Checkmarx Review

The static operation security has been able to identify more security issues since implementing this solution


What is our primary use case?

Our primary use case for this solution is SAST, Static Application Security Testing.

How has it helped my organization?

Our static operation security has been able to identify more security issues since implementing this solution.

What is most valuable?

There are many good features like site integration, but the most valuable feature for us is the XL scan of source code. 

What needs improvement?

It would be really helpful if the level of confidence was included, with respect to identified issues. Some competitors have this feature, and it helps a lot to concentrate on the real findings.

For how long have I used the solution?

One year.

What do I think about the stability of the solution?

In general, stability is good, although sometimes it crashes. We use this product daily, and I would rate the stability a four out of five.

What do I think about the scalability of the solution?

The scalability is very good.

How are customer service and technical support?

Technical support for this solution is very effective. Each time we have had questions, the answers they provided have been very clear and comprehensive.

If you previously used a different solution, which one did you use and why did you switch?

Prior to this solution, we were using IBM Security AppScan. We had many, many issues with the application, along with complaints about the deployment time. The main reason we switched is that it was not updated, and it did not support certain technologies. For example, it did not support Visual Studio 2017, so we had to switch to a new solution.

How was the initial setup?

The initial setup for this solution is straightforward.

It took less that one day to deploy.

What about the implementation team?

We handled the implementation in-house.

What was our ROI?

We have not yet seen ROI.

Which other solutions did I evaluate?

We did evaluate other options.

What other advice do I have?

If people are in need of static application security, then I would recommend this product.

I would rate this solution an eight out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
Add a Comment
Guest
Sign Up with Email