Checkmarx vs. FOSSA

Checkmarx

Checkmarx

21 Reviews and Ratings

FOSSA

FOSSA

2 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Checkmarx	Score 9.1 out of 10	N/A	Checkmarx, an Israeli headquartered company with US offices, provides a suite of application security software delivered via the Checkmarx Software Security Platform. Individual modules and capabilities include Checkmarx Static Application Security Testing, Checkmarx Software Composition Analysis, Checkmarx Interactive Application Security Testing (CxIAST)	N/A
FOSSA	Score 2.0 out of 10	N/A	FOSSA is a software composition analysis tool that continuously scans for open-source components and tracks dependencies and license compliance.	N/A

Pricing

Checkmarx

FOSSA

Editions & Modules

No answers on this topic

No answers on this topic

Offerings

Pricing Offerings
Checkmarx	FOSSA
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

No setup fee

Additional Details

—

—

More Pricing Information

Community Pulse
	Checkmarx	FOSSA
Considered Both Products	Checkmarx Verified User Anonymous Chose Checkmarx Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into … Incentivized Helpful? Verified User Anonymous Chose Checkmarx We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, … Incentivized Helpful?	FOSSA Verified User Anonymous Chose FOSSA BlackDuck and Synk Incentivized Helpful?

Best Alternatives
	Checkmarx	FOSSA
Small Businesses	GitLab Score 8.7 out of 10	No answers on this topic
Medium-sized Companies	Veracode Score 8.7 out of 10	Veracode Score 8.7 out of 10
Enterprises	Veracode Score 8.7 out of 10	Veracode Score 8.7 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Checkmarx	FOSSA
Likelihood to Recommend	9.0 (0 ratings)	5.0 (0 ratings)
Usability	7.0 (0 ratings)	- (0 ratings)
Support Rating	- (0 ratings)	10.0 (0 ratings)

User Testimonials
	Checkmarx	FOSSA
Likelihood to Recommend	If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans. Incentivized Abhineet Sagar DevSecOps Engineer II Read full review	The only issue we have had is sometimes the web app is too slow, and that causes issues with us wanting to continue to use FOSSA over going with another tool. That is the only problem. I noticed it happened more recently, but if that is solved now or will be solved, I would 100% recommend this tool to anyone! Incentivized Verified User Anonymous Read full review
Pros	Supports a large number of languages Finds a large variety of potential risks Incentivized Verified User Anonymous Read full review	Setup of tool. Speed of scans. Automated emails with reports. Incentivized Verified User Anonymous Read full review
Cons	DAST capability can be the one where it does not support native use case of using OTP based arch API Scanning is something that lacks a bit due to not much customizations Branch wise reports for SAST is not available Incentivized Abhineet Sagar DevSecOps Engineer II Read full review	Interface for loading results can be slow, this is the #1 issue we have faced. Speed of scans could be improved. Incentivized Verified User Anonymous Read full review
Usability	Checkmarx's usability is generally good, but it can be a bit complex for new users. The interface may take some time to get used to, especially for those unfamiliar with security tools. Once you become familiar with it, it’s effective and integrates well into development workflows. Incentivized Verified User Anonymous Read full review	No answers on this topic
Support Rating	No answers on this topic	Never needed support but the chat and help seem forefront of the app! Incentivized Verified User Anonymous Read full review
Alternatives Considered	Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems Incentivized Verified User Anonymous Read full review	BlackDuck and Synk Incentivized Verified User Anonymous Read full review
Return on Investment	Great diversity of vulnerabilities covered. Quicker scans They are feature rich compared to other tools I used in the past. Dashboards are not customizable enough. High number of false positives take up time and sometimes make our report look bad. Incentivized Verified User Anonymous Read full review	Hard to measure the ROI, but no doubt having licenses be above board is fantastic for protection of your software. Caused developers to make more informed decisions. Incentivized Verified User Anonymous Read full review
ScreenShots