Compare Checkmarx and Mend.io
At a Glance
Market Segments
Enterprise (53.1% of reviews)
Small-Business (39.0% of reviews)
Entry-Level Pricing
No pricing available
$300.00 1 Contributing Developer (CDs) Per Year
Checkmarx
Star Rating
(36)4.2 out of 5
Market Segments
Enterprise (53.1% of reviews)
Pros & Cons
Entry-Level Pricing
No pricing available
Free Trial is available
Learn more about Checkmarx
Mend.io
Star Rating
(112)4.3 out of 5
Market Segments
Small-Business (39.0% of reviews)
Pros & Cons
Entry-Level Pricing
$300.00 1 Contributing Developer (CDs) Per Year
Browse all 3 pricing plans
Checkmarx vs Mend.io
When assessing the two solutions, reviewers found Mend.io easier to use, set up, and administer. Reviewers also preferred doing business with Mend.io overall.
- Checkmarx and Mend.io both meet the requirements of our reviewers at a comparable rate.
- When comparing quality of ongoing product support, reviewers felt that Mend.io is the preferred option.
- For feature updates and roadmaps, our reviewers preferred the direction of Mend.io over Checkmarx.
Pricing
Entry-Level Pricing
Checkmarx
No pricing availableMend.io
Mend AI Premium
$300.00
1 Contributing Developer (CDs) Per Year
Secure AI powered applications.
AI red teaming, prompt hardening & more
- AI component inventory
- AI component risk insights
- System Prompt Hardening
Free Trial
Checkmarx
Free Trial is available
Mend.io
Free Trial is available
Ratings
Meets Requirements
8.6
27
8.6
81
Ease of Use
8.2
27
8.3
82
Ease of Setup
7.7
13
8.1
50
Ease of Admin
7.9
13
8.2
50
Quality of Support
8.3
22
8.7
67
Has the product been a good partner in doing business?
8.3
12
8.8
46
Product Direction (% positive)
7.5
23
8.6
75
Features by Category
Administration
8.3
5
7.6
7
8.3
5
7.7
8
Analysis
8.6
6
7.3
11
8.1
6
7.6
11
8.3
6
8.2
11
8.7
5
7.6
11
Testing
7.7
5
7.2
10
7.3
5
Feature Not Available
Not enough data
7.2
9
Not enough data
7.7
10
Not enough data
Not enough data
Not enough data
7.4
9
5.3
5
5.0
9
Agentic AI - Static Application Security Testing (SAST)
Not enough data
Not enough data
Dynamic Application Security Testing (DAST)Hide 13 FeaturesShow 13 Features
Not enough data
Not enough data
Administration
Not enough data
Not enough data
Not enough data
Not enough data
Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Testing
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Administration
Not enough data
8.3
7
Not enough data
Feature Not Available
Not enough data
9.1
9
Not enough data
8.0
10
Monitoring
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Protection
Not enough data
7.9
8
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Performance
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Network
Not enough data
Not enough data
Not enough data
Feature Not Available
Not enough data
Not enough data
Application
Not enough data
Feature Not Available
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Vulnerability Scanner
Not enough data
Not enough data
Not enough data
Not enough data
Functionality - Software Composition Analysis
Not enough data
8.5
45
Not enough data
8.5
47
Not enough data
8.6
44
Effectiveness - Software Composition Analysis
Not enough data
8.2
45
Not enough data
8.8
44
Not enough data
8.6
45
Documentation
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Feature Not Available
Not enough data
Not enough data
Not enough data
Feature Not Available
Not enough data
Not enough data
Tracking
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Application Security Posture Management (ASPM)Hide 11 FeaturesShow 11 Features
Not enough data
Not enough data
Risk management - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration and efficiency - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Reporting and Analytics - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Functionality - Software Bill of Materials (SBOM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Management - Software Bill of Materials (SBOM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Static Code Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Model Protection - AI Security Solutions
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Runtime Monitoring - AI Security Solutions
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Policy Enforcement and Compliance - AI Security Solutions
Not enough data
Not enough data
Not enough data
Feature Not Available
Not enough data
Not enough data
Not enough data
Not enough data
Performance - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Interactive Application Security Testing (IAST)Hide 1 FeatureShow 1 Feature
Not enough data
Not enough data
Agentic AI - Interactive Application Security Testing (IAST)
Not enough data
Not enough data
Categories
Categories
Shared Categories
Checkmarx and Mend.io are categorized as Static Application Security Testing (SAST) and Static Code Analysis
Unique Categories
Checkmarx is categorized as AI AppSec Assistants, Dynamic Application Security Testing (DAST), Secure Code Review, and Interactive Application Security Testing (IAST)
Reviews
Reviewers' Company Size
Checkmarx
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Mend.io
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Small-Business
(50 or fewer emp.)
Mid-Market
(51-1000 emp.)
Enterprise
(> 1000 emp.)
Reviewers' Industry
Computer Software
15.6%
Information Technology and Services
15.6%
Banking
9.4%
Computer & Network Security
9.4%
Automotive
6.3%
Other
43.8%
Computer Software
33.3%
Information Technology and Services
14.3%
Financial Services
6.7%
Telecommunications
4.8%
Computer & Network Security
4.8%
Other
36.2%
Discussions
What is Checkmarx used for?
2 Comments
SS
Checkmarx is a static code analysis tool used for SAST (Static application security testing)Read more
What is Checkmarx used for?
1 Comment
AS
Checkmarx is an ultimate tool for Static code scan and analysis through code vulnerability testing, SCA and secret detections. They have a prebuilt engine to...Read more
Which testing method does Checkmarx support?
1 Comment
SS
Checkmarx does support all these testing methodologies -Sast, Dast, IAST, SCA Read more
Does the above pricing include all vulnerabilities sources?
1 Comment
Official Response from Mend.io
Yes. WhiteSource offering includes the full extent of our database, which supports over 200 programming languages. We aggregate vulnerabilities from the NVD,...Read more
What languages and platforms does your solution support?
1 Comment
Official Response from Mend.io
WhiteSource supports more than 20 programming languages like Java, C++, .NET, PHP, python and more.Read more
Why are you pricing per contributing developers?
1 Comment
Official Response from Mend.io
WhiteSource automates and manages open source components throughout the Software Development Life Cycle (SDLC). Therefore, pricing based on the number of...Read more
