# Checkmarx vs Veracode Application Security Platform Comparison

---
## Frequently Asked Questions

### What is the difference between Checkmarx vs Veracode Application...?

Checkmarx stands out for higher reviewer satisfaction and ease of setup compared to Veracode Application Security Platform.

| [Checkmarx](https://www.g2.com/products/checkmarx/reviews) | [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) |
| --- | --- |
| 4.2/5 (48 reviews) | 3.8/5 (26 reviews) |
| — | — |
| 8.1 | 6.3 |
| 8.3 | 8.0 |
| Implementation Ease | Security |



### How do the pricing models of Checkmarx and Veracode Application... compare?

Checkmarx reviewers report higher satisfaction with value compared to Veracode Application Security Platform.

- **Checkmarx:** In recent reviews, several reviewers mention that the price is high, especially for startups and small organizations, but appreciate the breadth of features and integrations.
- **Veracode Application Security Platform:** Recent reviewers describe the licensing model as overly complex and note that costs have increased over time, with some finding the investment in customer success packages hard to justify.
- **Switching reasons:** Reviewers cite cost and licensing complexity as reasons for evaluating alternatives.



### What are the best alternatives to Checkmarx and Veracode Application...?

The top three alternatives to Checkmarx and Veracode Application Security Platform are SonarQube, Snyk, and GitLab.

| Product | G2 Rating (reviews) | Largest Segment | Pricing Insight | Top Reviewer-Cited Strength |
| --- | --- | --- | --- | --- |
| [Checkmarx](https://www.g2.com/products/checkmarx/reviews) | 4.2/5 (48 reviews) | — | High price noted for startups and small orgs | Implementation Ease |
| [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) | 3.8/5 (26 reviews) | — | Licensing model described as complex and costly | Security |
| [SonarQube](https://www.g2.com/products/sonarqube/reviews) | 4.4/5 (155 reviews) | Enterprise | — | Code quality and vulnerability detection |
| [Snyk](https://www.g2.com/products/snyk/reviews) | 4.5/5 (135 reviews) | Mid-Market | — | Open source security and developer-friendly tools |
| [GitLab](https://www.g2.com/products/gitlab/reviews) | 4.5/5 (901 reviews) | Small-Business | — | Integrated DevOps and CI/CD capabilities |



### Which Static Application Security Testing (SAST) features should I prioritize when comparing Checkmarx and Veracode Application...?

Buyers should prioritize vulnerability detection accuracy, ease of integration, false positive management, reporting quality, and support responsiveness when comparing Checkmarx and Veracode Application Security Platform.

- **Vulnerability Detection Accuracy:** Checkmarx (1 all-time mention), Veracode Application Security Platform (2 all-time mentions).
- **Ease of Integration:** Checkmarx (1 all-time mention), Veracode Application Security Platform (2 all-time mentions).
- **False Positive Management:** Checkmarx (1 all-time mention), Veracode Application Security Platform (1 all-time mention).
- **Reporting Quality:** Checkmarx (1 all-time mention), Veracode Application Security Platform (2 all-time mentions).
- **Support Responsiveness:** Checkmarx (1 all-time mention), Veracode Application Security Platform (2 all-time mentions).



### What are the pros and cons of Checkmarx vs Veracode Application...?

Checkmarx's headline strength is implementation ease, while Veracode Application Security Platform is most recognized for its security capabilities.

- **Checkmarx strengths:** Implementation ease (2 all-time mentions), user interface (2), automation testing (1), dashboard usability (1), easy integrations (1), vulnerability detection (1).
- **Checkmarx trade-offs:** False positives (1 all-time mention), lacking features (1), poor navigation (1), high price for small organizations (recent reviews).
- **Veracode Application Security Platform strengths:** Security (5 all-time mentions), vulnerability detection (5), automated scanning (3), ease of use (3), integration support (2), reporting quality (2).
- **Veracode Application Security Platform trade-offs:** Expensive (2 all-time mentions), licensing issues (2), poor customer support (2), complex interface (recent reviews).



### Is Checkmarx or Veracode Application... better for small businesses?

GitLab is the top-ranked alternative with the strongest small-business fit, but between Checkmarx and Veracode Application Security Platform, neither has a dominant small-business segment share.

- **Checkmarx:** No dominant small-business segment; reviewers note high price as a barrier for startups and small organizations.
- **Veracode Application Security Platform:** No dominant small-business segment; reviewers mention complex licensing and cost as challenges for smaller teams.



### Which Static Application Security Testing (SAST) platform has better integrations?

Checkmarx reviewers favor it for integrations, citing more integration options in recent reviews.

- **Checkmarx:** Jenkins (2 all-time mentions), GitHub (recent reviews), integrations highlighted as a strength in recent feedback.
- **Veracode Application Security Platform:** Visual Studio (1 all-time mention), integration support noted in recent reviews.



### How do Checkmarx and Veracode Application... compare on customer support?

Checkmarx and Veracode Application Security Platform score within 0.3 points on Quality of Support, indicating near parity.

- **Checkmarx:** Reviewers describe support as generally responsive and helpful, with some noting delays or less satisfactory experiences.
- **Veracode Application Security Platform:** Reviewers mention proactive support and helpfulness, but also cite occasional dissatisfaction and challenges with customer success packages.



### Which is easier to implement, Checkmarx or Veracode Application...?

Checkmarx scores 1.8 points higher than Veracode Application Security Platform on Ease of Setup, indicating easier implementation.

- **Checkmarx:** Reviewers highlight straightforward setup, easy integration with CI/CD pipelines, and intuitive onboarding, though some mention a learning curve for new teams.
- **Veracode Application Security Platform:** Reviewers describe implementation as more complex, with some finding the interface confusing and setup requiring more effort.



### Which product has better False Positives?

Checkmarx and Veracode Application Security Platform both receive reviewer feedback about false positives, with Checkmarx having more frequent mentions in recent reviews.

- **Checkmarx:** False positives cited as a recurring issue (1 all-time mention), with reviewers noting the need for manual triage and tuning to reduce noise.
- **Veracode Application Security Platform:** False positives mentioned in recent reviews, with some reviewers describing mitigation as less straightforward and requiring admin intervention.



| | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Star Rating** | 4.2 out of 5 | 3.8 out of 5 | 
| **Total Reviews** | 49 | 26 | 

---
## Top Pros & Cons

### Checkmarx

Pros:
- Implementation Ease (2 reviews)
- User Interface (2 reviews)

Cons:
- False Positives (1 reviews)
- Lacking Features (1 reviews)

### Veracode Application Security Platform

Pros:
- Security (5 reviews)
- Vulnerability Detection (5 reviews)

Cons:
- Expensive (2 reviews)
- Lack of Information (2 reviews)

---
## Ratings Comparison
| Rating | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
  | **Meets Requirements** | 8.6 (37 reviews) | 8.1 (19 reviews) | 
  | **Ease of Use** | 8.5 (37 reviews) | 7.3 (20 reviews) | 
  | **Ease of Setup** | 8.2 (23 reviews) | 6.3 (8 reviews) | 
  | **Ease of Admin** | 8.3 (17 reviews) | 7.4 (7 reviews) | 
  | **Quality of Support** | 8.4 (31 reviews) | 8.0 (18 reviews) | 
  | **Has the product been a good partner in doing business?** | 8.6 (16 reviews) | 7.9 (7 reviews) | 
  | **Product Direction (% positive)** | 8.2 (32 reviews) | 6.3 (19 reviews) | 

---
## Pricing

### Checkmarx

#### Entry-Level Pricing

Plan: SAST 

Price: Contact Us 100 Per contributing developer

Key Features:
- Fusion  
- API Security  
- IaC Security  

[Learn more about Checkmarx](https://www.g2.com/products/checkmarx/reviews)

#### Free Trial

Yes

### Veracode Application Security Platform

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

---
## Features Comparison By Category

### Artificial Intelligence

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Additional Functionality

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Tagging** | Not enough data | Not enough data | 
| **Natural Language Processing** | Not enough data | Not enough data | 
| **Data Extraction** | Not enough data | Not enough data | 
| **Multi-Language** | Not enough data | Not enough data | 
| **Predictive Analytics** | Not enough data | Not enough data | 
| **Drag & Drop** | Not enough data | Not enough data | 
| **Speech Recognition** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 
| **Data Storage Management** | Not enough data | Not enough data | 
| **Virtual Personal Assistant (VPA)** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Customer Segmentation** | Not enough data | Not enough data | 
| **Collaboration Tools** | Not enough data | Not enough data | 
| **Data Import/Export** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **For eCommerce** | Not enough data | Not enough data | 
| **Role-Based Permissions** | Not enough data | Not enough data | 
| **Customizable Branding** | Not enough data | Not enough data | 
| **Search/Filter** | Not enough data | Not enough data | 
| **Monitoring** | Not enough data | Not enough data | 
| **Document Management** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Data Visualization** | Not enough data | Not enough data | 
| **Trend Analysis** | Not enough data | Not enough data | 
| **Machine Learning** | Not enough data | Not enough data | 
| **Access Controls/Permissions** | Not enough data | Not enough data | 
| **Alerts/Escalation** | Not enough data | Not enough data | 
| **Performance Metrics** | Not enough data | Not enough data | 
| **Real-Time Data** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 
| **Mobile App** | Not enough data | Not enough data | 
| **Multiple Data Sources** | Not enough data | Not enough data | 
| **For Sales Teams/Organizations** | Not enough data | Not enough data | 
| **Sentiment Analysis** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **Chatbot** | Not enough data | Not enough data | 
| **Workflow Automation** | Not enough data | Not enough data | 

### Generative AI

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Additional Functionality

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Code Generation** | Not enough data | Not enough data | 
| **Text to Image** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Natural Language Processing** | Not enough data | Not enough data | 
| **Virtual Characters and Avatars** | Not enough data | Not enough data | 
| **Content Generation** | Not enough data | Not enough data | 
| **Personalization and Recommendation** | Not enough data | Not enough data | 
| **Conditional Generation** | Not enough data | Not enough data | 
| **Transformer Model** | Not enough data | Not enough data | 
| **Automated Image & Video Editing** | Not enough data | Not enough data | 
| **Interactive and Co-Creative Systems** | Not enough data | Not enough data | 
| **Text Summarization** | Not enough data | Not enough data | 
| **Data Augmentation** | Not enough data | Not enough data | 
| **Variation Autoencoder Models** | Not enough data | Not enough data | 
| **Adversarial Training** | Not enough data | Not enough data | 
| **Transfer Learning and Fine-tuning** | Not enough data | Not enough data | 
| **Simulation and Scenario Generation** | Not enough data | Not enough data | 
| **Creative Design** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Prompt Engineering** | Not enough data | Not enough data | 
| **Foundation Model** | Not enough data | Not enough data | 

### Penetration Testing

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Administration

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **API** | Not enough data | Not enough data | 
| **Extensibility** | Not enough data | Not enough data | 
| **Reporting and Analytics** | Not enough data | Not enough data | 

#### Analysis

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Issue Tracking** | Not enough data | Not enough data | 
| **Reconnaissance** | Not enough data | Not enough data | 
| **Vulnerability Scan** | Not enough data | Not enough data | 
| **Compliance Management** | Not enough data | Not enough data | 
| **Automatic Scans** | Not enough data | Not enough data | 
| **SPA Scans** | Not enough data | Not enough data | 

#### Testing

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Command-Line Tools** | Not enough data | Not enough data | 
| **Manual Testing** | Not enough data | Not enough data | 
| **Test Automation** | Not enough data | Not enough data | 
| **Performance and Reliability** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Network Mapping** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **SQL Injections** | Not enough data | Not enough data | 
| **Audit Management** | Not enough data | Not enough data | 
| **Threat Intelligence** | Not enough data | Not enough data | 
| **Assignment Management** | Not enough data | Not enough data | 
| **Integration Management** | Not enough data | Not enough data | 
| **User Management** | Not enough data | Not enough data | 
| **Asset Discovery** | Not enough data | Not enough data | 
| **Remediation Management** | Not enough data | Not enough data | 
| **Vulnerability Scanning** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **Multi-User Collaboration** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Web-Application Security** | Not enough data | Not enough data | 
| **Vulnerability Assessment** | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 
| **Runtime Container Security** | Not enough data | Not enough data | 
| **Network Scanning** | Not enough data | Not enough data | 
| **Password Cracking** | Not enough data | Not enough data | 
| **Simulated Threat Attacks** | Not enough data | Not enough data | 
| **Certificates** | Not enough data | Not enough data | 
| **Alerts/Notifications** | Not enough data | Not enough data | 
| **Real-Time Data** | Not enough data | Not enough data | 
| **Cross-Site Scripting** | Not enough data | Not enough data | 
| **Exploit Frameworks** | Not enough data | Not enough data | 

### Static Application Security Testing (SAST)

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | 8.5/10 | 15 |
| **Veracode Application Security Platform** | N/A | N/A |

#### Administration

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **API / Integrations** | 9.0 (8 reviews) | Not enough data | 
| **Extensibility** | 8.6 (7 reviews) | Not enough data | 

#### Analysis

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Real-Time Analytics** | 9.0 (10 reviews) | Not enough data | 
| **Issue Tracking** | 8.5 (9 reviews) | Not enough data | 
| **Static Code Analysis** | 8.9 (11 reviews) | Not enough data | 
| **Code Analysis** | 9.1 (9 reviews) | Not enough data | 
| **Integrated Development Environment** | Not enough data | Not enough data | 

#### Testing

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Command-Line Tools** | 8.3 (7 reviews) | Not enough data | 
| **Manual Testing** | 8.1 (7 reviews) | Not enough data | 
| **Test Automation** | 8.9 (6 reviews) | Not enough data | 
| **Compliance Testing** | 8.9 (6 reviews) | Not enough data | 
| **Source-Code Scanning** | Not enough data | Not enough data | 
| **Detection Rate** | 8.6 (7 reviews) | Not enough data | 
| **False Positives** | 6.1 (9 reviews) | Not enough data | 
| **Multi-Language Scanning** | Not enough data | Not enough data | 

#### Agentic AI - Static Application Security Testing (SAST)

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Debugging** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **For Developers** | Not enough data | Not enough data | 
| **Deployment Management** | Not enough data | Not enough data | 
| **Application Security** | Not enough data | Not enough data | 
| **Dashboard** | Not enough data | Not enough data | 

### Dynamic Application Security Testing (DAST)

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | 8.5/10 | 8 |

#### Administration

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **API / Integrations** | Not enough data | 7.9 (7 reviews) | 
| **Extensibility** | Not enough data | 9.2 (6 reviews) | 

#### Analysis

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Reporting and Analytics** | Not enough data | 8.3 (7 reviews) | 
| **Issue Tracking** | Not enough data | 8.3 (5 reviews) | 
| **Static Code Analysis** | Not enough data | 9.3 (7 reviews) | 
| **Vulnerability Scan** | Not enough data | 9.0 (8 reviews) | 
| **Code Analysis** | Not enough data | 8.6 (6 reviews) | 

#### Testing

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Manual Testing** | Not enough data | Not enough data | 
| **Test Automation** | Not enough data | 9.0 (5 reviews) | 
| **Compliance Testing** | Not enough data | Not enough data | 
| **Black-Box Scanning** | Not enough data | 8.3 (5 reviews) | 
| **Detection Rate** | Not enough data | 8.0 (5 reviews) | 
| **False Positives** | Not enough data | 7.8 (6 reviews) | 

### Vulnerability Scanner

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Performance

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Issue Tracking** | Not enough data | Not enough data | 
| **Detection Rate** | Not enough data | Not enough data | 
| **False Positives** | Not enough data | Not enough data | 
| **Automated Scans** | Not enough data | Not enough data | 
| **Anomaly/Malware Detection** | Not enough data | Not enough data | 

#### Network

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Compliance Testing** | Not enough data | Not enough data | 
| **Perimeter Scanning** | Not enough data | Not enough data | 
| **Configuration Monitoring** | Not enough data | Not enough data | 
| **Vulnerability Scanning** | Not enough data | Not enough data | 
| **Source-Code Scanning** | Not enough data | Not enough data | 
| **Web Scanning** | Not enough data | Not enough data | 

#### Application

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Manual Application Testing** | Not enough data | Not enough data | 
| **Static Code Analysis** | Not enough data | Not enough data | 
| **Black Box Testing** | Not enough data | Not enough data | 
| **Risk Analysis** | Not enough data | Not enough data | 

#### Agentic AI - Vulnerability Scanner

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **SSL Security** | Not enough data | Not enough data | 
| **HIPAA Compliant** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Threat Response** | Not enough data | Not enough data | 
| **Endpoint Protection** | Not enough data | Not enough data | 
| **Maintenance Scheduling** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 
| **Application Security** | Not enough data | Not enough data | 
| **Encryption** | Not enough data | Not enough data | 
| **Network Security** | Not enough data | Not enough data | 
| **Real-Time Reporting** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 
| **Authentication** | Not enough data | Not enough data | 
| **Financial Data Protection** | Not enough data | Not enough data | 
| **Anti Virus** | Not enough data | Not enough data | 
| **Secure Data Storage** | Not enough data | Not enough data | 
| **Virus Definition Update** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **VPN** | Not enough data | Not enough data | 
| **Audit Trail** | Not enough data | Not enough data | 
| **Anti Spam** | Not enough data | Not enough data | 
| **Access Controls/Permissions** | Not enough data | Not enough data | 
| **Data Visualization** | Not enough data | Not enough data | 
| **Alerts/Escalation** | Not enough data | Not enough data | 
| **Data Security** | Not enough data | Not enough data | 
| **Runtime Container Security** | Not enough data | Not enough data | 
| **Asset Discovery** | Not enough data | Not enough data | 
| **Threat Intelligence** | Not enough data | Not enough data | 
| **Vulnerability Protection** | Not enough data | Not enough data | 
| **Alerts/Notifications** | Not enough data | Not enough data | 
| **Vulnerability/Threat Prioritization** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **SQL Injections** | Not enough data | Not enough data | 
| **Real-Time Analytics** | Not enough data | Not enough data | 
| **Threat Protection** | Not enough data | Not enough data | 
| **Web-Application Security** | Not enough data | Not enough data | 
| **Password Protection** | Not enough data | Not enough data | 
| **Website Crawling** | Not enough data | Not enough data | 
| **Vulnerability Assessment** | Not enough data | Not enough data | 

### Software Composition Analysis

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Functionality - Software Composition Analysis 

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Language Support** | Not enough data | Not enough data | 
| **Integration** | Not enough data | Not enough data | 
| **Transparency** | Not enough data | Not enough data | 

#### Effectiveness - Software Composition Analysis

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Remediation Suggestions** | Not enough data | Not enough data | 
| **Continuous Monitoring** | Not enough data | Not enough data | 
| **Thorough Detection** | Not enough data | Not enough data | 

### Secure Code Review

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Documentation

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Feedback** | Not enough data | Not enough data | 
| **Prioritization** | Not enough data | Not enough data | 
| **Remediation Suggestions** | Not enough data | Not enough data | 

#### Security

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **False Positives** | Not enough data | Not enough data | 
| **Custom Compliance** | Not enough data | Not enough data | 
| **Agility** | Not enough data | Not enough data | 

### Software Supply Chain Security Tools

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Security

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Tampering** | Not enough data | Not enough data | 
| **Malicious Code** | Not enough data | Not enough data | 
| **Verification** | Not enough data | Not enough data | 
| **Security Risks** | Not enough data | Not enough data | 

#### Tracking

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Bill of Materials** | Not enough data | Not enough data | 
| **Audit Trails** | Not enough data | Not enough data | 
| **Monitoring** | Not enough data | Not enough data | 

### Software Bill of Materials (SBOM)

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Functionality - Software Bill of Materials (SBOM)

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Format Support** | Not enough data | Not enough data | 
| **Annotations** | Not enough data | Not enough data | 
| **Attestation** | Not enough data | Not enough data | 

#### Management - Software Bill of Materials (SBOM)

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Monitoring** | Not enough data | Not enough data | 
| **Dashboards** | Not enough data | Not enough data | 
| **User Provisioning** | Not enough data | Not enough data | 

### Static Code Analysis

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Agentic AI - Static Code Analysis

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Adaptive Learning** | Not enough data | Not enough data | 
| **Natural Language Interaction** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 

### AI AppSec Assistants

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Performance - AI AppSec Assistants

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Remediation** | Not enough data | Not enough data | 
| **Real-time Vulnerability Detection** | Not enough data | Not enough data | 
| **Accuracy** | Not enough data | Not enough data | 

#### Integration - AI AppSec Assistants

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Stack Integration** | Not enough data | Not enough data | 
| **Workflow Integration** | Not enough data | Not enough data | 
| **Codebase Contextual Awareness** | Not enough data | Not enough data | 

### Interactive Application Security Testing (IAST)

| Product | Score | Reviews |
|---|---|---|
| **Checkmarx** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Agentic AI - Interactive Application Security Testing (IAST)

| Feature | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 

---
## Categories
**Shared Categories (6):** [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Interactive Application Security Testing (IAST) Software](https://www.g2.com/categories/interactive-application-security-testing-iast)


**Unique to Veracode Application Security Platform (5):** [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom), [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools)


---
## Reviewer Demographics

### By Company Size

| Segment | Checkmarx | Veracode Application Security Platform | 
|---|---|---|
| **Small-Business** | 24.4% | 16.7% | 
| **Mid-Market** | 22.2% | 33.3% | 
| **Enterprise** | 53.3% | 50.0% | 

### By Industry

#### Checkmarx

- **Information Technology and Services:** 19.0%
- **Computer Software:** 16.7%
- **Banking:** 11.9%
- **Computer & Network Security:** 11.9%
- **Automotive:** 4.8%
- **Education Management:** 2.4%
- **Financial Services:** 2.4%
- **Food & Beverages:** 2.4%
- **Food Production:** 2.4%
- **Higher Education:** 2.4%
- **Other:** 23.8%

#### Veracode Application Security Platform

- **Information Technology and Services:** 29.2%
- **Hospital & Health Care:** 12.5%
- **Consumer Goods:** 8.3%
- **Computer Software:** 8.3%
- **Telecommunications:** 4.2%
- **Retail:** 4.2%
- **Research:** 4.2%
- **Media Production:** 4.2%
- **Logistics and Supply Chain:** 4.2%
- **Insurance:** 4.2%
- **Other:** 16.7%

---
## Alternatives

### Alternatives to Checkmarx

- [Black Duck Polaris Platform](https://www.g2.com/products/black-duck-polaris-platform/reviews) — 4.2/5 stars (104 reviews)
- [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (155 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (900 reviews)
- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2407 reviews)
- [HCL AppScan](https://www.g2.com/products/hcl-appscan/reviews) — 4.2/5 stars (105 reviews)
- [OpenText Core Application Security](https://www.g2.com/products/opentext-core-application-security/reviews) — 4.1/5 stars (34 reviews)
- [Invicti](https://www.g2.com/products/invicti/reviews) — 4.5/5 stars (72 reviews)
- [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (136 reviews)
- [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (123 reviews)
- [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (312 reviews)

### Alternatives to Veracode Application Security Platform

- [Black Duck Polaris Platform](https://www.g2.com/products/black-duck-polaris-platform/reviews) — 4.2/5 stars (104 reviews)
- [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (155 reviews)
- [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (136 reviews)
- [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (123 reviews)
- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2407 reviews)
- [Invicti](https://www.g2.com/products/invicti/reviews) — 4.5/5 stars (72 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (900 reviews)
- [HCL AppScan](https://www.g2.com/products/hcl-appscan/reviews) — 4.2/5 stars (105 reviews)
- [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (312 reviews)
- [Burp Suite](https://www.g2.com/products/burp-suite/reviews) — 4.8/5 stars (129 reviews)

---
## Top Discussions

### Checkmarx

- Title: [What is Checkmarx used for?](https://www.g2.com/discussions/what-is-checkmarx-used-for) — 2 comments
  > **Top comment:** "Checkmarx is a static code analysis tool used for SAST (Static application security testing)"
- Title: [What is Checkmarx used for?](https://www.g2.com/discussions/checkmarx-what-is-checkmarx-used-for) — 1 comment, 1 upvote
  > **Top comment:** "Checkmarx is an ultimate tool for Static code scan and analysis through code vulnerability testing, SCA and secret detections. They have a prebuilt engine to..."
- Title: [Which testing method does Checkmarx support?](https://www.g2.com/discussions/which-testing-method-does-checkmarx-support) — 1 comment
  > **Top comment:** "Checkmarx does support all these testing methodologies -Sast, Dast, IAST, SCA "
- Title: [Does Checkmarx support DAST?](https://www.g2.com/discussions/does-checkmarx-support-dast) — 1 comment
  > **Top comment:** "You cannot test DAST Testing using Checkmarx"

### Veracode Application Security Platform

No discussions available for this product.

---
**Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/checkmarx-vs-veracode-application-security-platform)