--- title: Checkmarx Reviews meta\_title: 'Checkmarx Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 48 reviews by the users' company size, role or industry to find out how Checkmarx works for a business like yours. aggregate\_rating: rating\_value: 4.2 review\_count: 48 scale: '5' date\_modified: '2026-08-09' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- ### Checkmarx Pros and Cons: Top Advantages and Disadvantages #### Quick AI Summary Based on G2 Reviews Generated from real user reviews Users find Checkmarx **easy to implement** , seamlessly integrating into existing repositories with a user-friendly interface. [(2 mentions)](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1987244&qs=pros-and-cons#reviews) Users appreciate the **intuitive user interface** of Checkmarx, making security reviews simple and user-friendly. [(2 mentions)](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1900133&qs=pros-and-cons#reviews) Users value the **accuracy of results** from Checkmarx, as it simplifies security reviews with detailed vulnerability insights. [(1 mentions)](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423729&qs=pros-and-cons#reviews) Users value the **automation testing capabilities** of Checkmarx, finding it easy to integrate and use effectively. [(1 mentions)](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423743&qs=pros-and-cons#reviews) Users praise the **exceptional customer support** at Checkmarx, ensuring prompt assistance for any unresolved issues. [(1 mentions)](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1987246&qs=pros-and-cons#reviews) Users face a high number of **false positives** in Checkmarx when working with Kotlin projects, affecting accuracy and reliability. [(1 mentions)](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423721&qs=pros-and-cons#reviews) Users report **lacking feature support** for Kotlin, leading to numerous false positives not seen in Java or JavaScript. [(1 mentions)](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423686&qs=pros-and-cons#reviews) Users experience **missing features** in Checkmarx, specifically regarding poor support for Kotlin that leads to false positives. [(1 mentions)](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423711&qs=pros-and-cons#reviews) Users find the **poor navigation** in Checkmarx frustrating, as the dashboard layout and display need enhancement. [(1 mentions)](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1987239&qs=pros-and-cons#reviews) ### Top Pros or Advantages of Checkmarx ##### 1. Implementation Ease Users find Checkmarx **easy to implement** , seamlessly integrating into existing repositories with a user-friendly interface. [ See 2 mentions ](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1987244&qs=pros-and-cons#reviews) See Related User Reviews ![Ján J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ján J.") JJ Ján J. Enterprise (\> 1000 emp.) 3.5/5 "Great Automation and UI, But Needs Better Kotlin Support" What do you like about Checkmarx? Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 4.5/5 "Brilliant Code to Cloud Application" What do you like about Checkmarx? Is so user friendly and it is very easy to become familiar with all the numerous features. Although I wasn't around for the implementation, I've foun ##### 2. User Interface Users appreciate the **intuitive user interface** of Checkmarx, making security reviews simple and user-friendly. [ See 2 mentions ](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1900133&qs=pros-and-cons#reviews) See Related User Reviews ![Ján J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ján J.") JJ Ján J. Enterprise (\> 1000 emp.) 3.5/5 "Great Automation and UI, But Needs Better Kotlin Support" What do you like about Checkmarx? Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 4.5/5 "Brilliant Code to Cloud Application" What do you like about Checkmarx? Is so user friendly and it is very easy to become familiar with all the numerous features. Although I wasn't around for the implementation, I've foun ##### 3. Accuracy of Results Users value the **accuracy of results** from Checkmarx, as it simplifies security reviews with detailed vulnerability insights. [ See 1 mentions ](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423729&qs=pros-and-cons#reviews) See Related User Reviews ![Ján J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ján J.") JJ Ján J. Enterprise (\> 1000 emp.) 3.5/5 "Great Automation and UI, But Needs Better Kotlin Support" What do you like about Checkmarx? Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability ##### 4. Automation Testing Users value the **automation testing capabilities** of Checkmarx, finding it easy to integrate and use effectively. [ See 1 mentions ](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423743&qs=pros-and-cons#reviews) See Related User Reviews ![Ján J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ján J.") JJ Ján J. Enterprise (\> 1000 emp.) 3.5/5 "Great Automation and UI, But Needs Better Kotlin Support" What do you like about Checkmarx? Helps to automate a security review of a codebase. Easy to implement into existing repositories. Nice intuitive user interface and good vulnerability ##### 5. Customer Support Users praise the **exceptional customer support** at Checkmarx, ensuring prompt assistance for any unresolved issues. [ See 1 mentions ](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1987246&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 4.5/5 "Brilliant Code to Cloud Application" What do you like about Checkmarx? Is so user friendly and it is very easy to become familiar with all the numerous features. Although I wasn't around for the implementation, I've foun ### Top Cons or Disadvantages of Checkmarx ##### 1. False Positives Users face a high number of **false positives** in Checkmarx when working with Kotlin projects, affecting accuracy and reliability. [ See 1 mentions ](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423721&qs=pros-and-cons#reviews) See Related User Reviews ![Ján J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ján J.") JJ Ján J. Enterprise (\> 1000 emp.) 3.5/5 "Great Automation and UI, But Needs Better Kotlin Support" What do you dislike about Checkmarx? Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there ##### 2. Lacking Features Users report **lacking feature support** for Kotlin, leading to numerous false positives not seen in Java or JavaScript. [ See 1 mentions ](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423686&qs=pros-and-cons#reviews) See Related User Reviews ![Ján J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ján J.") JJ Ján J. Enterprise (\> 1000 emp.) 3.5/5 "Great Automation and UI, But Needs Better Kotlin Support" What do you dislike about Checkmarx? Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there ##### 3. Missing Features Users experience **missing features** in Checkmarx, specifically regarding poor support for Kotlin that leads to false positives. [ See 1 mentions ](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=2423711&qs=pros-and-cons#reviews) See Related User Reviews ![Ján J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ján J.") JJ Ján J. Enterprise (\> 1000 emp.) 3.5/5 "Great Automation and UI, But Needs Better Kotlin Support" What do you dislike about Checkmarx? Unfortunately Checkmarx reported a huge number of false positives for Kotlin based projects. Probably this language is poorly supported because there ##### 4. Poor Navigation Users find the **poor navigation** in Checkmarx frustrating, as the dashboard layout and display need enhancement. [ See 1 mentions ](https://www.g2.com/products/checkmarx/reviews?filters%5Bsentiment_snippet%5D=1987239&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 4.5/5 "Brilliant Code to Cloud Application" What do you dislike about Checkmarx? The dahsboards layour and display could be improved. ![Verified User in Higher Education](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Higher Education") UH Verified User in Higher Education Enterprise (\> 1000 emp.) 2/10/2022 "To find any security vulnerabilities, Checkmarx is an awesome tool." 4.5/5 What do you like best about Checkmarx? Easy to scan any application to find any security threats Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Even after marking false positives, the same issue sometimes still appears as a high or critical security issue. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Security vulnerabilities scan for application. Yes, it helps to stay updated with Jars, helping to avoid being hacked. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Investment Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Investment Banking") UI Verified User in Investment Banking Enterprise (\> 1000 emp.) 10/19/2021 "Be a step ahead by identifying vulnerability using checkmarx to" 4/5 What do you like best about Checkmarx? It identifies all the security vulnerabilities making your code secure than ever before. It also categorises the vulnerability into different categories based on the risk associated. Can be easily integrated with your CI pipeline to have you code scan with every build Review collected by and hosted on G2.com. What do you dislike about Checkmarx? We can have a more better and user friendly UI to go through the report. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Identifying the vulnerability before the code goes into production so that all the risks can be mitigated and we don't have to worry about it once code gets live Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") UB Verified User in Banking Enterprise (\> 1000 emp.) 9/23/2021 "Checkmarx : Enable SAST for CI/CD Effortlessly" 4.5/5 What do you like best about Checkmarx? The best features of Checkmarx are: 1) Open Source vulnerability scanner 2) Integration with multiple Ci/CD orchestration tools 3) Real-time reporting of static code vulnerabilities Review collected by and hosted on G2.com. What do you dislike about Checkmarx? I feel the Jenkins code snippet of Checkmarx is a bit complex, and it could be a lot simpler. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? We have enabled SAST in our CI/CD pipelines using Checkmarx. It saves a lot of time as the integration of Checkmarx with our CI/CD orchestration tool achieves maximum automation and reduces the time significantly. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite HG himanshu g. Senior software engineer Mid-Market (51-1000 emp.) 8/25/2019 "An efficient application to check vulnerability in the software" 3.5/5 What do you like best about Checkmarx? CheckMarx has been used an application to scan the applications to rectify vulnerability in the code and to check the security lapses. I have been using checkMarx to check the same in my .NET application and have found checkMarx to be great use. I would like to mention few good things about the same . 1.) It has support to many languages . In my case it can find the lapses in C#, Java script, J query , Typescript . 2.) The description is quite clear about the issues which makes it easier to understand the problem statement behind the security lapse. 3.) The online community present for CheckMarx is quite good which makes it easier to find the resolution Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Even though CheckMarx is quite helpful to check the security threats in the application code there are few things which can be improved by the CheckMarx team to make it more useful and efficient . 1.) There are many false positives which increase a lot of issues which in turn are required to marked as non exploitable 2.) Per user cost of CheckMarx subscription is high which makes it difficult for the small organisation to own it completely. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: Use it to refactor the code of your application and re mediate the security lapses Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? I have been using CheckMarx in my organisation to find the code related issues in the .NET application. This has helped in a great way to re mediate the security lapses and refactor the code to make it more efficient. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services Enterprise (\> 1000 emp.) 6/27/2019 "Good and very useful sast tool" 4.5/5 What do you like best about Checkmarx? The report generated by this tool is comprehensive and easy to understand It has good charts Review collected by and hosted on G2.com. What do you dislike about Checkmarx? The report some times have false positives and duplication Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Performing security testing using this tool Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Roman P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Roman P.") RP Roman P. Software Security Consultant Information Technology and Services Enterprise (\> 1000 emp.) 1/29/2019 "The lightest and most complete static analysis tool with best place to fix" 5/5 What do you like best about Checkmarx? ease of deployment. Number of supported languages and best place to fix function. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Too much detail in the report for small security shops. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: Filter the final report by severity and concentrate on the most important issues first. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Fixed code flaws before deployment. Dramatically decreased rework and refactoring. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") UF Verified User in Financial Services Enterprise (\> 1000 emp.) 9/30/2018 Business partner of the seller or seller's competitor, not included in G2 scores. "Great for finding overlooked or unthought of issues" 4/5 What do you like best about Checkmarx? I like the way that the checkmarx report provides a detailed account of al potential vulnerabilities and then provides examples of how the issue can be fixed. This is very helpful when it comes to trying to resolve all issues. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? As with anything automated, some issues that are found are just non-issues. We use several different security gating products like Checkmarx and I would say that it is less often incorrect than the others. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: It is a good way to catch potential vulnerabilities in your code. With a large code base and many contributors this can be next to impossible if you rely on manual methods (ie. code review). Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? We are making our application more secure and staying in the know about new threats and vulnerabilities. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") UB Verified User in Banking Enterprise (\> 1000 emp.) 10/23/2018 "Great application for Software security" 4.5/5 What do you like best about Checkmarx? Results are pretty good with CheckMarx. This tool is helpful to build secure source code. CheckMarx scan report gives detailed view of each issue and flowchart is given for the variables which might cause security threat. Code scanning is fast. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Sometimes reports generated by the CheckMarx scan contain lot of false positive issues even though code is designed in a way that ensures security. This decreases the readability of the reports. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: Great tool designed for security scan. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Sotware application is tested using CheckMarx. Benefits: 1. Secure code development and best coding practices 2. Possible vulnerabilities and threats identification to assure software quality 3. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Hatim B.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Hatim B.") HB Hatim B. IT Architect & Project manager Enterprise (\> 1000 emp.) 12/27/2017 "A useful SAST tool to improve maturity in IT security" 4.5/5 What do you like best about Checkmarx? Our choice of Checkmarx as a static code audit tool was done after a long reflection. the richness in terms of languages and the customization of the presets were determinents. We were accompanied at first by a very competent editor team. Today, the use of the tool is unavoidable. We use it both as an integrated tool in our IDEs but also when building in our continuous integration platform. He is also at the hand of the security team to audit code delivered by an external service provider. We also appreciate the possibility of modifying but also creating new rules to eliminate false positives. The tool is also rich in terms of indicators and charts. it provides a dashboard that makes it easy to track application risk level scores over time and provides management with comprehensive reports. the details of the vulnerabilities detected and the description of the corrections allows the development teams to correct the vulnerabilities but also to learn about the security of the coding. Review collected by and hosted on G2.com. What do you dislike about Checkmarx? At each audit, the number of false positives is high. but this is a defect specific to SAST tools. knowledge of the business specificities of the application is necessary to personalize the presets to eliminate false positives. This tool is a step in the security audit process, it must be completed by DAST and IAST audits. Review collected by and hosted on G2.com. Recommendations to others considering Checkmarx: we highly recommend this tool. We have already recommended the tool at our group level. The cost-effectiveness ratio is interesting. Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? we use this tool in a bank-insurance information system. Business requirements are high. Checkmarx has helped us improve the maturity of our IT security in order to gain the confidence of our business. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite VC vidya vignan c. Mid-Market (51-1000 emp.) 8/30/2018 "We use it for checking the test cases" 4.5/5 What do you like best about Checkmarx? Automation has been much more easier with the checkmarx Review collected by and hosted on G2.com. What do you dislike about Checkmarx? Even if 1 test fails it shows the everything as failed Review collected by and hosted on G2.com. What problems is Checkmarx solving and how is that benefiting you? Automation is the main purpose of our use. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ## Top-Rated Alternatives [ ![Veracode Application Security Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Veracode Application Security Platform") Veracode Application Security Platform 3.8/5(26) ](https://www.g2.com/products/veracode-application-security-platform/reviews) [ ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube") SonarQube 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) [ ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab") GitLab 4.5/5(901) ](https://www.g2.com/products/gitlab/reviews) [ View All Alternatives ](https://www.g2.com/products/checkmarx/competitors/alternatives) ##### Categories on G2 [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast) [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Dynamic Application Security Testing (DAST)](https://www.g2.com/categories/dynamic-application-security-testing-dast)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Interactive Application Security Testing (IAST)](https://www.g2.com/categories/interactive-application-security-testing-iast) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Which grant management solutions provide the easiest deployment and fastest time to value for enterprise implementations?](https://www.g2.com/discussions/which-grant-management-solutions-provide-the-easiest-deployment-and-fastest-time-to-value-for-enterprise-implementations)[What's the top sales engagement tool for my team](https://www.g2.com/discussions/what-s-the-top-sales-engagement-tool-for-my-team)[Which newsroom management platforms provide a centralized place to manage communications workflows and newsroom operations?](https://www.g2.com/discussions/which-newsroom-management-platforms-provide-a-centralized-place-to-manage-communications-workflows-and-newsroom-operations) [PR Firms in Austin](https://www.g2.com/categories/pr-firms/locations/austin-tx-us)[Best partner management system for increasing revenue](https://www.g2.com/discussions/best-partner-management-system-for-increasing-revenue)[Pros and Cons Details](https://www.g2.com/products/checkmarx/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)