
It gives suggestions of technical issues correctly. Review collected by and hosted on G2.com.
Its a little confusing with existing code bases. Review collected by and hosted on G2.com.

It gives suggestions of technical issues correctly. Review collected by and hosted on G2.com.
Its a little confusing with existing code bases. Review collected by and hosted on G2.com.

This is an excellent tool to write secure code and follow best practices. i like that it gives a detailed overview of the issue in your static code and also provides ways to solve it. It attributes a risk profile to each issue and this way you can solve the ones with high priority first. Review collected by and hosted on G2.com.
The document generated can sometimes be too verbose and you can loose track of what issues to solve. Sometimes even if you have solved all the issues, re-running the report does not ensure a count of zero. Review collected by and hosted on G2.com.

The tool uses your credentials to generate a report and that report is very comprehensive, yet very easy to understand, it makes very easy to solve potential security issues. Review collected by and hosted on G2.com.
The report generated by CheckMarx always contains a lot of false positives or duplicated positives, making it bigger than it should, although to be fair it would not be easy to develop a tool that analyses code so thoroughly without displaying a fair amount of duplicates. Review collected by and hosted on G2.com.
We use this tool to scan our code for vulnerabilities. It is a great tool because it can be run against our code base and it lists our the vulnerabilities. This has reduced our time for manual code reviews by quite some time. Also, it helps us set code quality standard. We have implemented this as part of our software development cycle. The new developers that come on board can look at previous scans and learn our coding standards and follow that as part of our coding policy. Review collected by and hosted on G2.com.
There can be many false positives. Since the tool is automated it doesn't understand some of the code logic and why it was written in a certain way. Review collected by and hosted on G2.com.
providing the scan report in multiple formats Review collected by and hosted on G2.com.
integrating with build tools is not fun Review collected by and hosted on G2.com.
We used the tool to find security flaws in our software it helped us to find cross side scripting bugs in an easy way Review collected by and hosted on G2.com.
When we integrate with Jenkins the report sent by CheckMarx is not easily redable Review collected by and hosted on G2.com.

Really easy to use and the level of detail you can access is amazing. Review collected by and hosted on G2.com.
The Cost, it is not cheap, but not good rarely is. Review collected by and hosted on G2.com.
Easy installation and rollout, it performs thorough scans across most, if not all all, languages. Review collected by and hosted on G2.com.
The work-layout requires a full screen, and like four windows. It''s not something you can do passively because it takes the whole screen. Review collected by and hosted on G2.com.
Highly recommend Check mark in this current trend. Review collected by and hosted on G2.com.
Not having an option to choose personal email. Review collected by and hosted on G2.com.
This is a very innovative company. The product is safe. Review collected by and hosted on G2.com.
Customer service is not so great. It takes a while for them to return your call. Review collected by and hosted on G2.com.