# Aqua Security, Black Duck vs Checkmarx Comparison | | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Star Rating** | 4.2 out of 5 | 4.0 out of 5 | 4.2 out of 5 | | **Total Reviews** | 57 | 29 | 38 | | **Largest Market Segment** | Enterprise (56.1% of reviews) | Enterprise (46.4% of reviews) | Enterprise (52.9% of reviews) | | **Entry Level Price** | No pricing available | No pricing available | No pricing available | --- ## Top Pros & Cons ### Aqua Security Pros: - Security (18 reviews) - Ease of Use (15 reviews) Cons: - Missing Features (7 reviews) - Lack of Features (5 reviews) ### Black Duck Pros: - Accuracy of Findings (1 reviews) - Open Source (1 reviews) Cons: - Resource Constraints (1 reviews) ### Checkmarx Pros: - Implementation Ease (2 reviews) - User Interface (2 reviews) Cons: - False Positives (1 reviews) - Lacking Features (1 reviews) --- ## Ratings Comparison | Rating | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Meets Requirements** | 8.1 (43 reviews) | 7.8 (17 reviews) | 8.6 (27 reviews) | | **Ease of Use** | 8.6 (55 reviews) | 7.8 (17 reviews) | 8.2 (27 reviews) | | **Ease of Setup** | 8.5 (46 reviews) | 7.9 (11 reviews) | 7.7 (13 reviews) | | **Ease of Admin** | 8.1 (35 reviews) | 8.3 (10 reviews) | 7.9 (13 reviews) | | **Quality of Support** | 8.0 (42 reviews) | 7.9 (14 reviews) | 8.3 (22 reviews) | | **Has the product been a good partner in doing business?** | 8.5 (36 reviews) | 8.3 (12 reviews) | 8.3 (12 reviews) | | **Product Direction (% positive)** | 7.8 (43 reviews) | 6.8 (18 reviews) | 7.5 (23 reviews) | --- ## Pricing ### Aqua Security #### Entry-Level Pricing No pricing available #### Free Trial No information available ### Black Duck #### Entry-Level Pricing No pricing available #### Free Trial Yes ### Checkmarx #### Entry-Level Pricing No pricing available #### Free Trial Yes --- ## Features Comparison By Category ### Cloud Workload Protection Platforms | Product | Score | Reviews | |---|---|---| | **Aqua Security** | 7.3/10 | 17 | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Management | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Dashboards and Reports** | 7.5 (16 reviews) | Not enough data | Not enough data | | **Workflow Management** | 7.6 (13 reviews) | Not enough data | Not enough data | | **Administration Console** | 8.1 (16 reviews) | Not enough data | Not enough data | #### Operations | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Governance** | 7.5 (14 reviews) | Not enough data | Not enough data | | **Logging and Reporting** | 8.1 (13 reviews) | Not enough data | Not enough data | | **API / Integrations** | 8.0 (15 reviews) | Not enough data | Not enough data | #### Security Controls | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Anomaly Detection** | 7.9 (15 reviews) | Not enough data | Not enough data | | **Data Loss Prevention** | 6.8 (13 reviews) | Not enough data | Not enough data | | **Security Auditing** | 7.9 (15 reviews) | Not enough data | Not enough data | | **Cloud Gap Analytics** | 7.1 (12 reviews) | Not enough data | Not enough data | ### Static Application Security Testing (SAST) | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | 7.8/10 | 6 | #### Administration | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **API / Integrations** | Not enough data | Not enough data | 8.3 (5 reviews) | | **Extensibility** | Not enough data | Not enough data | 8.3 (5 reviews) | #### Analysis | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Reporting and Analytics** | Not enough data | Not enough data | 8.6 (6 reviews) | | **Issue Tracking** | Not enough data | Not enough data | 8.1 (6 reviews) | | **Static Code Analysis** | Not enough data | Not enough data | 8.3 (6 reviews) | | **Code Analysis** | Not enough data | Not enough data | 8.7 (5 reviews) | #### Testing | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Command-Line Tools** | Not enough data | Not enough data | 7.7 (5 reviews) | | **Manual Testing** | Not enough data | Not enough data | 7.3 (5 reviews) | | **Test Automation** | Not enough data | Not enough data | Not enough data | | **Compliance Testing** | Not enough data | Not enough data | Not enough data | | **Black-Box Scanning** | Not enough data | Not enough data | Not enough data | | **Detection Rate** | Not enough data | Not enough data | Not enough data | | **False Positives** | Not enough data | Not enough data | 5.3 (5 reviews) | #### Agentic AI - Static Application Security Testing (SAST) | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | ### Dynamic Application Security Testing (DAST) | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Administration | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **API / Integrations** | Not enough data | Not enough data | Not enough data | | **Extensibility** | Not enough data | Not enough data | Not enough data | #### Analysis | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Reporting and Analytics** | Not enough data | Not enough data | Not enough data | | **Issue Tracking** | Not enough data | Not enough data | Not enough data | | **Static Code Analysis** | Not enough data | Not enough data | Not enough data | | **Vulnerability Scan** | Not enough data | Not enough data | Not enough data | | **Code Analysis** | Not enough data | Not enough data | Not enough data | #### Testing | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Manual Testing** | Not enough data | Not enough data | Not enough data | | **Test Automation** | Not enough data | Not enough data | Not enough data | | **Compliance Testing** | Not enough data | Not enough data | Not enough data | | **Black-Box Scanning** | Not enough data | Not enough data | Not enough data | | **Detection Rate** | Not enough data | Not enough data | Not enough data | | **False Positives** | Not enough data | Not enough data | Not enough data | ### Container Security | Product | Score | Reviews | |---|---|---| | **Aqua Security** | 7.9/10 | 18 | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Administration | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Risk Scoring** | 8.0 (18 reviews) | Not enough data | Not enough data | | **Secrets Management** | 6.9 (15 reviews) | Not enough data | Not enough data | | **Security Auditing** | 8.0 (15 reviews) | Not enough data | Not enough data | | **Configuration Management** | 7.4 (16 reviews) | Not enough data | Not enough data | #### Monitoring | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Continuous Image Assurance** | 8.8 (16 reviews) | Not enough data | Not enough data | | **Behavior Monitoring** | 7.8 (13 reviews) | Not enough data | Not enough data | | **Observability** | 7.6 (15 reviews) | Not enough data | Not enough data | #### Protection | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Dynamic Image Scanning** | 8.2 (16 reviews) | Not enough data | Not enough data | | **Runtime Protection** | 8.3 (17 reviews) | Not enough data | Not enough data | | **Workload Protection** | 8.6 (15 reviews) | Not enough data | Not enough data | | **Network Segmentation** | 7.2 (13 reviews) | Not enough data | Not enough data | ### Cloud Compliance | Product | Score | Reviews | |---|---|---| | **Aqua Security** | 7.8/10 | 14 | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Security | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Compliance Monitoring** | 8.2 (14 reviews) | Not enough data | Not enough data | | **Anomoly Detection** | 8.6 (13 reviews) | Not enough data | Not enough data | | **Data Loss Prevention** | 6.5 (11 reviews) | Not enough data | Not enough data | | **Cloud Gap Analytics** | 7.2 (12 reviews) | Not enough data | Not enough data | #### Compliance | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Governance** | 7.1 (11 reviews) | Not enough data | Not enough data | | **Data Governance** | 6.7 (9 reviews) | Not enough data | Not enough data | | **Sensitive Data Compliance** | 6.9 (8 reviews) | Not enough data | Not enough data | #### Administration | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Policy Enforcement** | 8.3 (10 reviews) | Not enough data | Not enough data | | **Auditing** | 7.3 (10 reviews) | Not enough data | Not enough data | | **Workflow Management** | 7.4 (9 reviews) | Not enough data | Not enough data | ### Vulnerability Scanner | Product | Score | Reviews | |---|---|---| | **Aqua Security** | 6.8/10 | 20 | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Performance | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Issue Tracking** | 6.0 (16 reviews) | Not enough data | Not enough data | | **Detection Rate** | 7.7 (17 reviews) | Not enough data | Not enough data | | **False Positives** | 6.2 (19 reviews) | Not enough data | Not enough data | | **Automated Scans** | 8.3 (19 reviews) | Not enough data | Not enough data | #### Network | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Compliance Testing** | 7.6 (17 reviews) | Not enough data | Not enough data | | **Perimeter Scanning** | 6.2 (14 reviews) | Not enough data | Not enough data | | **Configuration Monitoring** | 6.8 (15 reviews) | Not enough data | Not enough data | #### Application | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Manual Application Testing** | 6.4 (14 reviews) | Not enough data | Not enough data | | **Static Code Analysis** | 6.9 (15 reviews) | Not enough data | Not enough data | | **Black Box Testing** | 5.6 (11 reviews) | Not enough data | Not enough data | #### Agentic AI - Vulnerability Scanner | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Not enough data | ### Software Composition Analysis | Product | Score | Reviews | |---|---|---| | **Aqua Security** | 7.2/10 | 6 | | **Black Duck** | 8.6/10 | 8 | | **Checkmarx** | N/A | N/A | #### Functionality - Software Composition Analysis | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Language Support** | 7.3 (5 reviews) | Not enough data | Not enough data | | **Integration** | 7.3 (5 reviews) | 8.0 (5 reviews) | Not enough data | | **Transparency** | Not enough data | 9.2 (6 reviews) | Not enough data | #### Effectiveness - Software Composition Analysis | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Remediation Suggestions** | 7.0 (5 reviews) | 8.3 (5 reviews) | Not enough data | | **Continuous Monitoring** | Not enough data | 8.3 (6 reviews) | Not enough data | | **Thorough Detection** | Not enough data | 9.3 (5 reviews) | Not enough data | ### Risk-Based Vulnerability Management | Product | Score | Reviews | |---|---|---| | **Aqua Security** | 6.2/10 | 7 | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Risk Analysis | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Risk Scoring** | 8.1 (6 reviews) | Not enough data | Not enough data | | **Reporting** | 4.2 (6 reviews) | Not enough data | Not enough data | | **Risk-Prioritization** | 7.2 (6 reviews) | Not enough data | Not enough data | #### Vulnerability Assesment | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Vulnerability Scanning** | 8.9 (6 reviews) | Not enough data | Not enough data | | **Vulnerability Intelligence** | 7.8 (6 reviews) | Not enough data | Not enough data | | **Contextual Data** | 5.7 (5 reviews) | Not enough data | Not enough data | | **Dashboards** | 4.2 (6 reviews) | Not enough data | Not enough data | #### Automation | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Automated Remediation** | 5.0 (7 reviews) | Not enough data | Not enough data | | **Workflow Automation** | 5.5 (7 reviews) | Not enough data | Not enough data | | **Security Testing** | 6.2 (7 reviews) | Not enough data | Not enough data | | **Test Automation** | 5.3 (6 reviews) | Not enough data | Not enough data | ### Cloud Security Monitoring and Analytics | Product | Score | Reviews | |---|---|---| | **Aqua Security** | 8.2/10 | 15 | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Activity Monitoring | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Usage Monitoring** | Feature Not Available | Not enough data | Not enough data | | **Database Monitoring** | Feature Not Available | Not enough data | Not enough data | | **API Monitoring** | 6.3 (8 reviews) | Not enough data | Not enough data | | **Activity Monitoring** | Feature Not Available | Not enough data | Not enough data | #### Security | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Compliance Monitoring** | 8.2 (12 reviews) | Not enough data | Not enough data | | **Risk Analysis** | 8.2 (12 reviews) | Not enough data | Not enough data | | **Reporting** | 8.5 (14 reviews) | Not enough data | Not enough data | #### Administration | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Security Automation** | 7.7 (11 reviews) | Not enough data | Not enough data | | **Security Integration** | 8.1 (12 reviews) | Not enough data | Not enough data | | **Multicloud Visibility** | 7.7 (13 reviews) | Not enough data | Not enough data | #### Agentic AI - Cloud Security Monitoring and Analytics | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Not enough data | | **Decision Making** | Not enough data | Not enough data | Not enough data | ### Secure Code Review | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Documentation | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Feedback** | Not enough data | Not enough data | Not enough data | | **Prioritization** | Not enough data | Not enough data | Not enough data | | **Remediation Suggestions** | Not enough data | Not enough data | Not enough data | #### Security | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **False Positives** | Not enough data | Not enough data | Not enough data | | **Custom Compliance** | Not enough data | Not enough data | Not enough data | | **Agility** | Not enough data | Not enough data | Not enough data | ### Cloud Security Posture Management (CSPM) | Product | Score | Reviews | |---|---|---| | **Aqua Security** | 8.5/10 | 15 | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Configuration | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **DLP Configuration** | 6.5 (10 reviews) | Not enough data | Not enough data | | **Configuration Monitoring** | 7.7 (13 reviews) | Not enough data | Not enough data | | **Unified Policy Management** | 7.1 (12 reviews) | Not enough data | Not enough data | | **Adaptive Access Control** | 6.7 (11 reviews) | Not enough data | Not enough data | | **API / Integrations** | 7.9 (13 reviews) | Not enough data | Not enough data | #### Visibility | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Multicloud Visibility** | 7.9 (12 reviews) | Not enough data | Not enough data | | **Asset Discovery** | 8.0 (11 reviews) | Not enough data | Not enough data | #### Vulnerability Management | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Threat Hunting** | 8.2 (13 reviews) | Not enough data | Not enough data | | **Vulnerability Scanning** | 9.2 (15 reviews) | Not enough data | Not enough data | | **Vulnerability Intelligence** | 9.0 (14 reviews) | Not enough data | Not enough data | | **Risk-Prioritization** | 8.8 (14 reviews) | Not enough data | Not enough data | ### Software Bill of Materials (SBOM) | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Functionality - Software Bill of Materials (SBOM) | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Format Support** | Not enough data | Not enough data | Not enough data | | **Annotations** | Not enough data | Not enough data | Not enough data | | **Attestation** | Not enough data | Not enough data | Not enough data | #### Management - Software Bill of Materials (SBOM) | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Monitoring** | Not enough data | Not enough data | Not enough data | | **Dashboards** | Not enough data | Not enough data | Not enough data | | **User Provisioning** | Not enough data | Not enough data | Not enough data | ### Cloud-Native Application Protection Platform (CNAPP) | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Security - Cloud-Native Application Protection Platform (CNAPP) | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Workload and container security** | Not enough data | Not enough data | Not enough data | | **Threat detection and response** | Not enough data | Not enough data | Not enough data | | **DevSecOps Integrations** | Not enough data | Not enough data | Not enough data | | **Unified Visibility** | Not enough data | Not enough data | Not enough data | #### Artificial Intelligence - Cloud-Native Application Protection Platform (CNAPP) | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Intelligent remediations and suggestions** | Not enough data | Not enough data | Not enough data | | **Risk prioritization** | Not enough data | Not enough data | Not enough data | | **Anomaly detection using machine learning** | Not enough data | Not enough data | Not enough data | #### Cloud Configuration Management - Cloud-Native Application Protection Platform (CNAPP) | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Multi-cloud visibility** | Not enough data | Not enough data | Not enough data | | **Cloud Security Posture Management (CSPM)** | Not enough data | Not enough data | Not enough data | #### Agentic AI - Cloud-Native Application Protection Platform (CNAPP) | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | | **Adaptive Learning** | Not enough data | Not enough data | Not enough data | ### Static Code Analysis | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Agentic AI - Static Code Analysis | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Adaptive Learning** | Not enough data | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Not enough data | ### AWS Marketplace | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Agentic AI - AWS Marketplace | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | Not enough data | | **Cross-system Integration** | Not enough data | Not enough data | Not enough data | ### AI AppSec Assistants | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Performance - AI AppSec Assistants | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Remediation** | Not enough data | Not enough data | Not enough data | | **Real-time Vulnerability Detection** | Not enough data | Not enough data | Not enough data | | **Accuracy** | Not enough data | Not enough data | Not enough data | #### Integration - AI AppSec Assistants | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Stack Integration** | Not enough data | Not enough data | Not enough data | | **Workflow Integration** | Not enough data | Not enough data | Not enough data | | **Codebase Contextual Awareness** | Not enough data | Not enough data | Not enough data | ### Cloud Security | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Cloud Visibility | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Data Discovery** | Not enough data | Not enough data | Not enough data | | **Cloud Registry** | Not enough data | Not enough data | Not enough data | | **Cloud Gap Analytics** | Not enough data | Not enough data | Not enough data | #### Security | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Data Security** | Not enough data | Not enough data | Not enough data | | **Data loss Prevention** | Not enough data | Not enough data | Not enough data | | **Security Auditing** | Not enough data | Not enough data | Not enough data | #### Identity | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **SSO** | Not enough data | Not enough data | Not enough data | | **Governance** | Not enough data | Not enough data | Not enough data | | **User Analytics** | Not enough data | Not enough data | Not enough data | ### Interactive Application Security Testing (IAST) | Product | Score | Reviews | |---|---|---| | **Aqua Security** | N/A | N/A | | **Black Duck** | N/A | N/A | | **Checkmarx** | N/A | N/A | #### Agentic AI - Interactive Application Security Testing (IAST) | Feature | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | --- ## Categories **Unique to Aqua Security (11):** [Cloud-Native Application Protection Platform (CNAPP)](https://www.g2.com/categories/cloud-native-application-protection-platform-cnapp), [Cloud Security Posture Management (CSPM) Software](https://www.g2.com/categories/cloud-security-posture-management-cspm), [AWS Marketplace Software](https://www.g2.com/categories/aws-marketplace), [Cloud Security Monitoring and Analytics Software](https://www.g2.com/categories/cloud-security-monitoring-and-analytics), [Risk-Based Vulnerability Management Software](https://www.g2.com/categories/risk-based-vulnerability-management), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance), [Container Security Tools](https://www.g2.com/categories/container-security-tools), [Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner), [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom) **Unique to Black Duck (2):** [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis) **Unique to Checkmarx (6):** [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Interactive Application Security Testing (IAST) Software](https://www.g2.com/categories/interactive-application-security-testing-iast) --- ## Reviewer Demographics ### By Company Size | Segment | Aqua Security | Black Duck | Checkmarx | |---|---|---|---| | **Small-Business** | 5.3% | 17.9% | 20.6% | | **Mid-Market** | 38.6% | 35.7% | 26.5% | | **Enterprise** | 56.1% | 46.4% | 52.9% | ### By Industry #### Aqua Security - **Computer Software:** 15.8% - **Financial Services:** 14.0% - **Information Technology and Services:** 8.8% - **Transportation/Trucking/Railroad:** 7.0% - **Banking:** 5.3% - **Retail:** 5.3% - **Telecommunications:** 3.5% - **Computer & Network Security:** 3.5% - **Entertainment:** 3.5% - **Hospital & Health Care:** 3.5% - **Other:** 29.8% #### Black Duck - **Information Technology and Services:** 28.6% - **Computer Software:** 28.6% - **Computer & Network Security:** 7.1% - **Utilities:** 3.6% - **Telecommunications:** 3.6% - **Printing:** 3.6% - **Food Production:** 3.6% - **Financial Services:** 3.6% - **Entertainment:** 3.6% - **Computer Hardware:** 3.6% - **Other:** 10.7% #### Checkmarx - **Computer Software:** 15.6% - **Information Technology and Services:** 15.6% - **Banking:** 9.4% - **Computer & Network Security:** 9.4% - **Automotive:** 6.3% - **Investment Banking:** 3.1% - **Internet:** 3.1% - **International Trade and Development:** 3.1% - **Insurance:** 3.1% - **Legal Services:** 3.1% - **Other:** 28.1% --- ## Alternatives ### Alternatives to Aqua Security - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (794 reviews) - [Cortex Cloud](https://www.g2.com/products/cortex-cloud/reviews) — 4.1/5 stars (112 reviews) - [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) — 4.8/5 stars (111 reviews) - [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews) — 4.4/5 stars (386 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (310 reviews) - [Orca Security](https://www.g2.com/products/orca-security/reviews) — 4.6/5 stars (266 reviews) - [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews) — 4.9/5 stars (1307 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2354 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (892 reviews) - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (399 reviews) ### Alternatives to Black Duck - [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (141 reviews) - [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (132 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (25 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2354 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (892 reviews) - [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (794 reviews) - [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews) - [Replit](https://www.g2.com/products/replit/reviews) — 4.5/5 stars (355 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (310 reviews) ### Alternatives to Checkmarx - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (25 reviews) - [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (141 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (892 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2354 reviews) - [HCL AppScan](https://www.g2.com/products/hcl-appscan/reviews) — 4.1/5 stars (76 reviews) - [Coverity](https://www.g2.com/products/coverity/reviews) — 4.2/5 stars (55 reviews) - [OpenText Core Application Security](https://www.g2.com/products/opentext-core-application-security/reviews) — 4.1/5 stars (34 reviews) - [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) — 4.6/5 stars (69 reviews) - [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (132 reviews) - [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews) --- ## Top Discussions ### Aqua Security No discussions available for this product. ### Black Duck No discussions available for this product. ### Checkmarx - Title: [What is Checkmarx used for?](https://www.g2.com/discussions/what-is-checkmarx-used-for) — 2 comments > **Top comment:** "Checkmarx is a static code analysis tool used for SAST (Static application security testing)" - Title: [What is Checkmarx used for?](https://www.g2.com/discussions/checkmarx-what-is-checkmarx-used-for) — 1 comment, 1 upvote > **Top comment:** "Checkmarx is an ultimate tool for Static code scan and analysis through code vulnerability testing, SCA and secret detections. They have a prebuilt engine to..." - Title: [Which testing method does Checkmarx support?](https://www.g2.com/discussions/which-testing-method-does-checkmarx-support) — 1 comment > **Top comment:** "Checkmarx does support all these testing methodologies -Sast, Dast, IAST, SCA " - Title: [Does Checkmarx support DAST?](https://www.g2.com/discussions/does-checkmarx-support-dast) — 1 comment > **Top comment:** "You cannot test DAST Testing using Checkmarx" --- **Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/aqua-security-vs-black-duck-vs-checkmarx)