%
    REVIEWERS
    Computer Software Company20%
    Financial Services Firm18%
    Government9%
    Manufacturing Company7%
    VISITORS READING REVIEWS
    Computer Software Company13%
    Manufacturing Company11%
    Financial Services Firm11%
    Government7%
    Company Size
    REVIEWERS
    Small Business38%
    Midsize Enterprise13%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise12%
    Large Enterprise71%
    REVIEWERS
    Small Business43%
    Midsize Enterprise9%
    Large Enterprise49%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise13%
    Large Enterprise66%
    Buyer's Guide
    Checkmarx One vs. GitHub
    May 2024
    Find out what your peers are saying about Checkmarx One vs. GitHub and other solutions. Updated: May 2024.
    772,649 professionals have used our research since 2012.

    Checkmarx One is ranked 3rd in Application Security Tools with 67 reviews while GitHub is ranked 12th in Application Security Tools with 74 reviews. Checkmarx One is rated 7.6, while GitHub is rated 8.6. The top reviewer of Checkmarx One writes "The report function is a great, configurable asset but sometimes yields false positives". On the other hand, the top reviewer of GitHub writes "Beneficial version control and continuous integration, but guides would be helpful". Checkmarx One is most compared with SonarQube, Veracode, Fortify on Demand, Snyk and GitLab, whereas GitHub is most compared with Snyk, AWS CodeCommit, Fortify on Demand, Bitbucket and IBM Rational ClearCase. See our Checkmarx One vs. GitHub report.

    See our list of best Application Security Tools vendors.

    We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.