Before choosing Checkmarx, we evaluated SonarQube. We chose Checkmarx because SonarQube does not show the security analysis.

We evaluated CAST, Fortify, and HCL AppScan, but the deciding factor was Checkmarx's ease of use. 

We evaluated IBM AppScan and Veracode. Neither covers the needs of my clients, the way I work, and the programming languages that Checkmarx covers.

We just calculated the speed of Checkmarx; it is around 40 lines of code per second. It's too slow, so we now use a Chinese software called XCheck, which is much better. It can scan around 2,000 or 5,000 lines per second, depending on the code complexity. XCheck is a product of a Chinese company called Tencent.

We were previously working with Azure. We switched because of their implementation of SQL Server. Checkmarx uses statements to move from database to database. Azure does not support that in its implementation at this time. 

Time will tell and Microsoft does improve their code over time.

We evaluated the Fortify Static Code Analyzer and IBM Security AppScan, but our evaluation was not fully completed. We were happy with what we were seeing with Checkmarx, so we did not go ahead with the others.

I've looked at SonarQube. The basic difference between the two solutions is that Checkmarx is a bit more intelligent and can detect vulnerabilities better and faster than SonarQube. SonarQube is more focused on code and style formatting or code complexity. It depends on the priorities of the organization, as each has its own unique benefits.

We considered several other commercial-grade application security solutions. The Checkmarx solution offers an ideal combination of code coverage, functionality, usability and TCO.

We've been looking at SonarQube. We're looking into other options as we don't want exclusively to just offer Checkmarx to potential clients.

We looking for solutions more on the enterprise spectrum. Therefore, I would probably consider products such as Vericode. I would also consider the newer players, such as, for example, GitLab. 

We did evaluate other options.

Before choosing, we also evaluated Fortify, IBM Appscan, Veracode, etc.

We evaluated Veracode before choosing Checkmarx.

We evaluated Fortify and AppScan.

I didn’t evaluate this or other solutions, but my team leader had experience with HPE Fortify and he said it is much more expensive, and the service even worse.

We did not look at any other options.

Yes, we compared Checkmarx features and benefits with IBM AppScan and HPE Security Fortify.

We evaluated some products from a company in Spain. Checkmarx provided better functionality and options for us.

We evaluated the Veracode option.

We looked at other tools, such as HPE Security and ZAP solutions.

I don't have much idea about other options since the organization had already purchased the product before I joined.

No other options were evaluated.

We did not evaluate other options, before choosing this product.