--- title: Checkmarx Reviews meta\_title: 'Checkmarx Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 48 reviews by the users' company size, role or industry to find out how Checkmarx works for a business like yours. aggregate\_rating: rating\_value: 4.2 review\_count: 48 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Checkmarx Reviews & Product Details Visit Website Checkmarx is a type of application security solution designed to help organizations safeguard their software development processes while enhancing efficiency and reducing costs. The Checkmarx One platform stands out in the realm of enterprise-grade security, offering comprehensive protection that addresses the complexities of modern software development, including legacy systems and AI-generated code. By scanning trillions of lines of code annually, Checkmarx enables companies to significantly lower their vulnerability density, ensuring a robust defense against potential threats. The platform is particularly beneficial for software development teams, security professionals, and organizations that prioritize secure coding practices. With the increasing reliance on AI technologies and the rapid pace of software development, Checkmarx One provides essential tools to mitigate risks associated with both traditional and emerging programming languages. Its innovative architecture, powered by autonomous security agents and AI-native intelligence, allows organizations to integrate security seamlessly into their development workflows, thereby accelerating development velocity without compromising on safety. Key features of Checkmarx One include Triage Assist, which employs an autonomous AI agent to prioritize vulnerabilities based on real-world exploitability and contextual risk. This feature empowers teams to concentrate their efforts on the most critical issues rather than getting bogged down by static severity scores. Additionally, Remediation Assist generates review-ready fixes for validated vulnerabilities prior to code merges, streamlining the secure delivery process and minimizing the manual overhead typically associated with remediation tasks. Developer Assist is another notable feature, acting as a standalone security agent that identifies risks during the coding process. By providing safe, explainable, and verified fixes directly within the integrated development environment (IDE), it supports developers in maintaining a stable and rapid development pace. Furthermore, the platform includes AI Supply Chain Security, which offers centralized governance and visibility for AI components embedded in applications, ensuring that hidden AI assets are discovered and managed effectively. Lastly, Checkmarx One incorporates advanced analysis engines such as AI SAST and DAST for AI, which enhance security measures across various environments. The AI SAST feature expands detection capabilities to cover emerging and unsupported programming languages, while the DAST for AI strengthens runtime protection in continuous integration and deployment (CI/CD) settings. Together, these features position Checkmarx One as a comprehensive solution for organizations looking to fortify their software development lifecycle against evolving threats. * * * Product Website Checkmarx Seller [Checkmarx](https://www.g2.com/sellers/checkmarx) Discussions [Checkmarx Community](https://www.g2.com/products/checkmarx/discuss) Solution Type All-in-One Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months [ View More Pricing Information ](https://www.g2.com/products/checkmarx/pricing) Checkmarx Solutions (1) See how Checkmarx products can work together to solve real problems. [ ![Solution Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Solution Avatar Image") Build secure code faster SolutionBy Checkmarx ](/sellers/checkmarx/solutions/build-secure-code-faster) Show More ## Checkmarx Integrations (6) What do users say about integrations? Verified by Checkmarx [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") AWS Lambda ](https://www.g2.com/products/aws-lambda/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Pipelines ](https://www.g2.com/products/azure-pipelines/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") GitHub ](https://www.g2.com/products/github/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") GitLab ](https://www.g2.com/products/gitlab/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Jenkins ](https://www.g2.com/products/jenkins/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") TeamCity ](https://www.g2.com/products/teamcity/reviews) Show More ![Ján J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ján J.") JJ Ján J. SQA Engineer Enterprise (\> 1000 emp.) 12/10/2025 "Great Automation and UI, But Needs Better Kotlin Support" 3.5/5 What do you like best about Checkmarx? Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability descriptions with a hints where in code and how to fix. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there were no such issues in more popular languages like Java or Javascript. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Helps to catch a new security vulnerabilities at each code commit and forces developers to fix them before pushing to production code. Review collected by and hosted on G2.com. Show More Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise.G2 IconCurrent UserValidated ReviewerIncentivizedSource: G2 invite ![uday n.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "uday n.") UN uday n. System Engineer Mid-Market (51-1000 emp.) 6/24/2026 "Seamlessly Integrates Security Into the Development Lifecycle" 5/5 What do you like best about Checkmarx? its ability to integrate security directly into software development life cycle Review collected by and hosted on G2.com. What do you dislike about Checkmarx? deeper security analysis can sometimes increase scan duration Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? helps catch security issues early in development Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-13002744/official_response/edit) Thanks Uday, in addition to the SDLC we recently announced general availability of Checkmarx AI Inventory, a new capability that gives continuous visibility into the AI components running in applications, (like models, agents, MCP servers, AI libraries, and SDKs.) From that inventory, it generates an AI-BOM (AI Bill of Materials): the policy controls and audit-ready documentation for every AI component it discovers. Thanks for your review! [See how Checkmarx improved](https://checkmarx.com/press-releases/checkmarx-delivers-complete-ai-asset-visibility-governance-software-supply-chain-closing-shadow-ai-gap/) Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services Small-Business (50 or fewer emp.) 5/30/2026 "Proactive Security and Smooth Cross-Team Collaboration" 4/5 What do you like best about Checkmarx? Its proactive approach to security.. I like how it enables you to collaborate with other teams. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? the only concern I had initially was the complexity the platform has a steep learning curve. and the Cost Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Protects customers data, and lowered remediation cost. Review collected by and hosted on G2.com. Show More Response from Shane McLaughlin of Checkmarx [Editedit](https://www.g2.com/survey_responses/checkmarx-review-12894827/official_response/edit) Thank you for your review! We recognize that both platform complexity and cost can be concerns. That’s why our recent innovations are focused on making AppSec simpler, more efficient, and more cost-effective. Our AI-powered Triage Assist and Remediation Assist agents will help automate tasks that traditionally take hours, reducing the learning curve and accelerating remediation directly within developer workflows. Combined with our new hybrid scanning architecture—which has already demonstrated a 60–70% reduction in false positives—these advancements help teams spend less time on manual validation, reduce operational overhead, and ultimately lower the overall cost of securing applications. Happy to chat more, and thanks again for your review! [See how Checkmarx improved](https://checkmarx.com/product/triage-and-remediation/) Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Retail](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Retail") AR Verified User in Retail Enterprise (\> 1000 emp.) 12/16/2024 "Brilliant Code to Cloud Application" 4.5/5 What do you like best about Checkmarx? Is so user friendly and it is very easy to become familiar with all the numerous features. Although I wasn't around for the implementation, I've found that it is relatively straightforward to integrate further functionality. The Scanning tools (IaC, SAST, SCA, API etc.) are all excellent and provide us with all the staus and visibility that we require. If we ever have issues that can't be resolved the Customer Support team at Checkmarx always are there to help us out. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? The dahsboards layour and display could be improved. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarx is being used mainly for the scanning and checking of code before it makes the journey to the Cloud (AWS). We are using it to look at all the languages and frameworks that we have in our Tech/Data Stack that are incorporated into our IT Landscape. One of the main benefits is that it allows our developers to identify, detect and remediate vulnerabilities at source. It also allows them to edit queries easily and quickly. Review collected by and hosted on G2.com. Show More Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise.G2 IconCurrent UserValidated ReviewerIncentivizedSource: G2 Gives Campaign ![Abhineet S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Abhineet S.") AS Abhineet S. DevSecOps Engineer II Mid-Market (51-1000 emp.) 1/12/2024 "Best in class SAST solution in the market" 5/5 What do you like best about Checkmarx? I like the SAST-ification thing in overall, it is having all offering varies from source code scans to sca, to license scanning and does a great job finding vulnerabilities. It is easy to use and visually easy to look around for the bugs. Similarly very optimized so that we can integrate with the CI/CD pipelines Review collected by and hosted on G2.com. What do you dislike about Checkmarx? The cost acquiring in all of the modules is pretty high. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Solving major bugs right from the code by applying shift left approach in an easier way. Review collected by and hosted on G2.com. Show More Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise.G2 Icon 9/10/2024 Validated ReviewerIncentivizedSource: G2 invite TM Tharindu M. Mid-Market (51-1000 emp.) 8/10/2023 "Good Tool with good interfaces and edveloper friendly environment" 4/5 What do you like best about Checkmarx? UI implementations are really good (Data Flow Matrixes) suggestions are provided for the most suitable place to fix a set of vulnerabilities. Most of the integrations are working seamlessly Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Support service is getting delayed sometimes Some of the findings tend to be false positives Scanning time is slow when compared with other tools. Some of the IDE integrations aren't working as intended. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarks provided a lot of visibility to our development cycles. It has the capability to scan the entire GitHub or scan a specific branch. Using the Checkmarks tool we were able to stop major vulnerabilities appears in production. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") UC Verified User in Computer & Network Security Mid-Market (51-1000 emp.) 11/2/2023 "A good alternative in a fierceful market" 4.5/5 What do you like best about Checkmarx? Integration with CI/CD is pretty fetatureful. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? High number of false positives unless you carefully tailor it to each project. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Automatic CI/CD SAST testing before each new feature or release. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![sanjay s.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "sanjay s.") SS sanjay s. Security Analyst Small-Business (50 or fewer emp.) 7/22/2022 "Checkmarx Review" 3.5/5 What do you like best about Checkmarx? Checkmarx Tool Scans the code pretty well. Gives accurate results in-depth analysis can be done because checkmarx provides Flow of code from source till the values getting executed Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Checkmarx reports false positives issues a lot. If it's a big application code base it's tough to control the number of false positive issues to analyse.Reporting can also be improved Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Checkmarx tool has Library scanning as well. It gives accurate results in reporting Vulnerable libraries. Accuracy has been spot on when it comes to reporting Library issues Review collected by and hosted on G2.com. Show More 1/3/2023 Validated ReviewerIncentivizedSource: G2 invite ![Pankaj W.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Pankaj W.") PW Pankaj W. Specialist - Information Security Enterprise (\> 1000 emp.) 4/19/2022 "Best tool for Source code scanning" 5/5 What do you like best about Checkmarx? The most valuable features are the easy to understand interface, and it 's very user-friendly. Reduce the code using cxsast plugin. It will scan code line by line and find most of vulnerabilities. Very easy to use. Vulnerability report is awesome. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? UI should update. Reduce the false positive. Please upgrade rules set to avoid the false positive. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? It will find the vulnerabilities like SQL injection, cross site scripting, command injection, Xxe etc vulnerabilities. Scan speed is very good. We can review the issue easily. Review collected by and hosted on G2.com. Show More 9/12/2023 Validated ReviewerIncentivizedSource: G2 invite ![Sujeet S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sujeet S.") SS Sujeet S. Technology Lead Mid-Market (51-1000 emp.) 6/25/2021 "Impressed with the Codebashing platform and AppSec awareness" 4.5/5 What do you like best about Checkmarx? Checkmarx has an impressive Codebashing feature that has the edge over SonarQube. The application tracking-reporting feature is good too. I like the "delta-scan" feature as it is really good for cases when there are very frequent scans needed (e.g. with every major code commit, we don't want the entire source code scan to happen again). Having used both tools extensively (SonarQube and Checkmarx), I prefer Checkmarx overall. Checkmarx also fares better compared to peers when it comes to finding any vulnerabilities within the database. Since ours is a user-information driven applicaiton, it becomes even more imminent to identify the data-specfic vulnerabilities at the earliest. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Dashboarding could be better. The UI to show the current issue and the descriptive/suggestive text for the potential fix could be more "obvious" to the end-users. SonarQube scores over checkmarx in this regard. Also, dashboarding could provide a little more flexibility towards the creation of new widgets. One ore thing that I disliked about Checkmarx is that I could not find a free version in the market. Even for making an initial comparison, I had to contact the sales rep (the sales rep were pretty quick to respond, though). Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: Check your organization's needs. Checkmarx is comparitively expensive, and there is no free edition to try out first, as far as I know. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Static code analysis helps identify AppSec related issues at the earliest. Also, integration with the CICD pipeline ensures quality gating. Ours is new product development in the earlier stages, and checkmarx is truly helping us by providing the developers and early insight into what could be done "right" from the beginning and instill a culture of finding issues at the earlier stage of development. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ## Questions about Checkmarx? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Checkmarx ](https://www.g2.com/products/checkmarx/discussions/new) GU Guest User • Last activity about 2 years ago What is Checkmarx used for? 1 Upvote 1 [ Join the conversation ](https://www.g2.com/discussions/checkmarx-what-is-checkmarx-used-for) GU Guest User • Last activity over 3 years ago Which testing method does Checkmarx support? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/which-testing-method-does-checkmarx-support) [ View all Discussions ](https://www.g2.com/products/checkmarx/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 11 months ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/checkmarx/pricing) ## How much does Checkmarx cost? Data powered by [BetterCloud](https://www.bettercloud.com). Estimated Price ### $$k - $$k Per Year Based on data from 5 purchases. Get Price Estimate Checkmarx Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_a4dc620644f85fd7e4f00b0a2267d09c/sonarqube.png "Product Avatar Image") SonarQube 4.4/5(155) [ Compare Now ](https://www.g2.com/compare/checkmarx-vs-sonarqube) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_eba7b910de9a9aac0b4f1b82545d0832/black-duck-coverity-static.jpg "Product Avatar Image") Black Duck Coverity Static 4.3/5(65) [ Compare Now ](https://www.g2.com/compare/black-duck-coverity-static-vs-checkmarx) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1690e90d3b34e5682247349555a8ab59/opentext-core-application-security.jpeg "Product Avatar Image") OpenText Core Application... 4.1/5(34) [ Compare Now ](https://www.g2.com/compare/checkmarx-vs-opentext-core-application-security) ##### ##### Checkmarx Features Analysis Static Code Analysis [ View More Features ](https://www.g2.com/products/checkmarx/features) ## Top-Rated Alternatives [ ![Veracode Application Security Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Veracode Application Security Platform") Veracode Application Security Platform 3.8/5(26) ](https://www.g2.com/products/veracode-application-security-platform/reviews) [ ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube") SonarQube 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) [ ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab") GitLab 4.5/5(901) ](https://www.g2.com/products/gitlab/reviews) [ View All Alternatives ](https://www.g2.com/products/checkmarx/competitors/alternatives) ##### Categories on G2 [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast) [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Interactive Application Security Testing (IAST)](https://www.g2.com/categories/interactive-application-security-testing-iast) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Which grant management solutions provide the easiest deployment and fastest time to value for enterprise implementations?](https://www.g2.com/discussions/which-grant-management-solutions-provide-the-easiest-deployment-and-fastest-time-to-value-for-enterprise-implementations)[What's the top sales engagement tool for my team](https://www.g2.com/discussions/what-s-the-top-sales-engagement-tool-for-my-team)[Which newsroom management platforms provide a centralized place to manage communications workflows and newsroom operations?](https://www.g2.com/discussions/which-newsroom-management-platforms-provide-a-centralized-place-to-manage-communications-workflows-and-newsroom-operations) [PR Firms in Austin](https://www.g2.com/categories/pr-firms/locations/austin-tx-us)[Best partner management system for increasing revenue](https://www.g2.com/discussions/best-partner-management-system-for-increasing-revenue)[Pros and Cons Details](https://www.g2.com/products/checkmarx/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)