--- title: Checkmarx Reviews meta\_title: 'Checkmarx Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 48 reviews by the users' company size, role or industry to find out how Checkmarx works for a business like yours. aggregate\_rating: rating\_value: 4.2 review\_count: 48 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops ---

# Checkmarx Reviews & Product Details

Visit Website

Checkmarx is a type of application security solution designed to help organizations safeguard their software development processes while enhancing efficiency and reducing costs. The Checkmarx One platform stands out in the realm of enterprise-grade security, offering comprehensive protection that addresses the complexities of modern software development, including legacy systems and AI-generated code. By scanning trillions of lines of code annually, Checkmarx enables companies to significantly lower their vulnerability density, ensuring a robust defense against potential threats. The platform is particularly beneficial for software development teams, security professionals, and organizations that prioritize secure coding practices. With the increasing reliance on AI technologies and the rapid pace of software development, Checkmarx One provides essential tools to mitigate risks associated with both traditional and emerging programming languages. Its innovative architecture, powered by autonomous security agents and AI-native intelligence, allows organizations to integrate security seamlessly into their development workflows, thereby accelerating development velocity without compromising on safety. Key features of Checkmarx One include Triage Assist, which employs an autonomous AI agent to prioritize vulnerabilities based on real-world exploitability and contextual risk. This feature empowers teams to concentrate their efforts on the most critical issues rather than getting bogged down by static severity scores. Additionally, Remediation Assist generates review-ready fixes for validated vulnerabilities prior to code merges, streamlining the secure delivery process and minimizing the manual overhead typically associated with remediation tasks. Developer Assist is another notable feature, acting as a standalone security agent that identifies risks during the coding process. By providing safe, explainable, and verified fixes directly within the integrated development environment (IDE), it supports developers in maintaining a stable and rapid development pace. Furthermore, the platform includes AI Supply Chain Security, which offers centralized governance and visibility for AI components embedded in applications, ensuring that hidden AI assets are discovered and managed effectively. Lastly, Checkmarx One incorporates advanced analysis engines such as AI SAST and DAST for AI, which enhance security measures across various environments. The AI SAST feature expands detection capabilities to cover emerging and unsupported programming languages, while the DAST for AI strengthens runtime protection in continuous integration and deployment (CI/CD) settings. Together, these features position Checkmarx One as a comprehensive solution for organizations looking to fortify their software development lifecycle against evolving threats.

* * *

Product Website
 Checkmarx
Seller
 [Checkmarx](https://www.g2.com/sellers/checkmarx)
Discussions
 [Checkmarx Community](https://www.g2.com/products/checkmarx/discuss)
Solution Type
 
All-in-One

Show More

## Value at a Glance

Averages based on real user reviews.

### Time to Implement

2 months

[
View More Pricing Information
](https://www.g2.com/products/checkmarx/pricing)

Checkmarx Solutions
(1)

See how Checkmarx products can work together to solve real problems.

[
 ![Solution Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Solution Avatar Image")
 

Build secure code faster

SolutionBy Checkmarx

](/sellers/checkmarx/solutions/build-secure-code-faster)

Show More

## Checkmarx Integrations
(6)

What do users say about integrations?

Verified by Checkmarx

[

 ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image")

AWS Lambda

](https://www.g2.com/products/aws-lambda/reviews)[

 ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image")

Azure Pipelines

](https://www.g2.com/products/azure-pipelines/reviews)[

 ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image")

GitHub

](https://www.g2.com/products/github/reviews)[

 ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image")

GitLab

](https://www.g2.com/products/gitlab/reviews)[

 ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image")

Jenkins

](https://www.g2.com/products/jenkins/reviews)[

 ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image")

TeamCity

](https://www.g2.com/products/teamcity/reviews)

Show More

  

NT

Naushad T.

Lead Technical Specialist - EDR

Information Technology and Services

Enterprise (\> 1000 emp.)

7/9/2026

"Checkmarx: Reliable SAST Solution for Strengthening Application Security"

4/5

What do you like best about Checkmarx?

I had a positive experience using Checkmarx as part of our application security process. What I appreciated most was how it helped us identify security vulnerabilities early in the development lifecycle, so teams could address issues before they reached production. The interface is fairly friendly once you're familiar with it, and the scan reports provide enough detail for developers and security teams to understand the root cause and recommended remediation. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

The initial setup and policy configuration come with a learning phase, especially for teams that are new to application security testing. In addition, full scans can take a while on large or complex projects, which can slow down development pipelines. Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Checkmarx has helped us standardize our secure code review process by delivering consistent vulnerability analysis across multiple projects. Its integration with our CI/CD pipeline lets us run automated security scans as part of the build process, so developers get timely feedback without interrupting their day-to-day workflow. Overall, Checkmarx has strengthened our security posture and continues to support our DevSecOps initiatives. Review collected by and hosted on G2.com.

Show More

Response from Shane McLaughlin of Checkmarx

[Editedit](https://www.g2.com/survey_responses/checkmarx-review-13085824/official_response/edit)

Thanks Naushad for your review. Glad to hear you are identifying vulnerabilities early in the life cycle. Our research has found that the cost to fix one if it is missed through the stages (through IDE, CI/DC, supply chain, and run time) can multiply as much as 10 times in each stage. To your issues with setup and speed, these are two areas we are working on. Our latest Risk Orchestration feature centralizes scanning results in a more user-friendly way, and our just released hybrid NG-SAST security scanning engine achieved an F1 score of 0.64 – more than three times the 0.20 average across competing approaches that Checkmarx evaluated.

Thank you for your review, and I invite you to learn more!

[See how Checkmarx improved](https://checkmarx.com/press-releases/checkmarx-one-achieves-industrys-highest-scanning-fidelity-outperforming-both-legacy-tools-and-ai-models/)

Validated ReviewerIncentivizedSource: G2 invite

  

 ![Amshu P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Amshu P.")
AP

Amshu P.

Discord Testers

Small-Business (50 or fewer emp.)

5/27/2026

"Powerful for Security, But Needs UI Improvements"

4/5

What do you like best about Checkmarx?

I like Checkmarx for its security testing at the application level. It's practical even though it wasn't really easy to use at first. I appreciate its security capabilities, easy navigation, and the reporting which works pretty well. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

It was really tough for me to use initially, felt kinda confusing but got used to it as I started working with it. UI could be better. Scans take a lot of time and I used to get false positives, which required so much energy ugh. I stopped using it because the cost was too high for my boss and he stopped paying for it. Tough, it took like, days for the team to properly set it up. Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Checkmarx helps with scanning code and addressing security issues, offering good security testing capabilities with easy navigation and solid reporting for our team. Review collected by and hosted on G2.com.

Show More

Response from Shane McLaughlin of Checkmarx

[Editedit](https://www.g2.com/survey_responses/checkmarx-review-12877943/official_response/edit)

Amshu, sorry you stopped using Checkmarx due to cost, it would be great to explore this further so you can get the maximum benefit of our platform.

Also with regards to usability, one area where Checkmarx has made significant investments is Risk Orchestration within Checkmarx One ASPM, which provides a single, unified view of findings across SAST, SCA, IaC, APIs, containers, secrets, cloud, and third-party tools. By correlating and prioritizing risks based on exploitability, reachability, and business impact, teams spend less time navigating multiple dashboards and manually triaging findings.

This approach reduces alert noise, eliminates redundant triage, and gives developers actionable remediation guidance directly within their existing workflows, helping make application security easier to adopt, faster to manage, and more cost-effective at scale.

Again, thanks for your review, and we would appreciate the chance to find out how we can make our experience a better investment for you. Reach out any time!

[See how Checkmarx improved](https://checkmarx.com/product/aspm/)

Validated ReviewerIncentivizedSource: G2 invite

  

 ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking")
AB

Verified User in Banking

Enterprise (\> 1000 emp.)

5/26/2026

"Practical Security Testing for Development Teams"

4/5

What do you like best about Checkmarx?

What I like most about Checkmarx is that it helps us think about security earlier in the development process instead of discovering issues later when they are more difficult to fix. It has made conversations between the security and development teams much more productive and efficient. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

One area where Checkmarx could improve is the amount of effort sometimes needed to review and prioritize findings, especially in larger projects. While the information is useful, it can take time to determine which issues should be addressed first. Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Checkmarx helps us identify security concerns while applications are still being developed, rather than finding them after deployment. This has helped our team address issues earlier, reduce rework, and build more secure applications with greater confidence. Review collected by and hosted on G2.com.

Show More

Response from Shane McLaughlin of Checkmarx

[Editedit](https://www.g2.com/survey_responses/checkmarx-review-12870334/official_response/edit)

We appreciate your review!

Prioritization of findings in the enterprise is definitely something we have improved. I recently talked to two customers who pointed out that our Risk Orchestration in Checkmarx One ASPM can help with this.

RO pulls in findings across areas like SAST, SCA, IaC, API security, secrets, containers, DAST, plus third-party signals, and then creates a unified risk score/view so teams can focus on what matters most. Please reach out and we will demo it for you, checkmarx.com/product/aspm

[See how Checkmarx improved](https://checkmarx.com/product/aspm/)

6/21/2026
Validated ReviewerIncentivizedSource: G2 invite

  

 ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software")
EC

Verified User in Computer Software

Small-Business (50 or fewer emp.)

7/9/2026

"Strong Integrations and Support, but Pricing Is a Challenge for LatAm Startups"

3.5/5

What do you like best about Checkmarx?

For us the most importante is the number of integrations that it has, sometimes de price is a little bit hi because we are startup that is based in Latam. The support also is good, and the performance UI and UX algo good. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

During the pilot test of this technology it works correct, we are evaluating due pricing because our geography Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Right now we are using a lot of agenting development, so it works for us correctly making some integrations with agentic coding. The AI that use is really good for this evaluation and integration Review collected by and hosted on G2.com.

Show More

Response from Shane McLaughlin of Checkmarx

[Editedit](https://www.g2.com/survey_responses/checkmarx-review-13084902/official_response/edit)

Thanks for your review! We understand that pricing is an important consideration for growing startups, especially in LATAM, and appreciate your input as you evaluate the platform.

I invite you to consider agentic capabilities like Developer Assist, Triage Assist, and Remediation Assist to reduce manual work, prioritize real risk, and deliver contextual fixes faster. Checkmarx also saves our customers money with a hybrid AI approach that avoids relying only on expensive large LLM calls. That helps reduce token consumption and cost at scale while maintaining high-confidence results. Our goal is to help teams adopt AI coding securely, efficiently, and economically.

We would be happy to talk more, and we thank you for taking the time to tell us what you think.

[See how Checkmarx improved](https://checkmarx.com/product/triage-and-remediation/)

Validated ReviewerIncentivizedSource: G2 invite

  

 ![Tadele L.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Tadele L.")
TL

Tadele L.

Senior IS Audit Officer 

Enterprise (\> 1000 emp.)

5/26/2026

"Essential for Secure Development, Accurate and Efficient"

4/5

What do you like best about Checkmarx?

I like Checkmarx for its accurate vulnerability detection, easy CI/CD integration, and detailed remediation guidance that helps developers fix security issues quickly. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

Checkmarx could improve scan performance for large projects, reduce false positives, and provide a more user-friendly interface for easier navigation and reporting. Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Checkmarx helps us identify and fix application security vulnerabilities early in the development lifecycle, improve secure coding practices, and automate security testing within CI/CD pipelines. Review collected by and hosted on G2.com.

Show More

Response from Shane McLaughlin of Checkmarx

[Editedit](https://www.g2.com/survey_responses/checkmarx-review-12871303/official_response/edit)

Tadele, thank you for the feedback! We've made significant investments to address these areas. Our new hybrid scanning engine combines deterministic analysis with AI-powered reasoning to deliver higher-quality results, achieving the industry's highest scanning fidelity while reducing false positives by 60%. This helps developers spend less time validating findings and more time remediating real risks.

To improve usability and reporting, Checkmarx One ASPM now includes Risk Orchestration, which provides a single, unified view of findings across security tools, reduces alert noise, and prioritizes risks based on real exploitability and business impact. This simplifies navigation, streamlines reporting, and enables faster, more efficient triage and remediation workflows.

Together, these innovations are designed to improve scan efficiency, reduce noise, and create a more intuitive experience for both developers and security teams.

We hope you check them out, and we would be happy to discuss more. Thank you for your review!

[See how Checkmarx improved](https://checkmarx.com/press-releases/checkmarx-one-achieves-industrys-highest-scanning-fidelity-outperforming-both-legacy-tools-and-ai-models/)

Validated ReviewerIncentivizedSource: G2 invite

  

 ![Verified User in Program Development](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Program Development")
AP

Verified User in Program Development

Small-Business (50 or fewer emp.)

5/30/2026

"Seamless Developer Workflow Integration for Real-Time Vulnerability Fixes"

4/5

What do you like best about Checkmarx?

Checkmarx integrates directly into the developer workflow. By providing plugins for popular IDEs, CI/CD pipelines, and source code management (SCM) platforms, it allows developers to catch and fix vulnerabilities in real time without context-switching Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

Running the application can strain local servers, and I note that the system requires substantial RAM and processing power to perform efficiently. Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Checkmarx solves the critical problem of vulnerabilities slipping into production code, which directly benefits me by reducing security risks and saving development time. Review collected by and hosted on G2.com.

Show More

Response from Shane McLaughlin of Checkmarx

[Editedit](https://www.g2.com/survey_responses/checkmarx-review-12890086/official_response/edit)

We understand concerns around infrastructure requirements and performance. As part of our ongoing platform innovation, Checkmarx has introduced products designed to improve efficiency and deliver better higher-fidelity results. Recent F1 score findings and third party recognition support this evolution, but we would love to hear more from you to know how we can continue to improve for you. Thank you again, and please reach out any time!

[See how Checkmarx improved](https://checkmarx.com/press-releases/)

Validated ReviewerIncentivizedSource: G2 invite

  

 ![Ján J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ján J.")
JJ

Ján J.

SQA Engineer

Enterprise (\> 1000 emp.)

12/10/2025

"Great Automation and UI, But Needs Better Kotlin Support"

3.5/5

What do you like best about Checkmarx?

Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability descriptions with a hints where in code and how to fix. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there were no such issues in more popular languages like Java or Javascript. Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Helps to catch a new security vulnerabilities at each code commit and forces developers to fix them before pushing to production code. Review collected by and hosted on G2.com.

Show More

Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise. G2 IconCurrent UserValidated ReviewerIncentivizedSource: G2 invite

  

 ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services")
UI

Verified User in Information Technology and Services

Small-Business (50 or fewer emp.)

5/30/2026

"Proactive Security and Smooth Cross-Team Collaboration"

4/5

What do you like best about Checkmarx?

Its proactive approach to security.. I like how it enables you to collaborate with other teams. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

the only concern I had initially was the complexity the platform has a steep learning curve. and the Cost Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Protects customers data, and lowered remediation cost. Review collected by and hosted on G2.com.

Show More

Response from Shane McLaughlin of Checkmarx

[Editedit](https://www.g2.com/survey_responses/checkmarx-review-12894827/official_response/edit)

Thank you for your review!

We recognize that both platform complexity and cost can be concerns. That’s why our recent innovations are focused on making AppSec simpler, more efficient, and more cost-effective.

Our AI-powered Triage Assist and Remediation Assist agents will help automate tasks that traditionally take hours, reducing the learning curve and accelerating remediation directly within developer workflows.

Combined with our new hybrid scanning architecture—which has already demonstrated a 60–70% reduction in false positives—these advancements help teams spend less time on manual validation, reduce operational overhead, and ultimately lower the overall cost of securing applications.

Happy to chat more, and thanks again for your review!

[See how Checkmarx improved](https://checkmarx.com/product/triage-and-remediation/)

Validated ReviewerIncentivizedSource: G2 invite

  

TM

Tharindu M.

Mid-Market (51-1000 emp.)

8/10/2023

"Good Tool with good interfaces and edveloper friendly environment"

4/5

What do you like best about Checkmarx?

UI implementations are really good (Data Flow Matrixes)

suggestions are provided for the most suitable place to fix a set of vulnerabilities.

Most of the integrations are working seamlessly Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

Support service is getting delayed sometimes

Some of the findings tend to be false positives

Scanning time is slow when compared with other tools.

Some of the IDE integrations aren't working as intended. Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Checkmarks provided a lot of visibility to our development cycles. It has the capability to scan the entire GitHub or scan a specific branch. Using the Checkmarks tool we were able to stop major vulnerabilities appears in production. Review collected by and hosted on G2.com.

Show More

Validated ReviewerSource: Organic

  

 ![sanjay s.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "sanjay s.")
SS

sanjay s.

Security Analyst

Small-Business (50 or fewer emp.)

7/22/2022

"Checkmarx Review"

3.5/5

What do you like best about Checkmarx?

Checkmarx Tool Scans the code pretty well. Gives accurate results in-depth analysis can be done because checkmarx provides Flow of code from source till the values getting executed Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

Checkmarx reports false positives issues a lot. If it's a big application code base it's tough to control the number of false positive issues to analyse.Reporting can also be improved Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Checkmarx tool has Library scanning as well. It gives accurate results in reporting Vulnerable libraries. Accuracy has been spot on when it comes to reporting Library issues Review collected by and hosted on G2.com.

Show More

1/3/2023
Validated ReviewerIncentivizedSource: G2 invite

## Questions about Checkmarx? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

[
Ask about Checkmarx
](https://www.g2.com/products/checkmarx/discussions/new)

GU

Guest User
•
Last activity about 2 years ago

What is Checkmarx used for?

1 Upvote

1

[
Join the conversation
](https://www.g2.com/discussions/checkmarx-what-is-checkmarx-used-for)

GU

Guest User
•
Last activity over 3 years ago

Which testing method does Checkmarx support?

0 Upvotes

1

[
Join the conversation
](https://www.g2.com/discussions/which-testing-method-does-checkmarx-support)

[
View all Discussions
](https://www.g2.com/products/checkmarx/discuss)

## Pricing Insights

Averages based on real user reviews.

### Time to Implement

2 months

### Return on Investment

11 months

### Perceived Cost

$$$$$

[
View More Pricing Information
](https://www.g2.com/products/checkmarx/pricing)

## How much does Checkmarx cost?

Data powered by [BetterCloud](https://www.bettercloud.com).

Estimated Price

### $$k - $$k

Per Year

Based on data from 5 purchases.

Get Price Estimate

Checkmarx Comparisons

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_a4dc620644f85fd7e4f00b0a2267d09c/sonarqube.png "Product Avatar Image")

SonarQube

4.4/5(155)

[
Compare Now
](https://www.g2.com/compare/checkmarx-vs-sonarqube)

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_eba7b910de9a9aac0b4f1b82545d0832/black-duck-coverity-static.jpg "Product Avatar Image")

Black Duck Coverity Static

4.3/5(65)

[
Compare Now
](https://www.g2.com/compare/black-duck-coverity-static-vs-checkmarx)

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1690e90d3b34e5682247349555a8ab59/opentext-core-application-security.jpeg "Product Avatar Image")

OpenText Core Application...

4.1/5(34)

[
Compare Now
](https://www.g2.com/compare/checkmarx-vs-opentext-core-application-security)

##### ##### Checkmarx Features

Analysis

Static Code Analysis

[
View More Features
](https://www.g2.com/products/checkmarx/features)

## Top-Rated Alternatives

[

 ![Veracode Application Security Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Veracode Application Security Platform")

Veracode Application Security Platform

3.8/5(26)

](https://www.g2.com/products/veracode-application-security-platform/reviews)

[

 ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube")

SonarQube

4.4/5(155)

](https://www.g2.com/products/sonarqube/reviews)

[

 ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab")

GitLab

4.5/5(901)

](https://www.g2.com/products/gitlab/reviews)

[
View All Alternatives
](https://www.g2.com/products/checkmarx/competitors/alternatives)

##### Categories on G2

[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast)

[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Interactive Application Security Testing (IAST)](https://www.g2.com/categories/interactive-application-security-testing-iast)

[Show MoreShow Less](javascript:void(0);)

##### Explore More

[Best online registration tools for workshops](https://www.g2.com/discussions/best-remote-management-software-for-tech-startups)[What are the most trusted field sales software by sales managers at retail based on user reviews?](https://www.g2.com/discussions/what-are-the-most-trusted-field-sales-software-by-sales-managers-at-retail-based-on-user-reviews)[Is ENPS worth it for newsroom management?](https://www.g2.com/discussions/is-enps-worth-it-for-newsroom-management)

[Which enterprise asset leasing solutions have the strongest IFRS 16 and ASC 842 compliance tools for a finance team that cannot afford errors in lease accounting?](https://www.g2.com/discussions/which-enterprise-asset-leasing-solutions-have-the-strongest-ifrs-16-and-asc-842-compliance-tools-for-a-finance-team-that-cannot-afford-errors-in-lease-accounting)[Which cloud workload protection tools give security teams clean dashboards and compliance monitoring in one view rather than forcing them to switch between tools?](https://www.g2.com/discussions/which-cloud-workload-protection-tools-give-security-teams-clean-dashboards-and-compliance-monitoring-in-one-view-rather-than-forcing-them-to-switch-between-tools%20)[Pros and Cons Details](https://www.g2.com/products/checkmarx/reviews?qs=pros-and-cons)

[Show MoreShow Less](javascript:void(0);)