Checkmarx Pros and Cons: Top Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users value the easy implementation of Checkmarx into existing repositories, enhancing their security review processes effortlessly. (2 mentions)

Users praise the intuitive user interface of Checkmarx, making security reviews and integrations straightforward and user-friendly. (2 mentions)

Users value the accuracy of results in Checkmarx, finding it effective for automated security reviews. (1 mentions)

Users appreciate the automation testing capabilities of Checkmarx, making security reviews efficient and user-friendly. (1 mentions)

Users praise the responsive customer support of Checkmarx, consistently providing help when challenges arise. (1 mentions)

Users experience a significant number of false positives with Checkmarx, particularly for Kotlin projects, leading to frustration. (1 mentions)

Users face challenges with limited support for Kotlin, experiencing many false positives compared to other languages like Java or Javascript. (1 mentions)

Users experience missing features in Checkmarx, particularly with Kotlin support, leading to numerous false positives. (1 mentions)

Users find the navigation poor in Checkmarx, citing issues with dashboard layout and display clarity. (1 mentions)

Top Pros or Advantages of Checkmarx

1. Implementation Ease

Users value the easy implementation of Checkmarx into existing repositories, enhancing their security review processes effortlessly.

See 2 mentions

See Related User Reviews

Ján J.

Enterprise (> 1000 emp.)

3.5/5

"Great Automation and UI, But Needs Better Kotlin Support"

What do you like about Checkmarx?

Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability

Verified User

Enterprise (> 1000 emp.)

4.5/5

"Brilliant Code to Cloud Application"

What do you like about Checkmarx?

Is so user friendly and it is very easy to become familiar with all the numerous features. Although I wasn't around for the implementation, I've found

2. User Interface

Users praise the intuitive user interface of Checkmarx, making security reviews and integrations straightforward and user-friendly.

See 2 mentions

See Related User Reviews

Ján J.

Enterprise (> 1000 emp.)

3.5/5

"Great Automation and UI, But Needs Better Kotlin Support"

What do you like about Checkmarx?

Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability

Verified User

Enterprise (> 1000 emp.)

4.5/5

"Brilliant Code to Cloud Application"

What do you like about Checkmarx?

Is so user friendly and it is very easy to become familiar with all the numerous features. Although I wasn't around for the implementation, I've found

3. Accuracy of Results

Users value the accuracy of results in Checkmarx, finding it effective for automated security reviews.

See 1 mentions

See Related User Reviews

Ján J.

Enterprise (> 1000 emp.)

3.5/5

"Great Automation and UI, But Needs Better Kotlin Support"

What do you like about Checkmarx?

Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability

4. Automation Testing

Users appreciate the automation testing capabilities of Checkmarx, making security reviews efficient and user-friendly.

See 1 mentions

See Related User Reviews

Ján J.

Enterprise (> 1000 emp.)

3.5/5

"Great Automation and UI, But Needs Better Kotlin Support"

What do you like about Checkmarx?

Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability

5. Customer Support

Users praise the responsive customer support of Checkmarx, consistently providing help when challenges arise.

See 1 mentions

See Related User Reviews

Verified User

Enterprise (> 1000 emp.)

4.5/5

"Brilliant Code to Cloud Application"

What do you like about Checkmarx?

Is so user friendly and it is very easy to become familiar with all the numerous features. Although I wasn't around for the implementation, I've found

Top Cons or Disadvantages of Checkmarx

1. False Positives

Users experience a significant number of false positives with Checkmarx, particularly for Kotlin projects, leading to frustration.

See 1 mentions

See Related User Reviews

Ján J.

Enterprise (> 1000 emp.)

3.5/5

"Great Automation and UI, But Needs Better Kotlin Support"

What do you dislike about Checkmarx?

Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there

2. Lacking Features

Users face challenges with limited support for Kotlin, experiencing many false positives compared to other languages like Java or Javascript.

See 1 mentions

See Related User Reviews

Ján J.

Enterprise (> 1000 emp.)

3.5/5

"Great Automation and UI, But Needs Better Kotlin Support"

What do you dislike about Checkmarx?

Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there

3. Missing Features

Users experience missing features in Checkmarx, particularly with Kotlin support, leading to numerous false positives.

See 1 mentions

See Related User Reviews

Ján J.

Enterprise (> 1000 emp.)

3.5/5

"Great Automation and UI, But Needs Better Kotlin Support"

What do you dislike about Checkmarx?

Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there

4. Poor Navigation

Users find the navigation poor in Checkmarx, citing issues with dashboard layout and display clarity.

See 1 mentions

See Related User Reviews

Verified User

Enterprise (> 1000 emp.)

4.5/5

"Brilliant Code to Cloud Application"

What do you dislike about Checkmarx?

The dashboards layout and display could be improved.

Verified User in Program Development

Small-Business (50 or fewer emp.)

5/30/2026

"Seamless Developer Workflow Integration for Real-Time Vulnerability Fixes"

4/5

What do you like best about Checkmarx?

Checkmarx integrates directly into the developer workflow. By providing plugins for popular IDEs, CI/CD pipelines, and source code management (SCM) platforms, it allows developers to catch and fix vulnerabilities in real time without context-switching Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

Running the application can strain local servers, and I note that the system requires substantial RAM and processing power to perform efficiently. Review collected by and hosted on G2.com.

Response from Shane McLaughlin of Checkmarx

edit

We understand concerns around infrastructure requirements and performance. As part of our ongoing platform innovation, Checkmarx has introduced products designed to improve efficiency and deliver better higher-fidelity results. Recent F1 score findings and third party recognition support this evolution, but we would love to hear more from you to know how we can continue to improve for you. Thank you again, and please reach out any time!

See how Checkmarx improved

Ján J.

SQA Engineer

Enterprise (> 1000 emp.)

12/10/2025

"Great Automation and UI, But Needs Better Kotlin Support"

3.5/5

What do you like best about Checkmarx?

Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability descriptions with a hints where in code and how to fix. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there were no such issues in more popular languages like Java or Javascript. Review collected by and hosted on G2.com.

uday n.

System Engineer

Mid-Market (51-1000 emp.)

6/24/2026

"Seamlessly Integrates Security Into the Development Lifecycle"

5/5

What do you like best about Checkmarx?

its ability to integrate security directly into software development life cycle Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

deeper security analysis can sometimes increase scan duration Review collected by and hosted on G2.com.

Response from Shane McLaughlin of Checkmarx

edit

Thanks Uday, in addition to the SDLC we recently announced general availability of Checkmarx AI Inventory, a new capability that gives continuous visibility into the AI components running in applications, (like models, agents, MCP servers, AI libraries, and SDKs.) From that inventory, it generates an AI-BOM (AI Bill of Materials): the policy controls and audit-ready documentation for every AI component it discovers. Thanks for your review!

See how Checkmarx improved

Verified User in Information Technology and Services

Small-Business (50 or fewer emp.)

5/30/2026

"Proactive Security and Smooth Cross-Team Collaboration"

4/5

What do you like best about Checkmarx?

Its proactive approach to security.. I like how it enables you to collaborate with other teams. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

the only concern I had initially was the complexity the platform has a steep learning curve. and the Cost Review collected by and hosted on G2.com.

Response from Shane McLaughlin of Checkmarx

edit

Thank you for your review!

We recognize that both platform complexity and cost can be concerns. That’s why our recent innovations are focused on making AppSec simpler, more efficient, and more cost-effective.

Our AI-powered Triage Assist and Remediation Assist agents will help automate tasks that traditionally take hours, reducing the learning curve and accelerating remediation directly within developer workflows.

Combined with our new hybrid scanning architecture—which has already demonstrated a 60–70% reduction in false positives—these advancements help teams spend less time on manual validation, reduce operational overhead, and ultimately lower the overall cost of securing applications.

Happy to chat more, and thanks again for your review!

See how Checkmarx improved

Verified User in Retail

Enterprise (> 1000 emp.)

12/16/2024

"Brilliant Code to Cloud Application"

4.5/5

What do you like best about Checkmarx?

Is so user friendly and it is very easy to become familiar with all the numerous features. Although I wasn't around for the implementation, I've found that it is relatively straightforward to integrate further functionality. The Scanning tools (IaC, SAST, SCA, API etc.) are all excellent and provide us with all the status and visibility that we require. If we ever have issues that can't be resolved the Customer Support team at Checkmarx always are there to help us out. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

The dashboards layout and display could be improved. Review collected by and hosted on G2.com.

What problems is Checkmarx solving and how is that benefiting you?

Checkmarx is being used mainly for the scanning and checking of code before it makes the journey to the Cloud (AWS). We are using it to look at all the languages and frameworks that we have in our Tech/Data Stack that are incorporated into our IT Landscape. One of the main benefits is that it allows our developers to identify, detect and remediate vulnerabilities at source. It also allows them to edit queries easily and quickly. Review collected by and hosted on G2.com.

Abhineet S.

DevSecOps Engineer II

Mid-Market (51-1000 emp.)

1/12/2024

"Best in class SAST solution in the market"

5/5

What do you like best about Checkmarx?

I like the SAST-ification thing in overall, it is having all offering varies from source code scans to sca, to license scanning and does a great job finding vulnerabilities. It is easy to use and visually easy to look around for the bugs. Similarly very optimized so that we can integrate with the CI/CD pipelines Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

The cost acquiring in all of the modules is pretty high. Review collected by and hosted on G2.com.

Tharindu M.

Mid-Market (51-1000 emp.)

8/10/2023

"Good Tool with good interfaces and developer friendly environment"

4/5

What do you like best about Checkmarx?

UI implementations are really good (Data Flow Matrixes) suggestions are provided for the most suitable place to fix a set of vulnerabilities. Most of the integrations are working seamlessly Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

Support service is getting delayed sometimes Some of the findings tend to be false positives Scanning time is slow when compared with other tools. Some of the IDE integrations aren't working as intended. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Mid-Market (51-1000 emp.)

11/2/2023

"A good alternative in a fierceful market"

4.5/5

What do you like best about Checkmarx?

Integration with CI/CD is pretty fetatureful. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

High number of false positives unless you carefully tailor it to each project. Review collected by and hosted on G2.com.

sanjay s.

Security Analyst

Small-Business (50 or fewer emp.)

7/22/2022

"Checkmarx Review"

3.5/5

What do you like best about Checkmarx?

Checkmarx Tool Scans the code pretty well. Gives accurate results in-depth analysis can be done because checkmarx provides Flow of code from source till the values getting executed Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

Checkmarx reports false positives issues a lot. If it's a big application code base it's tough to control the number of false positive issues to analyse.Reporting can also be improved Review collected by and hosted on G2.com.

Pankaj W.

Specialist - Information Security

Enterprise (> 1000 emp.)

4/19/2022

"Best tool for Source code scanning"

5/5

What do you like best about Checkmarx?

The most valuable features are the easy to understand interface, and it's very user-friendly. Reduce the code using cxsast plugin. It will scan code line by line and find most of vulnerabilities. Very easy to use. Vulnerability report is awesome. Review collected by and hosted on G2.com.

What do you dislike about Checkmarx?

UI should update. Reduce the false positive. Please upgrade rules set to avoid the false positive. Review collected by and hosted on G2.com.