--- title: Checkmarx Reviews meta\_title: 'Checkmarx Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 48 reviews by the users' company size, role or industry to find out how Checkmarx works for a business like yours. aggregate\_rating: rating\_value: 4.2 review\_count: 48 scale: '5' date\_modified: '2026-08-28' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Checkmarx Reviews & Product Details Visit Website Checkmarx offers leading application security solutions that help organizations safeguard software development while enhancing efficiency and reducing costs. At the center is Checkmarx Fusion, the highest-fidelity scanning architecture in the industry. Most scanners force a choice: catch more, or get buried in noise and miss what matters. Fusion ends that trade-off — deterministic precision and frontier AI coverage fused into one verified result, with the Findings Analysis Engine validating and deduplicating every finding before a developer sees it. The result is an F1 score of 0.64 today by using the Checkmarx NG SAST vs. an industry average of ~0.20, and an astonishing market leading F1 score of 0.74 with Checkmarx Fusion. The Checkmarx One platform stands out in the realm of enterprise-grade security, offering comprehensive protection that addresses the complexities of modern software development, including legacy systems and AI-generated code. By scanning trillions of lines of code annually, Checkmarx enables companies to significantly lower their vulnerability density, ensuring a robust defense against potential threats. The platform is particularly beneficial for software development teams, security professionals, and organizations that prioritize secure coding practices. Checkmarx One provides essential tools to mitigate risks associated with both traditional and emerging programming languages. Its innovative architecture, powered by autonomous security agents and AI-native intelligence, allows organizations to integrate security seamlessly into their development workflows, thereby accelerating development velocity without compromising on safety. Key features of Checkmarx One include Triage Assist, which employs an autonomous AI agent to prioritize vulnerabilities based on real-world exploitability and contextual risk. This feature empowers teams to concentrate their efforts on the most critical issues rather than getting bogged down by static severity scores. Additionally, Remediation Assist generates review-ready fixes for validated vulnerabilities prior to code merges, streamlining the secure delivery process and minimizing the manual overhead typically associated with remediation tasks. Developer Assist is another notable feature, acting as a standalone security agent that identifies risks during the coding process. By providing safe, explainable, and verified fixes directly within the integrated development environment (IDE), it supports developers in maintaining a stable and rapid development pace. Furthermore, the platform includes AI Supply Chain Security, which offers centralized governance and visibility for AI components embedded in applications, ensuring that hidden AI assets are discovered and managed effectively. Lastly, Checkmarx One incorporates advanced analysis engines such as NG SAST and DAST for AI, which enhance security measures across various environments. The AI SAST feature expands detection capabilities to cover emerging and unsupported programming languages, while the DAST for AI strengthens runtime protection in continuous integration and deployment (CI/CD) settings. Together, these features position Checkmarx One as a comprehensive solution for organizations looking to fortify their software development lifecycle against evolving threats. * * * Product Website Checkmarx Seller [Checkmarx](https://www.g2.com/sellers/checkmarx) Discussions [Checkmarx Community](https://www.g2.com/products/checkmarx/discuss) Languages Supported English, Korean, Chinese (Traditional) Solution Type All-in-One ![Cognizant](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Cognizant") Used by Cognizant and 2 others ##### Featured Companies [ ![Cognizant](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Cognizant") Cognizant](https://www.g2.com/products/cognizant/reviews)[ ![Luxoft](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Luxoft") Luxoft](https://www.g2.com/products/luxoft/reviews)[ ![Perspecta](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Perspecta") Perspecta](https://www.g2.com/products/perspecta/reviews) Beta Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months [ View More Pricing Information ](https://www.g2.com/products/checkmarx/pricing) Checkmarx Solutions (1) See how Checkmarx products can work together to solve real problems. [ ![Solution Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Solution Avatar Image") Build secure code faster SolutionBy Checkmarx ](/sellers/checkmarx/solutions/build-secure-code-faster) Show More ## Checkmarx Integrations (6) What do users say about integrations? Verified by Checkmarx ![Aman M.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Aman M.") AM Aman M. Senior DevOps Engineer Information Technology and Services Enterprise (\> 1000 emp.) 6/19/2026 "Centralized Source Code Security with Seamless CI/CD Integration" 5/5 What do you like best about Checkmarx? Checkmarx is a centralized security tool that provides end-to-end insights into source code security and vulnerabilities. It also helps improve the efficiency of the source code by highlighting the associated risks and suggesting ways to remediate the vulnerabilities. In addition, it shows vulnerabilities in the open-source libraries and packages we use in our source code through SCA scans. One thing I like the most is how well it integrates with our CI/CD tooling. We can plug it into our DevSecOps CI/CD flow, and developers can see scan insights directly from the pipeline itself, without needing to log in to the Checkmarx UI separately. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? It should better cope with modern software development lifecycles and provide end-to-end support for scanning any valid file extensions. For example, we are migrating from Node JS to TypeScript, and as part of that change we updated our .js files to use the .mjs extension. However, Checkmarx still does not support scanning .mjs files. We reported this issue to them about a year ago, but even now it remains unsupported. The current suggestion is to rename .mjs files to .js when uploading code for Checkmarx scans, which is not a practical workaround for us. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? End-to-end security scanning for source code, including SAST and SCA scanning. It also supports API security scanning, IaC file scanning, and secret detection. Seamless integration with native CI/CD tools makes it easy to integrate Checkmarx into DevSecOps pipelines. This reduces the Source Codes attack surface and by that we have achieved over 70%-80% of improvement in overall Code Security and our feature releases is now bullet proof from Security attacks Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-12980590/official_response/edit) Aman, thank you for the feedback. We understand the challenges that can arise when development teams adopt new languages, frameworks, and file types. Checkmarx has recently expanded its language-agnostic scanning capabilities through a new hybrid scanning engine that combines deterministic analysis with AI-powered detection, enabling broader coverage across modern and emerging technologies, including AI-generated code and polyglot environments. This approach is designed to reduce gaps created by evolving development practices while maintaining high-fidelity results. We appreciate you highlighting the .mjs support issue, and feedback like this helps us continue improving coverage and compatibility for modern software development workflows. Please reach out to us if you would like to discuss more, and again thank you for the feedback! [See how Checkmarx improved](https://checkmarx.com/press-releases/checkmarx-one-achieves-industrys-highest-scanning-fidelity-outperforming-both-legacy-tools-and-ai-models/) 7/13/2026 Current UserValidated ReviewerSource: G2 invite ![Nitesh A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nitesh A.") NA Nitesh A. Module Lead - Stellantis (formerly PSA Group) - Automotive Enterprise (\> 1000 emp.) 6/20/2026 "Automated Checkmarx Scans Keep Us Ahead of Key Vulnerabilities" 4.5/5 What do you like best about Checkmarx? Provision to automate scan runs is now available. Scan results are well structured and comments are well documented. Easy for developers to understand and fix. Can be integrated with stakeholder reports. Good UI and support Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Scan results on Salesforce security portal are different from checkmarx portal which cause issues during package submission to Salesforce. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarx helps us to automate repo scans, provides good insights into vulnerabilities or major issues in code and segregates them in terms of severity. It also provides option to upload results as false positive So these do not get reported again n again. The exports are good to submit for security review. The UI design is good and intuitive. We found the scans run pretty fast and hence better in performance. We good good response and support from checkmark team for any issues or new features. Overall good experience. Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-12983770/official_response/edit) Thank you for the feedback Nitesh! We understand that differences between scan results from Salesforce Security Portal scans and Checkmarx scans can be challenging when comparing findings across tools. To address this, Checkmarx has recently introduced a new hybrid scanning engine and Finding Analysis Engine designed to improve scan fidelity and consistency by validating findings, reducing noise, and surfacing the vulnerabilities that matter most. The result is an industry-leading F1 score and a 60% reduction in false positives, helping teams gain greater confidence in their scan results and prioritize remediation more effectively. We're also glad to hear that Checkmarx is delivering fast scans, actionable vulnerability insights, intuitive workflows, and strong support for your team. Let us know how we can continue to support your team, reach out any time and again, thank you for your review! [See how Checkmarx improved](https://checkmarx.com/press-releases/checkmarx-one-achieves-industrys-highest-scanning-fidelity-outperforming-both-legacy-tools-and-ai-models/) 8/7/2026 Validated ReviewerSource: G2 invite NT Naushad T. Lead Technical Specialist - EDR Information Technology and Services Enterprise (\> 1000 emp.) 7/9/2026 "Checkmarx: Reliable SAST Solution for Strengthening Application Security" 4/5 What do you like best about Checkmarx? I had a positive experience using Checkmarx as part of our application security process. What I appreciated most was how it helped us identify security vulnerabilities early in the development lifecycle, so teams could address issues before they reached production. The interface is fairly friendly once you're familiar with it, and the scan reports provide enough detail for developers and security teams to understand the root cause and recommended remediation. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? The initial setup and policy configuration come with a learning phase, especially for teams that are new to application security testing. In addition, full scans can take a while on large or complex projects, which can slow down development pipelines. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarx has helped us standardize our secure code review process by delivering consistent vulnerability analysis across multiple projects. Its integration with our CI/CD pipeline lets us run automated security scans as part of the build process, so developers get timely feedback without interrupting their day-to-day workflow. Overall, Checkmarx has strengthened our security posture and continues to support our DevSecOps initiatives. Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-13085824/official_response/edit) Thanks Naushad for your review. Glad to hear you are identifying vulnerabilities early in the life cycle. Our research has found that the cost to fix one if it is missed through the stages (through IDE, CI/DC, supply chain, and run time) can multiply as much as 10 times in each stage. To your issues with setup and speed, these are two areas we are working on. Our latest Risk Orchestration feature centralizes scanning results in a more user-friendly way, and our just released hybrid NG-SAST security scanning engine achieved an F1 score of 0.64 – more than three times the 0.20 average across competing approaches that Checkmarx evaluated. Thank you for your review, and I invite you to learn more! [See how Checkmarx improved](https://checkmarx.com/press-releases/checkmarx-one-achieves-industrys-highest-scanning-fidelity-outperforming-both-legacy-tools-and-ai-models/) Validated ReviewerIncentivizedSource: G2 invite ![Amshu P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Amshu P.") AP Amshu P. Discord Testers Small-Business (50 or fewer emp.) 5/27/2026 "Powerful for Security, But Needs UI Improvements" 4/5 What do you like best about Checkmarx? I like Checkmarx for its security testing at the application level. It's practical even though it wasn't really easy to use at first. I appreciate its security capabilities, easy navigation, and the reporting which works pretty well. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? It was really tough for me to use initially, felt kinda confusing but got used to it as I started working with it. UI could be better. Scans take a lot of time and I used to get false positives, which required so much energy ugh. I stopped using it because the cost was too high for my boss and he stopped paying for it. Tough, it took like, days for the team to properly set it up. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarx helps with scanning code and addressing security issues, offering good security testing capabilities with easy navigation and solid reporting for our team. Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-12877943/official_response/edit) Amshu, sorry you stopped using Checkmarx due to cost, it would be great to explore this further so you can get the maximum benefit of our platform. Also with regards to usability, one area where Checkmarx has made significant investments is Risk Orchestration within Checkmarx One ASPM, which provides a single, unified view of findings across SAST, SCA, IaC, APIs, containers, secrets, cloud, and third-party tools. By correlating and prioritizing risks based on exploitability, reachability, and business impact, teams spend less time navigating multiple dashboards and manually triaging findings. This approach reduces alert noise, eliminates redundant triage, and gives developers actionable remediation guidance directly within their existing workflows, helping make application security easier to adopt, faster to manage, and more cost-effective at scale. Again, thanks for your review, and we would appreciate the chance to find out how we can make our experience a better investment for you. Reach out any time! [See how Checkmarx improved](https://checkmarx.com/product/aspm/) Validated ReviewerIncentivizedSource: G2 invite ![Arya S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Arya S.") AS Arya S. Cybersecurity Lead Computer & Network Security Enterprise (\> 1000 emp.) 6/17/2026 "Comprehensive Application Security with Checkmarx" 4.5/5 What do you like best about Checkmarx? I like Checkmarx because it provides comprehensive application security, with accurate vulnerability detection, risk-based prioritization, and clear remediation recommendations. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? One area that could be improved is the number of false positives generated during scans, as this can add extra time to validation and triage. In addition, scans may take longer when running against large codebases. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarx helps us address the challenge of identifying security vulnerabilities early in the software development lifecycle, before they reach production. It scans source code, open-source dependencies, APIs, and other application components to detect security risks and provide remediation guidance. For us, this reduces the likelihood of security incidents, supports compliance efforts, reinforces secure development practices, and helps development teams fix vulnerabilities faster without significantly slowing delivery timelines. Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-12972848/official_response/edit) Arya, thank you for the thoughtful feedback! We’re glad Checkmarx is helping you find risk earlier across source code, open source, APIs, and other application components. We also understand that false positives and scan time can add friction for developers. That’s why Checkmarx One is investing heavily in higher-fidelity scanning, not just more findings. Our new hybrid SAST engine combines deterministic analysis, purpose-tuned AI, and a Finding Analysis Engine to confirm true positives and suppress false ones before results reach developers. In head-to-head testing across seven production codebases, it achieved a 0.64 F1 score, more than 3x the evaluated average, while reducing false positives by 60%. The goal is to help teams cut through noise, prioritize genuinely exploitable risk, and remediate faster without slowing delivery. [See how Checkmarx improved](https://checkmarx.com/press-releases/checkmarx-one-achieves-industrys-highest-scanning-fidelity-outperforming-both-legacy-tools-and-ai-models/) Validated ReviewerSource: G2 invite ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") AB Verified User in Banking Enterprise (\> 1000 emp.) 5/26/2026 "Practical Security Testing for Development Teams" 4/5 What do you like best about Checkmarx? What I like most about Checkmarx is that it helps us think about security earlier in the development process instead of discovering issues later when they are more difficult to fix. It has made conversations between the security and development teams much more productive and efficient. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? One area where Checkmarx could improve is the amount of effort sometimes needed to review and prioritize findings, especially in larger projects. While the information is useful, it can take time to determine which issues should be addressed first. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarx helps us identify security concerns while applications are still being developed, rather than finding them after deployment. This has helped our team address issues earlier, reduce rework, and build more secure applications with greater confidence. Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-12870334/official_response/edit) We appreciate your review! Prioritization of findings in the enterprise is definitely something we have improved. I recently talked to two customers who pointed out that our Risk Orchestration in Checkmarx One ASPM can help with this. RO pulls in findings across areas like SAST, SCA, IaC, API security, secrets, containers, DAST, plus third-party signals, and then creates a unified risk score/view so teams can focus on what matters most. Please reach out and we will demo it for you, checkmarx.com/product/aspm [See how Checkmarx improved](https://checkmarx.com/product/aspm/) 6/21/2026 Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services Mid-Market (51-1000 emp.) 7/29/2026 "Powerful Application Security Testing That Helps Developers Spot Issues Fast" 4.5/5 What do you like best about Checkmarx? The best about Checkmarx is its application security testing capabilities that helps developers to identify the issues Review collected by and hosted on G2.com. What do you dislike about Checkmarx? The dislike about Checkmarx is Large codebases may require significant scan time. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? The problems that Checkmarx solving for me is scanning my codebase and identify the security vulnerabilities and help me in fixing those things efficiently. Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-13182941/official_response/edit) Thanks for the review! Scanning large code bases just got easier with the rollout of Checkmarx Fusion this week, which merges deterministic precision and frontier AI models together into a single platform that is getting a .741 F1 score, nearly four times the category average. I invite you to reach out for a demo or additional questions. [See how Checkmarx improved](https://checkmarx.com/platform/checkmarx-fusion/?utm_source=httpscheckmarx.comblog&utm_medium=httpscheckmarx.comblog&utm_campaign=checkmarx_fusion) Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise. G2 IconCurrent UserValidated ReviewerSource: G2 invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") EC Verified User in Computer Software Small-Business (50 or fewer emp.) 7/9/2026 "Strong Integrations and Support, but Pricing Is a Challenge for LatAm Startups" 3.5/5 What do you like best about Checkmarx? For us the most importante is the number of integrations that it has, sometimes de price is a little bit hi because we are startup that is based in Latam. The support also is good, and the performance UI and UX algo good. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? During the pilot test of this technology it works correct, we are evaluating due pricing because our geography Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Right now we are using a lot of agenting development, so it works for us correctly making some integrations with agentic coding. The AI that use is really good for this evaluation and integration Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-13084902/official_response/edit) Thanks for your review! We understand that pricing is an important consideration for growing startups, especially in LATAM, and appreciate your input as you evaluate the platform. I invite you to consider agentic capabilities like Developer Assist, Triage Assist, and Remediation Assist to reduce manual work, prioritize real risk, and deliver contextual fixes faster. Checkmarx also saves our customers money with a hybrid AI approach that avoids relying only on expensive large LLM calls. That helps reduce token consumption and cost at scale while maintaining high-confidence results. Our goal is to help teams adopt AI coding securely, efficiently, and economically. We would be happy to talk more, and we thank you for taking the time to tell us what you think. [See how Checkmarx improved](https://checkmarx.com/product/triage-and-remediation/) Validated ReviewerIncentivizedSource: G2 invite ![Tadele L.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Tadele L.") TL Tadele L. Senior IS Audit Officer Enterprise (\> 1000 emp.) 5/26/2026 "Essential for Secure Development, Accurate and Efficient" 4/5 What do you like best about Checkmarx? I like Checkmarx for its accurate vulnerability detection, easy CI/CD integration, and detailed remediation guidance that helps developers fix security issues quickly. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Checkmarx could improve scan performance for large projects, reduce false positives, and provide a more user-friendly interface for easier navigation and reporting. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarx helps us identify and fix application security vulnerabilities early in the development lifecycle, improve secure coding practices, and automate security testing within CI/CD pipelines. Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-12871303/official_response/edit) Tadele, thank you for the feedback! We've made significant investments to address these areas. Our new hybrid scanning engine combines deterministic analysis with AI-powered reasoning to deliver higher-quality results, achieving the industry's highest scanning fidelity while reducing false positives by 60%. This helps developers spend less time validating findings and more time remediating real risks. To improve usability and reporting, Checkmarx One ASPM now includes Risk Orchestration, which provides a single, unified view of findings across security tools, reduces alert noise, and prioritizes risks based on real exploitability and business impact. This simplifies navigation, streamlines reporting, and enables faster, more efficient triage and remediation workflows. Together, these innovations are designed to improve scan efficiency, reduce noise, and create a more intuitive experience for both developers and security teams. We hope you check them out, and we would be happy to discuss more. Thank you for your review! [See how Checkmarx improved](https://checkmarx.com/press-releases/checkmarx-one-achieves-industrys-highest-scanning-fidelity-outperforming-both-legacy-tools-and-ai-models/) Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Program Development](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Program Development") AP Verified User in Program Development Small-Business (50 or fewer emp.) 5/30/2026 "Seamless Developer Workflow Integration for Real-Time Vulnerability Fixes" 4/5 What do you like best about Checkmarx? Checkmarx integrates directly into the developer workflow. By providing plugins for popular IDEs, CI/CD pipelines, and source code management (SCM) platforms, it allows developers to catch and fix vulnerabilities in real time without context-switching Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Running the application can strain local servers, and I note that the system requires substantial RAM and processing power to perform efficiently. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarx solves the critical problem of vulnerabilities slipping into production code, which directly benefits me by reducing security risks and saving development time. Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-12890086/official_response/edit) We understand concerns around infrastructure requirements and performance. As part of our ongoing platform innovation, Checkmarx has introduced products designed to improve efficiency and deliver better higher-fidelity results. Recent F1 score findings and third party recognition support this evolution, but we would love to hear more from you to know how we can continue to improve for you. Thank you again, and please reach out any time! [See how Checkmarx improved](https://checkmarx.com/press-releases/) Validated ReviewerIncentivizedSource: G2 invite ## Questions about Checkmarx? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Checkmarx ](https://www.g2.com/products/checkmarx/discussions/new) GU Guest User • Last activity over 3 years ago Which testing method does Checkmarx support? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/which-testing-method-does-checkmarx-support) GU Guest User • Last activity over 2 years ago What is Checkmarx used for? 1 Upvote 1 [ Join the conversation ](https://www.g2.com/discussions/checkmarx-what-is-checkmarx-used-for) [ View all Discussions ](https://www.g2.com/products/checkmarx/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 11 months ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/checkmarx/pricing) Checkmarx Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_a4dc620644f85fd7e4f00b0a2267d09c/sonarqube.png "Product Avatar Image") SonarQube 4.4/5(154) [ Compare Now ](https://www.g2.com/compare/checkmarx-vs-sonarqube) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1690e90d3b34e5682247349555a8ab59/opentext-core-application-security.jpeg "Product Avatar Image") OpenText Core Application... 4.1/5(34) [ Compare Now ](https://www.g2.com/compare/checkmarx-vs-opentext-core-application-security) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_630875599869fc792265ba9508dc29e9/snyk.png "Product Avatar Image") Snyk 4.5/5(135) [ Compare Now ](https://www.g2.com/compare/checkmarx-vs-snyk) ##### ##### Checkmarx Features Analysis Static Code Analysis [ View More Features ](https://www.g2.com/products/checkmarx/features) ## Top-Rated Alternatives [ ![Veracode Application Security Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Veracode Application Security Platform") Veracode Application Security Platform 3.8/5(26) ](https://www.g2.com/products/veracode-application-security-platform/reviews) [ ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube") SonarQube 4.4/5(154) ](https://www.g2.com/products/sonarqube/reviews) [ ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab") GitLab 4.5/5(902) ](https://www.g2.com/products/gitlab/reviews) [ View All Alternatives ](https://www.g2.com/products/checkmarx/competitors/alternatives) ##### Categories on G2 [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast) [Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Interactive Application Security Testing (IAST)](https://www.g2.com/categories/interactive-application-security-testing-iast) [Show MoreShow Less](javascript:void(0);) ##### Explore More [What platform integrates transcription with video conferencing tools?](https://www.g2.com/discussions/what-platform-integrates-transcription-with-video-conferencing-tools)[What's the best AI agents for business operations platform for CEOs managing customer inquiries and eliminating repetitive workload?](https://www.g2.com/discussions/what-s-the-best-ai-agents-for-business-operations-platform-for-ceos-managing-customer-inquiries-and-eliminating-repetitive-workload)[What is the best time tracking software for small businesses?](https://www.g2.com/discussions/what-is-the-best-time-tracking-software-for-small-businesses) [Shopware vs Adobe Commerce for a mid-size retailer: which handles large catalogs without hitting a scalability ceiling?](https://www.g2.com/discussions/shopware-vs-adobe-commerce-for-a-mid-size-retailer-which-handles-large-catalogs-without-hitting-a-scalability-ceiling)[Which owned media tools are most trusted by content creators for monetisation and subscriber management?](https://www.g2.com/discussions/which-owned-media-tools-are-most-trusted-by-content-creators-for-monetization-and-subscriber-management)[Pros and Cons Details](https://www.g2.com/products/checkmarx/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)