Link copied to clipboard

# Checkmarx vs CodeScan Comparison - What are their main differences?

Share
[
Export
](/compare/checkmarx/codescan/export.csv)

CheckmarxCodeScan[+ Add Product](#)

Reviews

**Checkmarx** [

4.2/5(49)

](https://www.g2.com/products/checkmarx/reviews#reviews)

**CodeScan** [

4.6/5(34)

](https://www.g2.com/products/codescan/reviews#reviews)

Pricing

**Checkmarx**
Free Trial

**Contact Us** 100 Per contributing developer · SAST 

**CodeScan**
Free Trial

**Contact for Pricing** · Cloud

**Pricing Insights**
from reviews

Time to Implement

**Checkmarx**
2 months

Based on 8 responses

**CodeScan**
Not enough reviews yet

Return on Investment

**Checkmarx**
11 months

Based on 7 responses

**CodeScan**
Not enough reviews yet

Perceived Cost

**Checkmarx**
$$$$$

**CodeScan**
$$$$$

Average Discount

**Checkmarx**
Not enough reviews yet

**CodeScan**
Not enough reviews yet

Pros & Cons

**Checkmarx**
[
Implementation Ease (2)
](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1987244&qs=pros-and-cons#reviews)[
User Interface (2)
](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1900133&qs=pros-and-cons#reviews)[
False Positives (1)
](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423721&qs=pros-and-cons#reviews)[
Lacking Features (1)
](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423686&qs=pros-and-cons#reviews)

**CodeScan**
Not enough data

Integrations

**Checkmarx**
[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_b3390b4cc3d92e87d570895f7358c003/aws-lambda.jpg "Product Avatar Image")

AWS Lambda

](https://www.g2.com/products/aws-lambda/reviews)[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_2ac0e7b10e1efb64107026cb2b241d53/azure-pipelines.jpg "Product Avatar Image")

Azure Pipelines

](https://www.g2.com/products/azure-pipelines/reviews)[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_8ec3c17e3fb1df25b6a8bd7cc69cf2d1/github.png "Product Avatar Image")

GitHub

](https://www.g2.com/products/github/reviews)[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_1eff145289f3ee8649ba9d287a4fc68a/gitlab.jpeg "Product Avatar Image")

GitLab

](https://www.g2.com/products/gitlab/reviews)[
View all
](https://www.g2.com/products/checkmarx/integrations)

**CodeScan**
Not enough data

Screenshots

**Checkmarx**
 ![Checkmarx screenshot](https://images.g2crowd.com/cdn-cgi/image/width=600,height=600,fit=scale-down,format=auto,onerror=redirect,/https://images.g2crowd.com/uploads/attachment/file/1898040/Checkmarx_One_Platform.png)

**CodeScan**
 ![CodeScan screenshot](https://images.g2crowd.com/cdn-cgi/image/width=600,height=600,fit=scale-down,format=auto,onerror=redirect,/https://images.g2crowd.com/uploads/attachment/file/153082/CodeScan-Product-Screenshot-01.jpg)

Ratings

Meets Requirements

**Checkmarx**

8.6

8.637

**CodeScan**

8.4

8.416

Ease of Use

**Checkmarx**

8.5

8.537

**CodeScan**

8.6

8.618

Ease of Setup

**Checkmarx**

8.2

8.223

**CodeScan**

8.7

8.710

Ease of Admin

**Checkmarx**

8.3

8.317

**CodeScan**

8.8

8.812

Quality of Support

**Checkmarx**

8.4

8.431

**CodeScan**

9.0

9.020

Has the product been a good partner in doing business?

**Checkmarx**

8.6

8.616

**CodeScan**

9.2

9.212

Product Direction (% positive)

**Checkmarx**

8.2

8.232

**CodeScan**

8.3

8.321

Features

Static Application Security Testing (SAST)[Hide 23 FeaturesShow 23 Features](javascript:void(0);)

8.5

15

9.4

9

Administration

API / Integrations

9.0(won by 0.2)

8

8.8

8

Extensibility

8.6(won by 0.3)

7

8.3

8

Analysis

Real-Time Analytics

9.0(won by 0.5)

10

 (There is a greater than 0.5 difference between this product's rating and its competitors)

8.5

8

Issue Tracking

8.5(won by 0.6)

9

 (There is a greater than 0.5 difference between this product's rating and its competitors)

7.9

8

Static Code Analysis

8.9

11

9.2(won by 0.3)

8

Code Analysis

9.1

9

9.2(won by 0.1)

8

Integrated Development Environment

Not enough data

Not enough data

Testing

Test Automation

8.9(won by 1.6)

6

 (There is a greater than 0.5 difference between this product's rating and its competitors)

7.3

5

Compliance Testing

8.9(won by 0.1)

6

8.8

7

Detection Rate

8.6(won by 0.3)

7

8.3

6

False Positives

6.1(won by 0.3)

9

5.8

6

Command-Line Tools

8.3(won by default)

7

Not enough data

Manual Testing

8.1(won by default)

7

Not enough data

Source-Code Scanning

Not enough data

8.3(won by default)

5

Multi-Language Scanning

Not enough data

Not enough data

Agentic AI - Static Application Security Testing (SAST)

Autonomous Task Execution

Not enough data

Not enough data

Additional Functionality

Debugging

Not enough data

Not enough data

Generative AI

Not enough data

Not enough data

AI Copilot

Not enough data

Not enough data

For Developers

Not enough data

Not enough data

Deployment Management

Not enough data

Not enough data

Application Security

Not enough data

Not enough data

Dashboard

Not enough data

Not enough data

Show 7 feature categories with incomplete data

Artificial Intelligence[Hide 37 FeaturesShow 37 Features](javascript:void(0);)

Not enough data

Not enough data

Additional Functionality

Tagging

Not enough data

Not enough data

Natural Language Processing

Not enough data

Not enough data

Data Extraction

Not enough data

Not enough data

Multi-Language

Not enough data

Not enough data

Predictive Analytics

Not enough data

Not enough data

Drag & Drop

Not enough data

Not enough data

Speech Recognition

Not enough data

Not enough data

Reporting/Analytics

Not enough data

Not enough data

Data Storage Management

Not enough data

Not enough data

Virtual Personal Assistant (VPA)

Not enough data

Not enough data

AI Copilot

Not enough data

Not enough data

Customer Segmentation

Not enough data

Not enough data

Collaboration Tools

Not enough data

Not enough data

Data Import/Export

Not enough data

Not enough data

Generative AI

Not enough data

Not enough data

For eCommerce

Not enough data

Not enough data

Role-Based Permissions

Not enough data

Not enough data

Customizable Branding

Not enough data

Not enough data

Search/Filter

Not enough data

Not enough data

Monitoring

Not enough data

Not enough data

Document Management

Not enough data

Not enough data

API

Not enough data

Not enough data

Data Visualization

Not enough data

Not enough data

Trend Analysis

Not enough data

Not enough data

Machine Learning

Not enough data

Not enough data

Access Controls/Permissions

Not enough data

Not enough data

Alerts/Escalation

Not enough data

Not enough data

Performance Metrics

Not enough data

Not enough data

Real-Time Data

Not enough data

Not enough data

Third-Party Integrations

Not enough data

Not enough data

Mobile App

Not enough data

Not enough data

Multiple Data Sources

Not enough data

Not enough data

For Sales Teams/Organizations

Not enough data

Not enough data

Sentiment Analysis

Not enough data

Not enough data

Activity Dashboard

Not enough data

Not enough data

Chatbot

Not enough data

Not enough data

Workflow Automation

Not enough data

Not enough data

Generative AI[Hide 22 FeaturesShow 22 Features](javascript:void(0);)

Not enough data

Not enough data

Additional Functionality

Code Generation

Not enough data

Not enough data

Text to Image

Not enough data

Not enough data

Generative AI

Not enough data

Not enough data

API

Not enough data

Not enough data

Natural Language Processing

Not enough data

Not enough data

Virtual Characters and Avatars

Not enough data

Not enough data

Content Generation

Not enough data

Not enough data

Personalization and Recommendation

Not enough data

Not enough data

Conditional Generation

Not enough data

Not enough data

Transformer Model

Not enough data

Not enough data

Automated Image & Video Editing

Not enough data

Not enough data

Interactive and Co-Creative Systems

Not enough data

Not enough data

Text Summarization

Not enough data

Not enough data

Data Augmentation

Not enough data

Not enough data

Variation Autoencoder Models

Not enough data

Not enough data

Adversarial Training

Not enough data

Not enough data

Transfer Learning and Fine-tuning

Not enough data

Not enough data

Simulation and Scenario Generation

Not enough data

Not enough data

Creative Design

Not enough data

Not enough data

AI Copilot

Not enough data

Not enough data

Prompt Engineering

Not enough data

Not enough data

Foundation Model

Not enough data

Not enough data

Dynamic Application Security Testing (DAST)[Hide 13 FeaturesShow 13 Features](javascript:void(0);)

Not enough data

Not enough data

Administration

API / Integrations

Not enough data

Not enough data

Extensibility

Not enough data

Not enough data

Analysis

Reporting and Analytics

Not enough data

Not enough data

Issue Tracking

Not enough data

Not enough data

Static Code Analysis

Not enough data

Not enough data

Vulnerability Scan

Not enough data

Not enough data

Code Analysis

Not enough data

Not enough data

Testing

Manual Testing

Not enough data

Not enough data

Test Automation

Not enough data

Not enough data

Compliance Testing

Not enough data

Not enough data

Black-Box Scanning

Not enough data

Not enough data

Detection Rate

Not enough data

Not enough data

False Positives

Not enough data

Not enough data

Secure Code Review[Hide 6 FeaturesShow 6 Features](javascript:void(0);)

Not enough data

Not enough data

Documentation

Feedback

Not enough data

Not enough data

Prioritization

Not enough data

Not enough data

Remediation Suggestions

Not enough data

Not enough data

Security

False Positives

Not enough data

Not enough data

Custom Compliance

Not enough data

Not enough data

Agility

Not enough data

Not enough data

Static Code Analysis[Hide 3 FeaturesShow 3 Features](javascript:void(0);)

Not enough data

Not enough data

Agentic AI - Static Code Analysis

Adaptive Learning

Not enough data

Not enough data

Natural Language Interaction

Not enough data

Not enough data

Proactive Assistance

Not enough data

Not enough data

AI AppSec Assistants[Hide 6 FeaturesShow 6 Features](javascript:void(0);)

Not enough data

Not enough data

Performance - AI AppSec Assistants

Remediation

Not enough data

Not enough data

Real-time Vulnerability Detection

Not enough data

Not enough data

Accuracy

Not enough data

Not enough data

Integration - AI AppSec Assistants

Stack Integration

Not enough data

Not enough data

Workflow Integration

Not enough data

Not enough data

Codebase Contextual Awareness

Not enough data

Not enough data

Interactive Application Security Testing (IAST)[Hide 1 FeatureShow 1 Feature](javascript:void(0);)

Not enough data

Not enough data

Agentic AI - Interactive Application Security Testing (IAST)

Autonomous Task Execution

Not enough data

Not enough data

User Insights

Reviewers' Company Size

[![Checkmarx](https://images.g2crowd.com/uploads/product/hd_favicon/ee46b61b130757d24b7633fe98e00fb6/checkmarx.svg "Checkmarx")](https://www.g2.com/products/checkmarx/reviews)

Checkmarx

Small-Business(50 or fewer emp.)

24.4%

Mid-Market(51-1000 emp.)

22.2%

Enterprise(\> 1000 emp.)

53.3%

[![CodeScan](https://images.g2crowd.com/uploads/product/hd_favicon/32d11e59fc549a6e36a67663624e82a4/codescan.svg "CodeScan")](https://www.g2.com/products/codescan/reviews)

CodeScan

Small-Business(50 or fewer emp.)

20.0%

Mid-Market(51-1000 emp.)

30.0%

Enterprise(\> 1000 emp.)

50.0%

Small-Business

(50 or fewer emp.)

24.4%

20.0%

Mid-Market

(51-1000 emp.)

22.2%

30.0%

Enterprise

(\> 1000 emp.)

53.3%

50.0%

Reviewers' Industry

[![Checkmarx](https://images.g2crowd.com/uploads/product/hd_favicon/ee46b61b130757d24b7633fe98e00fb6/checkmarx.svg "Checkmarx")](https://www.g2.com/products/checkmarx/reviews)
Checkmarx

Information Technology and Services

19.0%

Computer Software

16.7%

Banking

11.9%

Computer & Network Security

11.9%

Automotive

4.8%

Other

35.7%

[![CodeScan](https://images.g2crowd.com/uploads/product/hd_favicon/32d11e59fc549a6e36a67663624e82a4/codescan.svg "CodeScan")](https://www.g2.com/products/codescan/reviews)
CodeScan

Information Technology and Services

16.7%

Computer Software

16.7%

Hospital & Health Care

10.0%

Management Consulting

6.7%

Insurance

6.7%

Other

43.3%

FAQs

## Checkmarx vs CodeScan FAQs

Generated using AI

Last updated: August 15, 2026

### What is the difference between Checkmarx vs CodeScan?

CodeScan stands out for higher reviewer satisfaction on setup and support, while Checkmarx is noted for its automation and integration strengths.

| [Checkmarx](https://www.g2.com/products/checkmarx/reviews) | [CodeScan](https://www.g2.com/products/codescan/reviews) |
| --- | --- |
| 4.2/5 (48 reviews) | 4.6/5 (34 reviews) |
| Enterprise | Enterprise |
| 8.1 | 8.7 |
| 8.3 | 9.0 |
| Automation Testing | — |

### How do the pricing models of Checkmarx and CodeScan compare?

CodeScan is rated higher for value, with reviewers expressing greater satisfaction with its pricing compared to Checkmarx.

- **Checkmarx:** In recent reviews, several reviewers cite high cost as a concern, especially for startups and small organizations.
- **CodeScan:** Reviewers note that while CodeScan's pricing is based on code line blocks and can be costly, they express higher satisfaction with its value relative to its capabilities.
- **Switching reasons:** Reviewers mention switching from Checkmarx due to pricing concerns and seeking more granular or flexible pricing models.

### What are the best alternatives to Checkmarx and CodeScan?

SonarQube, Veracode Application Security Platform, and GitLab are the top three alternatives to Checkmarx and CodeScan.

| Product | G2 Rating (reviews) | Largest Segment | Pricing Insight | Top Reviewer-Cited Strength |
| --- | --- | --- | --- | --- |
| [Checkmarx](https://www.g2.com/products/checkmarx/reviews) | 4.2/5 (48 reviews) | Enterprise | High cost cited as a concern in recent reviews | Automation Testing |
| [CodeScan](https://www.g2.com/products/codescan/reviews) | 4.6/5 (34 reviews) | Enterprise | Pricing based on code line blocks, higher satisfaction | Code quality and Salesforce-specific analysis |
| [SonarQube](https://www.g2.com/products/sonarqube/reviews) | 4.4/5 (155 reviews) | Enterprise | — | Comprehensive static code analysis |
| [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) | 3.8/5 (26 reviews) | — | — | Application security coverage |
| [GitLab](https://www.g2.com/products/gitlab/reviews) | 4.5/5 (902 reviews) | Small-Business | — | Integrated DevOps and CI/CD capabilities |

### Which Static Application Security Testing (SAST) features should I prioritize when comparing Checkmarx and CodeScan?

Buyers should prioritize ease of setup, quality of support, integration capabilities, automation, and accuracy of results when comparing Checkmarx and CodeScan.

- **Ease of Setup:** Checkmarx 8.1, CodeScan 8.7
- **Quality of Support:** Checkmarx 8.3, CodeScan 9.0
- **Integration Capabilities:** Checkmarx is frequently cited for integrations with Jenkins (2 all-time mentions) and GitHub (1 all-time mention); CodeScan is noted for integration with VS Code, SonarQube, and Copado in recent reviews.
- **Automation:** Checkmarx is highlighted for automation testing (1 all-time mention).
- **Accuracy of Results:** Checkmarx is cited for accuracy of results (1 all-time mention); CodeScan is praised for code quality and Salesforce-specific analysis in recent reviews.

### What are the pros and cons of Checkmarx vs CodeScan?

Checkmarx's headline strength is automation and integration, while CodeScan's is ease of setup and Salesforce-specific code quality analysis.

- **Checkmarx strengths:** Automation Testing (1 all-time mention), Implementation Ease (2 all-time mentions), User Interface (2 all-time mentions), Easy Integrations (1 all-time mention), Vulnerability Detection (1 all-time mention).
- **Checkmarx trade-offs:** False Positives (1 all-time mention), High cost cited in recent reviews, Steep learning curve and initial setup complexity noted in recent reviews.
- **CodeScan strengths:** High reviewer satisfaction for ease of setup (8.7), quality of support (9.0), and Salesforce-specific code analysis; praised for code quality, integration with VS Code, SonarQube, and Copado in recent reviews.
- **CodeScan trade-offs:** Pricing model based on code line blocks can be costly for small codebases, false positives and limited customization of rules mentioned in recent reviews.

### Is Checkmarx or CodeScan better for small businesses?

CodeScan is better suited for small businesses, with higher satisfaction scores and positive sentiment from reviewers in this segment.

- **Checkmarx:** Largest segment is Enterprise; reviewers from smaller organizations cite high cost and complexity as challenges.
- **CodeScan:** Largest segment is Enterprise, but recent reviews from small-business users highlight ease of setup, strong support, and satisfaction with Salesforce-specific features.

### Which Static Application Security Testing (SAST) platform has better integrations?

Checkmarx is favored for integrations, with more reviewer-cited integration mentions than CodeScan.

- **Checkmarx:** Integrations with Jenkins (2 all-time mentions) and GitHub (1 all-time mention) are highlighted in reviews.
- **CodeScan:** Integrations with VS Code, SonarQube, and Copado are praised in recent reviews, but without all-time mention counts.

### How do Checkmarx and CodeScan compare on customer support?

CodeScan leads on Quality of Support with a 0.7-point advantage over Checkmarx (9.0 vs 8.3).

- **Checkmarx:** Reviewers describe support as generally responsive, though some note delays and room for improvement.
- **CodeScan:** Reviewers consistently praise CodeScan's support team for responsiveness, flexibility, and hands-on assistance.

### Which is easier to implement, Checkmarx or CodeScan?

CodeScan is easier to implement, with a 0.6-point higher Ease of Setup score than Checkmarx (8.7 vs 8.1).

- **Checkmarx:** Reviewers note a learning curve and initial setup complexity, but also mention good documentation and support during implementation.
- **CodeScan:** Reviewers highlight straightforward installation, ease of integration with development tools, and minimal setup time.

Alternatives

**Checkmarx Alternatives**

 ![Veracode Application Security Platform](https://images.g2crowd.com/uploads/product/hd_favicon/d30c215643c0b745ba4951ab20b60121/veracode-application-security-platform.svg "Veracode Application Security Platform")

[
Veracode Application...
](/products/veracode-application-security-platform/reviews)

 ![Black Duck Polaris Platform](https://images.g2crowd.com/uploads/product/hd_favicon/195ba70518e2390f639f5372bea2e6c0/black-duck-polaris-platform.svg "Black Duck Polaris Platform")

[
Black Duck Polaris Platform
](/products/black-duck-polaris-platform/reviews)

 ![SonarQube](https://images.g2crowd.com/uploads/product/hd_favicon/2d6b80be24e9f51c144f780f2aa41cb3/sonarqube.svg "SonarQube")

[
SonarQube
](/products/sonarqube/reviews)

 ![GitLab](https://images.g2crowd.com/uploads/product/hd_favicon/2397ccd7309ef2bca71e3a275d59a5a3/gitlab.svg "GitLab")

[
GitLab
](/products/gitlab/reviews)

**CodeScan Alternatives**

 ![SonarQube](https://images.g2crowd.com/uploads/product/hd_favicon/2d6b80be24e9f51c144f780f2aa41cb3/sonarqube.svg "SonarQube")

[
SonarQube
](/products/sonarqube/reviews)

 ![GitLab](https://images.g2crowd.com/uploads/product/hd_favicon/2397ccd7309ef2bca71e3a275d59a5a3/gitlab.svg "GitLab")

[
GitLab
](/products/gitlab/reviews)

 ![GitHub](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_8ec3c17e3fb1df25b6a8bd7cc69cf2d1/github.png "GitHub")

[
GitHub
](/products/github/reviews)

 ![Gearset DevOps](https://images.g2crowd.com/uploads/product/hd_favicon/9e76ec4e5f61a21488651446ec8e33c8/gearset-devops.svg "Gearset DevOps")

[
Gearset DevOps
](/products/gearset-devops/reviews)

## Checkmarx vs CodeScan

When assessing the two solutions, reviewers found CodeScan easier to use, set up, and administer. Reviewers also preferred doing business with CodeScan overall.

- Reviewers felt that Checkmarx meets the needs of their business better than CodeScan.
- When comparing quality of ongoing product support, reviewers felt that CodeScan is the preferred option.
- For feature updates and roadmaps, our reviewers preferred the direction of CodeScan over Checkmarx.