--- title: Checkmarx Reviews meta_title: 'Checkmarx Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 48 reviews by the users' company size, role or industry to find out how Checkmarx works for a business like yours. aggregate_rating: rating_value: 4.2 review_count: 48 scale: '5' date_modified: '2026-08-09' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Checkmarx Reviews **Vendor:** Checkmarx **Category:** [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast) **Average Rating:** 4.2/5.0 **Total Reviews:** 48 ## About Checkmarx Checkmarx is a type of application security solution designed to help organizations safeguard their software development processes while enhancing efficiency and reducing costs. The Checkmarx One platform stands out in the realm of enterprise-grade security, offering comprehensive protection that addresses the complexities of modern software development, including legacy systems and AI-generated code. By scanning trillions of lines of code annually, Checkmarx enables companies to significantly lower their vulnerability density, ensuring a robust defense against potential threats. The platform is particularly beneficial for software development teams, security professionals, and organizations that prioritize secure coding practices. With the increasing reliance on AI technologies and the rapid pace of software development, Checkmarx One provides essential tools to mitigate risks associated with both traditional and emerging programming languages. Its innovative architecture, powered by autonomous security agents and AI-native intelligence, allows organizations to integrate security seamlessly into their development workflows, thereby accelerating development velocity without compromising on safety. Key features of Checkmarx One include Triage Assist, which employs an autonomous AI agent to prioritize vulnerabilities based on real-world exploitability and contextual risk. This feature empowers teams to concentrate their efforts on the most critical issues rather than getting bogged down by static severity scores. Additionally, Remediation Assist generates review-ready fixes for validated vulnerabilities prior to code merges, streamlining the secure delivery process and minimizing the manual overhead typically associated with remediation tasks. Developer Assist is another notable feature, acting as a standalone security agent that identifies risks during the coding process. By providing safe, explainable, and verified fixes directly within the integrated development environment (IDE), it supports developers in maintaining a stable and rapid development pace. Furthermore, the platform includes AI Supply Chain Security, which offers centralized governance and visibility for AI components embedded in applications, ensuring that hidden AI assets are discovered and managed effectively. Lastly, Checkmarx One incorporates advanced analysis engines such as AI SAST and DAST for AI, which enhance security measures across various environments. The AI SAST feature expands detection capabilities to cover emerging and unsupported programming languages, while the DAST for AI strengthens runtime protection in continuous integration and deployment (CI/CD) settings. Together, these features position Checkmarx One as a comprehensive solution for organizations looking to fortify their software development lifecycle against evolving threats. ## Checkmarx Pros & Cons **What users like:** - Users find Checkmarx **easy to implement** , seamlessly integrating into existing repositories with a user-friendly interface. (2 reviews) - Users appreciate the **intuitive user interface** of Checkmarx, making security reviews simple and user-friendly. (2 reviews) - Users value the **accuracy of results** from Checkmarx, as it simplifies security reviews with detailed vulnerability insights. (1 reviews) - Users value the **automation testing capabilities** of Checkmarx, finding it easy to integrate and use effectively. (1 reviews) - Users praise the **exceptional customer support** at Checkmarx, ensuring prompt assistance for any unresolved issues. (1 reviews) - Dashboard Usability (1 reviews) - Deployment (1 reviews) - Users find Checkmarx to be **very easy to use** , quickly familiarizing themselves with its numerous features and functionalities. (1 reviews) - Users find **easy integrations** with Checkmarx enhance functionality, making it simple to utilize its many features. (1 reviews) - Easy Setup (1 reviews) **What users dislike:** - Users face a high number of **false positives** in Checkmarx when working with Kotlin projects, affecting accuracy and reliability. (1 reviews) - Users report **lacking feature support** for Kotlin, leading to numerous false positives not seen in Java or JavaScript. (1 reviews) - Users experience **missing features** in Checkmarx, specifically regarding poor support for Kotlin that leads to false positives. (1 reviews) - Users find the **poor navigation** in Checkmarx frustrating, as the dashboard layout and display need enhancement. (1 reviews) ## Checkmarx Reviews ### 1. Great Automation and UI, But Needs Better Kotlin Support **Rating:** 3.5/5.0 stars **Reviewed by:** Ján J. | SQA Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** December 10, 2025 **What do you like best about Checkmarx?** Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability descriptions with a hints where in code and how to fix. **What do you dislike about Checkmarx?** Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there were no such issues in more popular languages like Java or Javascript. **What problems is Checkmarx solving and how is that benefiting you?** Helps to catch a new security vulnerabilities at each code commit and forces developers to fix them before pushing to production code. ### 2. Brilliant Code to Cloud Application **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Retail | Enterprise (> 1000 emp.) **Reviewed Date:** December 16, 2024 **What do you like best about Checkmarx?** Is so user friendly and it is very easy to become familiar with all the numerous features. Although I wasn't around for the implementation, I've found that it is relatively straightforward to integrate further functionality. The Scanning tools (IaC, SAST, SCA, API etc.) are all excellent and provide us with all the staus and visibility that we require. If we ever have issues that can't be resolved the Customer Support team at Checkmarx always are there to help us out. **What do you dislike about Checkmarx?** The dahsboards layour and display could be improved. **What problems is Checkmarx solving and how is that benefiting you?** Checkmarx is being used mainly for the scanning and checking of code before it makes the journey to the Cloud (AWS). We are using it to look at all the languages and frameworks that we have in our Tech/Data Stack that are incorporated into our IT Landscape. One of the main benefits is that it allows our developers to identify, detect and remediate vulnerabilities at source. It also allows them to edit queries easily and quickly. ## Checkmarx Discussions - [What is Checkmarx used for?](https://www.g2.com/discussions/checkmarx-what-is-checkmarx-used-for) - 1 comment, 1 upvote - [Which testing method does Checkmarx support?](https://www.g2.com/discussions/which-testing-method-does-checkmarx-support) - 1 comment - [Does Checkmarx support DAST?](https://www.g2.com/discussions/does-checkmarx-support-dast) - 1 comment - [What is Checkmarx used for?](https://www.g2.com/discussions/what-is-checkmarx-used-for) - 2 comments - [View Checkmarx pricing details and edition comparison](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1987244&qs=pros-and-cons§ion=pricing&secure%5Bexpires_at%5D=2026-08-14+13%3A30%3A57+-0500&secure%5Bsession_id%5D=482f5acb-21bf-4a16-940e-bee3011bdb84&secure%5Btoken%5D=6be0e0cb35c341a6e3dae7829754cce15c2e55cc502f314cbc023c16ee003330&format=llm_user) ## Checkmarx Integrations - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews) - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Jenkins](https://www.g2.com/products/jenkins/reviews) - [TeamCity](https://www.g2.com/products/teamcity/reviews) ## Checkmarx Features **Additional Functionality** - Tagging - Natural Language Processing - Data Extraction - Multi-Language - Predictive Analytics - Drag & Drop - Speech Recognition - Reporting/Analytics - Data Storage Management - Virtual Personal Assistant (VPA) - AI Copilot - Customer Segmentation - Collaboration Tools - Data Import/Export - Generative AI - For eCommerce - Role-Based Permissions - Customizable Branding - Search/Filter - Monitoring - Document Management - API - Data Visualization - Trend Analysis - Machine Learning - Access Controls/Permissions - Alerts/Escalation - Performance Metrics - Real-Time Data - Third-Party Integrations - Mobile App - Multiple Data Sources - For Sales Teams/Organizations - Sentiment Analysis - Activity Dashboard - Chatbot - Workflow Automation **Additional Functionality** - Code Generation - Text to Image - Generative AI - API - Natural Language Processing - Virtual Characters and Avatars - Content Generation - Personalization and Recommendation - Conditional Generation - Transformer Model - Automated Image & Video Editing - Interactive and Co-Creative Systems - Text Summarization - Data Augmentation - Variation Autoencoder Models - Adversarial Training - Transfer Learning and Fine-tuning - Simulation and Scenario Generation - Creative Design - AI Copilot - Prompt Engineering - Foundation Model **Administration** - API / Integrations - Extensibility **Administration** - API / Integrations - Extensibility **Documentation** - Feedback - Prioritization - Remediation Suggestions **Agentic AI - Static Code Analysis** - Adaptive Learning - Natural Language Interaction - Proactive Assistance **Performance - AI AppSec Assistants** - Remediation - Real-time Vulnerability Detection - Accuracy **Analysis** - Real-Time Analytics - Issue Tracking - Static Code Analysis - Code Analysis - Integrated Development Environment **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Vulnerability Scan - Code Analysis **Security** - False Positives - Custom Compliance - Agility **Integration - AI AppSec Assistants** - Stack Integration - Workflow Integration - Codebase Contextual Awareness **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Source-Code Scanning - Detection Rate - False Positives - Multi-Language Scanning **Testing** - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Agentic AI - Interactive Application Security Testing (IAST)** - Autonomous Task Execution **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution **Additional Functionality** - Debugging - Generative AI - AI Copilot - For Developers - Deployment Management - Application Security - Dashboard ## Top Checkmarx Alternatives - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - 3.8/5.0 (25 reviews) - [SonarQube](https://www.g2.com/products/sonarqube/reviews) - 4.4/5.0 (153 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (885 reviews)