Checkmarx is a highly accurate and flexible static code analysis product that allows organizations to automatically scan uncompiled code and identify hundreds of security vulnerabilities in all major coding languages and software frameworks. Checkmarx is available as a standalone product and can be effectively integrated into the software development lifecycle (SDLC) to streamline vulnerability detection and remediation. Checkmarx is trusted by leading organizations such as SAP, Samsung, and Salesforce.com.
Checkmarx is a global leader in software security solutions for modern software development. Checkmarx delivers a comprehensive software security platform that unites with DevOps by scanning uncompiled source code for security vulnerabilities early in the development life cycle to reduce and remediate risk from software vulnerabilities. Using Checkmarx, teams avoid software security vulnerabilities managed via a single and unified dashboard without slowing down their delivery schedule.
Checkmarx balances the needs of the entire organization, delivering seamless security from the start and throughout the entire software development life cycle. Checkmarx can be deployed on-premises in a private data center or hosted via a public cloud.
Checkmarx Features
Some of Checkmarx’s features include:
-
Source code scanning: Detect and repair more vulnerabilities before you release your code.
-
Open-source scanning: Find and eliminate the risks in your open-source code.
-
Interactive code scanning: Scan for vulnerabilities and runtime threats.
-
Open-source security for infrastructure as code: Identify and fix insecure IaC configurations that put your application at risk.
Reviews from Real Users
Checkmarx stands out among its competitors for a number of reasons. Two major ones are its ability to enable developers to secure their code with a single management dashboard and its high-speed scanning abilities.
PeerSpot users note the effectiveness of these features. A CEO at a tech services company writes, “The most valuable features are the easy-to-understand interface, and it’s very user-friendly. We spend some time tuning to start scanning a new project, which is only a few clicks. A few simple tunes for custom rules and we can start our scan. We can do the work quickly and we don't need to compile the source code because Checkmarx does the work without compiling the project. The scanning is very quick. It's about 20,000 lines per hour, which is a good speed for scanning.”
A director at a tech services company notes, “The features and technologies are very good. The flexibility and the roadmap have also been very good. They're at the forefront of delivering the additional capabilities that are required with cloud delivery, etc. Their ability to deliver what customers require and when they require is very important.”
A senior manager at a manufacturing company writes, “The identification of verification-related security vulnerabilities is really important and one of the key things. It also identifies vulnerabilities for any kind of third-party tool coming into the system or any third-party tools that you are using, which is very useful for avoiding random hacking."
Imperva Web Application Firewall is a versatile solution that protects web applications and databases from various attacks, including DDoS, cross-site scripting, and SQL injection attacks. It offers data security, availability, and access control and can be deployed on-premises or on the cloud.
The solution has good security against web attacks and offers advanced bot protection, API security, and mitigation features. Imperva WAF is easy to configure and deploy; it has good customer service and an excellent user interface.
The application security experts at Positive Technologies have spent over a decade analyzing thousands of unique network, Web, mobile, ERP and ICS/SCADA applications, discovering more than 150 zero-day vulnerabilities each year and securing the IT networks of leading banks, global telecommunications providers and industrial conglomerates. Positive Technologies is helping companies like yours meet their application security challenges head-on with:
- Vulnerability Assessment (VA) and Security Configuration Assessment (SCA) for OS, DB, Web-server, Frameworks and ERP in white and black box modes
- SAST, DAST and IAST analysis of deployed applications and source code
- PT Application Firewall protection of Web and mobile applications and ERP systems
- Deep inspection of client-server, Web, ERP and mobile applications and embedded systems
- Secure Software Development Lifecycle (SSDL) consulting
