--- title: Checkmarx Reviews meta\_title: 'Checkmarx Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 48 reviews by the users' company size, role or industry to find out how Checkmarx works for a business like yours. aggregate\_rating: rating\_value: 4.2 review\_count: 48 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Checkmarx Reviews & Product Details Visit Website Checkmarx is a type of application security solution designed to help organizations safeguard their software development processes while enhancing efficiency and reducing costs. The Checkmarx One platform stands out in the realm of enterprise-grade security, offering comprehensive protection that addresses the complexities of modern software development, including legacy systems and AI-generated code. By scanning trillions of lines of code annually, Checkmarx enables companies to significantly lower their vulnerability density, ensuring a robust defense against potential threats. The platform is particularly beneficial for software development teams, security professionals, and organizations that prioritize secure coding practices. With the increasing reliance on AI technologies and the rapid pace of software development, Checkmarx One provides essential tools to mitigate risks associated with both traditional and emerging programming languages. Its innovative architecture, powered by autonomous security agents and AI-native intelligence, allows organizations to integrate security seamlessly into their development workflows, thereby accelerating development velocity without compromising on safety. Key features of Checkmarx One include Triage Assist, which employs an autonomous AI agent to prioritize vulnerabilities based on real-world exploitability and contextual risk. This feature empowers teams to concentrate their efforts on the most critical issues rather than getting bogged down by static severity scores. Additionally, Remediation Assist generates review-ready fixes for validated vulnerabilities prior to code merges, streamlining the secure delivery process and minimizing the manual overhead typically associated with remediation tasks. Developer Assist is another notable feature, acting as a standalone security agent that identifies risks during the coding process. By providing safe, explainable, and verified fixes directly within the integrated development environment (IDE), it supports developers in maintaining a stable and rapid development pace. Furthermore, the platform includes AI Supply Chain Security, which offers centralized governance and visibility for AI components embedded in applications, ensuring that hidden AI assets are discovered and managed effectively. Lastly, Checkmarx One incorporates advanced analysis engines such as AI SAST and DAST for AI, which enhance security measures across various environments. The AI SAST feature expands detection capabilities to cover emerging and unsupported programming languages, while the DAST for AI strengthens runtime protection in continuous integration and deployment (CI/CD) settings. Together, these features position Checkmarx One as a comprehensive solution for organizations looking to fortify their software development lifecycle against evolving threats. * * * Product Website Checkmarx Seller [Checkmarx](https://www.g2.com/sellers/checkmarx) Discussions [Checkmarx Community](https://www.g2.com/products/checkmarx/discuss) Solution Type All-in-One Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months [ View More Pricing Information ](https://www.g2.com/products/checkmarx/pricing) Checkmarx Solutions (1) See how Checkmarx products can work together to solve real problems. [ ![Solution Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Solution Avatar Image") Build secure code faster SolutionBy Checkmarx ](/sellers/checkmarx/solutions/build-secure-code-faster) Show More ## Checkmarx Integrations (6) What do users say about integrations? Verified by Checkmarx [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") AWS Lambda ](https://www.g2.com/products/aws-lambda/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Azure Pipelines ](https://www.g2.com/products/azure-pipelines/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") GitHub ](https://www.g2.com/products/github/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") GitLab ](https://www.g2.com/products/gitlab/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Jenkins ](https://www.g2.com/products/jenkins/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") TeamCity ](https://www.g2.com/products/teamcity/reviews) Show More ![Verified User in Higher Education](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Higher Education") UH Verified User in Higher Education Enterprise (\> 1000 emp.) 2/10/2022 "To find any security vulnerabilities, Checkmarx is an awesome tool." 4.5/5 What do you like best about Checkmarx? Easy to scan any application to find any security threats Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Even after marking false positives, the same issue sometimes still appears as a high or critical security issue. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Security vulnerabilities scan for application. Yes, it helps to stay updated with Jars, helping to avoid being hacked. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Investment Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Investment Banking") UI Verified User in Investment Banking Enterprise (\> 1000 emp.) 10/19/2021 "Be a step ahead by identifying vulnerability using checkmarx to" 4/5 What do you like best about Checkmarx? It identifies all the security vulnerabilities making your code secure than ever before. It also categorises the vulnerability into different categories based on the risk associated. Can be easily integrated with your CI pipeline to have you code scan with every build Review collected by and hosted on G2.com. What do you dislike about Checkmarx? We can have a more better and user friendly UI to go through the report. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Identifying the vulnerability before the code goes into production so that all the risks can be mitigated and we don't have to worry about it once code gets live Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") UB Verified User in Banking Enterprise (\> 1000 emp.) 9/23/2021 "Checkmarx : Enable SAST for CI/CD Effortlessly" 4.5/5 What do you like best about Checkmarx? The best features of Checkmarx are: 1) Open Source vulnerability scanner 2) Integration with multiple Ci/CD orchestration tools 3) Real-time reporting of static code vulnerabilities Review collected by and hosted on G2.com. What do you dislike about Checkmarx? I feel the Jenkins code snippet of Checkmarx is a bit complex, and it could be a lot simpler. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? We have enabled SAST in our CI/CD pipelines using Checkmarx. It saves a lot of time as the integration of Checkmarx with our CI/CD orchestration tool achieves maximum automation and reduces the time significantly. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite HG himanshu g. Senior software engineer Mid-Market (51-1000 emp.) 8/25/2019 "An efficient application to check vulnerability in the software" 3.5/5 What do you like best about Checkmarx? CheckMarx has been used an application to scan the applications to rectify vulnerability in the code and to check the security lapses. I have been using checkMarx to check the same in my .NET application and have found checkMarx to be great use. I would like to mention few good things about the same . 1.) It has support to many languages . In my case it can find the lapses in C#, Java script, J query , Typescript . 2.) The description is quite clear about the issues which makes it easier to understand the problem statement behind the security lapse. 3.) The online community present for CheckMarx is quite good which makes it easier to find the resolution Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Even though CheckMarx is quite helpful to check the security threats in the application code there are few things which can be improved by the CheckMarx team to make it more useful and efficient . 1.) There are many false positives which increase a lot of issues which in turn are required to marked as non exploitable 2.) Per user cost of CheckMarx subscription is high which makes it difficult for the small organisation to own it completely. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: Use it to refactor the code of your application and re mediate the security lapses Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? I have been using CheckMarx in my organisation to find the code related issues in the .NET application. This has helped in a great way to re mediate the security lapses and refactor the code to make it more efficient. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services Enterprise (\> 1000 emp.) 6/27/2019 "Good and very useful sast tool" 4.5/5 What do you like best about Checkmarx? The report generated by this tool is comprehensive and easy to understand It has good charts Review collected by and hosted on G2.com. What do you dislike about Checkmarx? The report some times have false positives and duplication Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Performing security testing using this tool Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Roman P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Roman P.") RP Roman P. Software Security Consultant Information Technology and Services Enterprise (\> 1000 emp.) 1/29/2019 "The lightest and most complete static analysis tool with best place to fix" 5/5 What do you like best about Checkmarx? ease of deployment. Number of supported languages and best place to fix function. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Too much detail in the report for small security shops. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: Filter the final report by severity and concentrate on the most important issues first. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Fixed code flaws before deployment. Dramatically decreased rework and refactoring. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") UF Verified User in Financial Services Enterprise (\> 1000 emp.) 9/30/2018 Business partner of the seller or seller's competitor, not included in G2 scores. "Great for finding overlooked or unthought of issues" 4/5 What do you like best about Checkmarx? I like the way that the checkmarx report provides a detailed account of al potential vulnerabilities and then provides examples of how the issue can be fixed. This is very helpful when it comes to trying to resolve all issues. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? As with anything automated, some issues that are found are just non-issues. We use several different security gating products like Checkmarx and I would say that it is less often incorrect than the others. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: It is a good way to catch potential vulnerabilities in your code. With a large code base and many contributors this can be next to impossible if you rely on manual methods (ie. code review). Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? We are making our application more secure and staying in the know about new threats and vulnerabilities. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") UB Verified User in Banking Enterprise (\> 1000 emp.) 10/23/2018 "Great application for Software security" 4.5/5 What do you like best about Checkmarx? Results are pretty good with CheckMarx. This tool is helpful to build secure source code. CheckMarx scan report gives detailed view of each issue and flowchart is given for the variables which might cause security threat. Code scanning is fast. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Sometimes reports generated by the CheckMarx scan contain lot of false positive issues even though code is designed in a way that ensures security. This decreases the readability of the reports. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: Great tool designed for security scan. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Sotware application is tested using CheckMarx. Benefits: 1. Secure code development and best coding practices 2. Possible vulnerabilities and threats identification to assure software quality 3. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Hatim B.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Hatim B.") HB Hatim B. IT Architect & Project manager Enterprise (\> 1000 emp.) 12/27/2017 "A useful SAST tool to improve maturity in IT security" 4.5/5 What do you like best about Checkmarx? Our choice of Checkmarx as a static code audit tool was done after a long reflection. the richness in terms of languages and the customization of the presets were determinents. We were accompanied at first by a very competent editor team. Today, the use of the tool is unavoidable. We use it both as an integrated tool in our IDEs but also when building in our continuous integration platform. He is also at the hand of the security team to audit code delivered by an external service provider. We also appreciate the possibility of modifying but also creating new rules to eliminate false positives. The tool is also rich in terms of indicators and charts. it provides a dashboard that makes it easy to track application risk level scores over time and provides management with comprehensive reports. the details of the vulnerabilities detected and the description of the corrections allows the development teams to correct the vulnerabilities but also to learn about the security of the coding. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? At each audit, the number of false positives is high. but this is a defect specific to SAST tools. knowledge of the business specificities of the application is necessary to personalize the presets to eliminate false positives. This tool is a step in the security audit process, it must be completed by DAST and IAST audits. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: we highly recommend this tool. We have already recommended the tool at our group level. The cost-effectiveness ratio is interesting. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? we use this tool in a bank-insurance information system. Business requirements are high. Checkmarx has helped us improve the maturity of our IT security in order to gain the confidence of our business. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite VC vidya vignan c. Mid-Market (51-1000 emp.) 8/30/2018 "We use it for checking the test cases" 4.5/5 What do you like best about Checkmarx? Automation has been much more easier with the checkmarx Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Even if 1 test fails it shows the everything as failed Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Automation is the main purpose of our use. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ## Questions about Checkmarx? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Checkmarx ](https://www.g2.com/products/checkmarx/discussions/new) GU Guest User • Last activity about 2 years ago What is Checkmarx used for? 1 Upvote 1 [ Join the conversation ](https://www.g2.com/discussions/checkmarx-what-is-checkmarx-used-for) GU Guest User • Last activity over 3 years ago Which testing method does Checkmarx support? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/which-testing-method-does-checkmarx-support) [ View all Discussions ](https://www.g2.com/products/checkmarx/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 11 months ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/checkmarx/pricing) ## How much does Checkmarx cost? Data powered by [BetterCloud](https://www.bettercloud.com). Estimated Price ### $$k - $$k Per Year Based on data from 5 purchases. Get Price Estimate Checkmarx Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_a4dc620644f85fd7e4f00b0a2267d09c/sonarqube.png "Product Avatar Image") SonarQube 4.4/5(155) [ Compare Now ](https://www.g2.com/compare/checkmarx-vs-sonarqube) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_eba7b910de9a9aac0b4f1b82545d0832/black-duck-coverity-static.jpg "Product Avatar Image") Black Duck Coverity Static 4.3/5(65) [ Compare Now ](https://www.g2.com/compare/black-duck-coverity-static-vs-checkmarx) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1690e90d3b34e5682247349555a8ab59/opentext-core-application-security.jpeg "Product Avatar Image") OpenText Core Application... 4.1/5(34) [ Compare Now ](https://www.g2.com/compare/checkmarx-vs-opentext-core-application-security) ##### ##### Checkmarx Features Analysis Static Code Analysis [ View More Features ](https://www.g2.com/products/checkmarx/features) ## Top-Rated Alternatives [ ![Veracode Application Security Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Veracode Application Security Platform") Veracode Application Security Platform 3.8/5(26) ](https://www.g2.com/products/veracode-application-security-platform/reviews) [ ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube") SonarQube 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) [ ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab") GitLab 4.5/5(901) ](https://www.g2.com/products/gitlab/reviews) [ View All Alternatives ](https://www.g2.com/products/checkmarx/competitors/alternatives) ##### Categories on G2 [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast) [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Interactive Application Security Testing (IAST)](https://www.g2.com/categories/interactive-application-security-testing-iast) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Which grant management solutions provide the easiest deployment and fastest time to value for enterprise implementations?](https://www.g2.com/discussions/which-grant-management-solutions-provide-the-easiest-deployment-and-fastest-time-to-value-for-enterprise-implementations)[What's the top sales engagement tool for my team](https://www.g2.com/discussions/what-s-the-top-sales-engagement-tool-for-my-team)[Which newsroom management platforms provide a centralized place to manage communications workflows and newsroom operations?](https://www.g2.com/discussions/which-newsroom-management-platforms-provide-a-centralized-place-to-manage-communications-workflows-and-newsroom-operations) [PR Firms in Austin](https://www.g2.com/categories/pr-firms/locations/austin-tx-us)[Best partner management system for increasing revenue](https://www.g2.com/discussions/best-partner-management-system-for-increasing-revenue)[Pros and Cons Details](https://www.g2.com/products/checkmarx/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)