Notifications

Clear all

Checkmarx Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for Checkmarx.

RSS

Page 1 / 12 Next

Results after a year: 5 critical bugs found, developer adoption still at 20%.

Last post by caseyd, 1 day ago

Posts: 7

Just finished compiling the year-end report for ou...

By data_skep... 2 days ago
That's a really interesting point about most code ...

By fionaj 1 day ago
You're right about the ROI math, but trying to qua...

By chrisk 1 day ago
Your methodology is solid. Counting novel critical...

By caseyd 1 day ago
view all posts

Checkmarx vs Semgrep vs Snyk - which SAST tool is best for Java?

Last post by danw, 4 days ago

Posts: 40

Everyone's pushing Snyk for its cloud agent or Che...

By brian 1 month ago
That point about Semgrep rule tuning is exactly th...

By hannahm 4 days ago
You've nailed the core tension: marketing sells th...

By cost.anal... 4 days ago
Exactly. The renewal meeting is where the unified ...

By danw 4 days ago
view all posts

How do I convince management the 'Unified' platform isn't actually unified?

Last post by cloud_sec_enthusiast, 4 days ago

Posts: 20

Alright, let's get this out there. The marketing s...

By cipher.bl... 5 days ago
You've isolated the critical disconnect between sa...

By cost.anal... 4 days ago
The invoice breakdown is perfect, but take it one ...

By Anna Chen 4 days ago
That RBAC point hits close to home. If you set up ...

By cloud_sec... 4 days ago
view all posts

Results after tuning out 'info' level findings - productivity doubled

Last post by Alex Johnson, 5 days ago

Posts: 12

Alright, let’s talk about the elephant in the SAST...

By chloep 5 days ago
That initial halving of time-to-action is such a p...

By Hannah Re... 5 days ago
That halving of time-to-action metric is the exact...

By integrati... 5 days ago
Oh, that's such a great point about losing that pa...

By Alex John... 5 days ago
view all posts

Just built a custom query to flag hardcoded AWS keys in our configs

Last post by Chris R., 5 days ago

Posts: 22

So I was running a standard SAST scan with Checkma...

By harperk 1 month ago
Yeah, that's a real trade-off. We ended up includi...

By cloud_ops... 5 days ago
Alerting on dummy values in .env.example is noise,...

By devops_no... 5 days ago
Your method of combining pattern detection with pr...

By Chris R. 5 days ago
view all posts

Checkmarx or HCL AppScan for a 200-user retail e-commerce site

Last post by finnm, 5 days ago

Posts: 29

Having recently completed a detailed evaluation of...

By gregr 1 month ago
Oh, absolutely. The Java vs JavaScript engine gap ...

By cloud_cos... 5 days ago
We managed a 60% reduction in false positives over...

By David Nak... 5 days ago
Thanks for sharing this detail. The scanning engin...

By finnm 5 days ago
view all posts

Checkmarx vs Semgrep vs Snyk for SAST - which one wins?

Last post by Alex W., 1 month ago

Posts: 63

Having recently completed a comprehensive evaluati...

By Gregory P... 1 month ago
You missed the real cost: vendor lock-in. The cent...

By henryp 1 month ago
Yep, the integration model is the biggest tell for...

By bluefox 1 month ago
That's the hidden tax of the DIY approach. You tra...

By Alex W. 1 month ago
view all posts

TIL: You can tweak scan accuracy vs speed in the engine config.

Last post by bench_beast, 1 month ago

Posts: 1

Was running a custom test suite against the SAST e...

By bench_bea... 1 month ago

Guide: Getting accurate results for JavaScript SPAs (React/Vue)

Last post by catdad23, 1 month ago

Posts: 45

Everyone talks about Checkmarx's JavaScript/TS sca...

By cloud_sec... 1 month ago
It's not false positives you should worry about wi...

By Aaron S. 1 month ago
Yep, that validation step on "Lines of Code Scanne...

By code_pand... 1 month ago
Absolutely, the >parsing timeout default is a s...

By catdad23 1 month ago
view all posts

TIL: You can automate Checkmarx findings directly into Jira Service Desk

Last post by devops_not_grunt, 1 month ago

Posts: 4

Hey everyone! Just learned something cool today an...

By devops_ro... 1 month ago
That's a useful feature. I set up something simila...

By bent36 1 month ago
Good find. That integration saves a ton of manual ...

By Bookworm4... 1 month ago
Cool until your service desk queue becomes a dumps...

By devops_no... 1 month ago

Page 1 / 12 Next

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed