Check Point CloudGuard WAF vs Checkmarx One comparison

Cancel
You must select at least 2 products to compare!
Check Point Software Technologies Logo
454 views|124 comparisons
100% willing to recommend
Checkmarx Logo
35,279 views|23,132 comparisons
86% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Check Point CloudGuard WAF and Checkmarx One based on real PeerSpot user reviews.

Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Check Point CloudGuard WAF vs. Checkmarx One Report (Updated: March 2024).
768,924 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"It is a very scalable and stable solution.""We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and it was amazing to see the results.""The tool helps us to block IPs and applications.""Its main value and what we liked the most is its powerful AI.""The solution offers sophisticated security techniques with unique characteristics that can be particularly valuable for the financial sector, which is where we develop apps.""It is a highly scalable solution with a quick turnaround time for deployment and running of the software across any IT system.""It seamlessly protects through machine learning, giving us visibility into potential attacks and where they come from.""After integrating AppSec with other applications, team members can easily work without fear of confidential information exposure."

More Check Point CloudGuard WAF Pros →

"It's not an obstacle for developers. They can easily write their code and make it more secure with Checkmarx.""The solution has good performance, it is able to compute in 10 to 15 minutes.""The main advantage of this solution is its centralized reporting functionality, which lets us track issues, then see and report on the priorities via a web portal.""The main thing we find valuable about Checkmarx is the ease of use. It's easy to initiate scans and triage defects.""The most valuable features are the easy to understand interface, and it 's very user-friendly.""Vulnerability details is valuable.""The most valuable features of Checkmarx are the SCA module and the code-checking module. Additionally, the solutions are explanatory and helpful.""The report function is the solution's greatest asset."

More Checkmarx One Pros →

Cons
"CloudGuard could improve in areas such as ease of integration with Fortinet and reducing costs associated with deployment in cloud environments like Azure.""I have encountered issues with Check Point CloudGuard Application Security's technical support. It also has missing configuration features.""They should improve in the delivery of more detailed reports with more information.""Improving the process for handling licensing renewals would be a welcome enhancement.""In terms of features, I do not have any negatives. Their integration is extremely quick. It is better than others I have been involved with in the past. Their pricing model, however, can be better.""I have faced issues with the tool's blocking aspects. It is hard to open or block web services due to the multitude of cloud centers. I have to do the process manually at times. We have a bug which is hard to solve.""The documentation needs to be updated, more improved, and simplified... so that even a beginner can start with this application. It can make things more beginner-friendly.""The documentation of each of the tools that they offer needs to be better."

More Check Point CloudGuard WAF Cons →

"The statistics module has a function that allows you to show some statistics, but I think it's limited. Maybe it needs more information.""Checkmarx could improve the solution reports and false positives. The false positives could be reduced. For example, we have alerts that are tagged as vulnerabilities but when you drill down they are not.""Meta data is always needed.""In terms of dashboarding, the solution could provide a little more flexibility in terms of creating more dashboards. It has some of its own dashboards that come out of the box. However, if I have to implement my own dashboards that are aligned to my organization's requirements, that dashboarding feature has limited capability right now.""The solution sometimes reports a false auditable code or false positive.""I expect application security vendors to cover all aspects of application security, including SAST, DAST, and even mobile application security testing. And it would be much better if they provided an on-premises and cloud option for all these main application security features.""The product can be improved by continuing to expand the application languages and frameworks that can be scanned for vulnerabilities. This includes expanded coverage for mobile applications as well as open-source development tools.""Its pricing model can be improved. Sometimes, it is a little complex to understand its pricing model."

More Checkmarx One Cons →

Pricing and Cost Advice
  • "The tool's licensing costs are yearly and competitive."
  • "The pricing is competitive compared to other solutions on the market. So, the licensing cost is average."
  • "Check Point CloudGuard Application Security's pricing is not friendly."
  • "Considering all the benefits we've observed, we find the price to be satisfactory."
  • "It is not cheap, but it is worth it."
  • "I find the pricing to be reasonable."
  • "If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because of the differentials. There are different deltas year to year over a five-year period. It is very difficult to explain. It would be easier to digest for our executives if there was a flatter scale"
  • "Check Point CloudGuard Application Security's pricing is comparable to other products in the market."
  • More Check Point CloudGuard WAF Pricing and Cost Advice →

  • "It is the right price for quality delivery."
  • "I believe pricing is better compared to other commercial tools."
  • "The pricing was not very good. This is just a framework which shouldn’t cost so much."
  • "The pricing is competitive and provides a lower TCO (total cost of ownership) for achieving application security."
  • "It is a good product but a little overpriced."
  • "The license has a vague language around P1 issues and the associated support. Make sure to review these in order to align them with your organizational policies."
  • "​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
  • "We got a special offer for a 30% reduction for three years, after our first year. I think for a real source-code scanning tool, you have to add a lot of money for Open Source Analysis, and AppSec Coach (160 Euro per user per year)."
  • More Checkmarx One Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
    768,924 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:We have not had any incidents. We could realize its benefits immediately. We watched and monitored the traffic, and it was amazing to see the results.
    Top Answer:This is where I have a different opinion. If the pricing for the Infinity platform covers everything, it would be more straightforward. I had a hard time selling it to our CEO as a former CFO because… more »
    Top Answer:In terms of features, I do not have any negatives. Their integration is extremely quick. It is better than others I have been involved with in the past. Their pricing model, however, can be better.
    Top Answer:I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
    Top Answer:Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
    Top Answer:The solution's price is high and you pay based on the number of users.
    Ranking
    Views
    454
    Comparisons
    124
    Reviews
    23
    Average Words per Review
    585
    Rating
    9.0
    Views
    35,279
    Comparisons
    23,132
    Reviews
    21
    Average Words per Review
    513
    Rating
    7.7
    Comparisons
    Also Known As
    Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec
    Learn More
    Overview

    Check Point CloudGuard Web Application Firewall (WAF) is a cloud-based security solution engineered to safeguard web applications and APIs against diverse cyber threats. Offering protection against sophisticated attacks, it identifies vulnerabilities listed in the OWASP Top 10 and blocks new threats. Utilizing contextual AI, the system reduces false positives, allowing security professionals to focus on genuine threats. With a zero-configuration setup, it automatically adapts to application changes, ensuring minimal configuration requirements. Promising swift deployments in as little as 48 hours and robust API security, CloudGuard WAF aims to streamline application security management while delivering comprehensive protection.

    Checkmarx is a highly accurate and flexible static code analysis product that allows organizations to automatically scan uncompiled code and identify hundreds of security vulnerabilities in all major coding languages and software frameworks. Checkmarx is available as a standalone product and can be effectively integrated into the software development lifecycle (SDLC) to streamline vulnerability detection and remediation. Checkmarx is trusted by leading organizations such as SAP, Samsung, and Salesforce.com.

    Checkmarx is a global leader in software security solutions for modern software development. Checkmarx delivers a comprehensive software security platform that unites with DevOps by scanning uncompiled source code for security vulnerabilities early in the development life cycle to reduce and remediate risk from software vulnerabilities. Using Checkmarx, teams avoid software security vulnerabilities managed via a single and unified dashboard without slowing down their delivery schedule.

    Checkmarx balances the needs of the entire organization, delivering seamless security from the start and throughout the entire software development life cycle. Checkmarx can be deployed on-premises in a private data center or hosted via a public cloud.

    Checkmarx Features

    Some of Checkmarx’s features include:

    • Source code scanning: Detect and repair more vulnerabilities before you release your code.

    • Open-source scanning: Find and eliminate the risks in your open-source code.

    • Interactive code scanning: Scan for vulnerabilities and runtime threats.

    • Open-source security for infrastructure as code: Identify and fix insecure IaC configurations that put your application at risk.

    Reviews from Real Users

    Checkmarx stands out among its competitors for a number of reasons. Two major ones are its ability to enable developers to secure their code with a single management dashboard and its high-speed scanning abilities.

    PeerSpot users note the effectiveness of these features. A CEO at a tech services company writes, “The most valuable features are the easy-to-understand interface, and it’s very user-friendly. We spend some time tuning to start scanning a new project, which is only a few clicks. A few simple tunes for custom rules and we can start our scan. We can do the work quickly and we don't need to compile the source code because Checkmarx does the work without compiling the project. The scanning is very quick. It's about 20,000 lines per hour, which is a good speed for scanning.”

    A director at a tech services company notes, “The features and technologies are very good. The flexibility and the roadmap have also been very good. They're at the forefront of delivering the additional capabilities that are required with cloud delivery, etc. Their ability to deliver what customers require and when they require is very important.”

    A senior manager at a manufacturing company writes, “The identification of verification-related security vulnerabilities is really important and one of the key things. It also identifies vulnerabilities for any kind of third-party tool coming into the system or any third-party tools that you are using, which is very useful for avoiding random hacking."

    Sample Customers
    Information Not Available
    YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
    Top Industries
    REVIEWERS
    Security Firm20%
    Financial Services Firm15%
    Cloud Provider10%
    Comms Service Provider10%
    VISITORS READING REVIEWS
    Security Firm33%
    Financial Services Firm20%
    Comms Service Provider8%
    Healthcare Company7%
    REVIEWERS
    Computer Software Company31%
    Financial Services Firm19%
    Comms Service Provider9%
    Manufacturing Company9%
    VISITORS READING REVIEWS
    Financial Services Firm21%
    Computer Software Company15%
    Manufacturing Company9%
    Insurance Company5%
    Company Size
    REVIEWERS
    Small Business59%
    Midsize Enterprise19%
    Large Enterprise22%
    VISITORS READING REVIEWS
    Small Business39%
    Midsize Enterprise13%
    Large Enterprise48%
    REVIEWERS
    Small Business38%
    Midsize Enterprise13%
    Large Enterprise50%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise11%
    Large Enterprise72%
    Buyer's Guide
    Check Point CloudGuard WAF vs. Checkmarx One
    March 2024
    Find out what your peers are saying about Check Point CloudGuard WAF vs. Checkmarx One and other solutions. Updated: March 2024.
    768,924 professionals have used our research since 2012.

    Check Point CloudGuard WAF is ranked 12th in Application Security Tools with 28 reviews while Checkmarx One is ranked 3rd in Application Security Tools with 67 reviews. Check Point CloudGuard WAF is rated 8.8, while Checkmarx One is rated 7.6. The top reviewer of Check Point CloudGuard WAF writes "Automation capabilities also help streamline security processes and smooths down API integration processes and detects API availability". On the other hand, the top reviewer of Checkmarx One writes "The report function is a great, configurable asset but sometimes yields false positives". Check Point CloudGuard WAF is most compared with SonarQube, whereas Checkmarx One is most compared with SonarQube, Veracode, Fortify on Demand, Snyk and Coverity. See our Check Point CloudGuard WAF vs. Checkmarx One report.

    See our list of best Application Security Tools vendors.

    We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.