Provision to automate scan runs is now available. Scan results are well structured and comments are well documented. Easy for developers to understand and fix. Can be integrated with stakeholder reports. Good UI and support

The best about Checkmarx is its application security testing capabilities that helps developers to identify the issues

Checkmarx is a centralized security tool that provides end-to-end insights into source code security and vulnerabilities. It also helps improve the efficiency of the source code by highlighting the associated risks and suggesting ways to remediate the vulnerabilities. In addition, it shows vulnerabilities in the open-source libraries and packages we use in our source code through SCA scans. One thing I like the most is how well it integrates with our CI/CD tooling. We can plug it into our DevSecOps CI/CD flow, and developers can see scan insights directly from the pipeline itself, without needing to log in to the Checkmarx UI separately.