https://communities.stackinsight.net/community/cyber-checkmarx/ Welcome to Stackinsight community. Join the discussion about products and tools for work Discussion Board en-US Fri, 02 Oct 2026 18:21:21 +0000 wpForo 60 https://communities.stackinsight.net/community/cyber-checkmarx/results-after-a-year-5-critical-bugs-found-developer-adoption-still-at-20-2/ Mon, 28 Sep 2026 15:51:16 +0000 Checkmarx Reviews data_skeptic_ray https://communities.stackinsight.net/community/cyber-checkmarx/results-after-a-year-5-critical-bugs-found-developer-adoption-still-at-20-2/ https://communities.stackinsight.net/community/cyber-checkmarx/how-do-i-convince-management-the-unified-platform-isnt-actually-unified-2/ Fri, 25 Sep 2026 14:51:16 +0000 Checkmarx Reviews cipher.blue https://communities.stackinsight.net/community/cyber-checkmarx/how-do-i-convince-management-the-unified-platform-isnt-actually-unified-2/ https://communities.stackinsight.net/community/cyber-checkmarx/results-after-tuning-out-info-level-findings-productivity-doubled-2/ Fri, 25 Sep 2026 05:56:55 +0000 Checkmarx Reviews chloep https://communities.stackinsight.net/community/cyber-checkmarx/results-after-tuning-out-info-level-findings-productivity-doubled-2/ https://communities.stackinsight.net/community/cyber-checkmarx/checkmarx-vs-semgrep-vs-snyk-which-sast-tool-is-best-for-java/ Tue, 25 Aug 2026 06:40:49 +0000 Checkmarx Reviews brian https://communities.stackinsight.net/community/cyber-checkmarx/checkmarx-vs-semgrep-vs-snyk-which-sast-tool-is-best-for-java/ https://communities.stackinsight.net/community/cyber-checkmarx/just-built-a-custom-query-to-flag-hardcoded-aws-keys-in-our-configs/ Mon, 24 Aug 2026 21:10:57 +0000 Checkmarx Reviews harperk https://communities.stackinsight.net/community/cyber-checkmarx/just-built-a-custom-query-to-flag-hardcoded-aws-keys-in-our-configs/ https://communities.stackinsight.net/community/cyber-checkmarx/checkmarx-or-hcl-appscan-for-a-200-user-retail-e-commerce-site-2/ Mon, 24 Aug 2026 12:52:11 +0000 High /*/src/main/java/com/retail/*/repository/*.java method.name="findByActiveTrue" ``` AppScan's automated learning features (from manual assessments) are impressive, but required more initial configuration to reach a similar signal-to-noise ratio. For a 200-user e-commerce site, the scale isn't the primary challenge; it's the resource constraints of the development team. You need high-confidence findings that developers will actually fix. Based on my tinkering, Checkmarx provided a marginally faster path to that state due to its granular configurability and slightly more intuitive integration hooks for a modern, fast-paced deployment pipeline. However, if your codebase is heavily enterprise Java with less frequent releases, AppScan's traditional strengths might sway you. I'm particularly interested in hearing from others who have run these tools in production against e-commerce platforms. How did you handle the configuration for third-party payment gateway integrations and the surrounding sensitive data handling? Which tool produced more actionable findings for OWASP Top 10 relevant to that context, specifically injection and broken authentication? testing all the things]]> Checkmarx Reviews gregr https://communities.stackinsight.net/community/cyber-checkmarx/checkmarx-or-hcl-appscan-for-a-200-user-retail-e-commerce-site-2/ https://communities.stackinsight.net/community/cyber-checkmarx/til-you-can-tweak-scan-accuracy-vs-speed-in-the-engine-config-2/ Sun, 23 Aug 2026 01:21:02 +0000 Checkmarx Reviews bench_beast https://communities.stackinsight.net/community/cyber-checkmarx/til-you-can-tweak-scan-accuracy-vs-speed-in-the-engine-config-2/ https://communities.stackinsight.net/community/cyber-checkmarx/checkmarx-vs-semgrep-vs-snyk-for-sast-which-one-wins-2/ Sat, 22 Aug 2026 13:56:17 +0000 Checkmarx Reviews Gregory Parker https://communities.stackinsight.net/community/cyber-checkmarx/checkmarx-vs-semgrep-vs-snyk-for-sast-which-one-wins-2/ https://communities.stackinsight.net/community/cyber-checkmarx/til-you-can-automate-checkmarx-findings-directly-into-jira-service-desk/ Sat, 22 Aug 2026 01:00:47 +0000 Checkmarx Reviews devops_rookie_2025 https://communities.stackinsight.net/community/cyber-checkmarx/til-you-can-automate-checkmarx-findings-directly-into-jira-service-desk/ https://communities.stackinsight.net/community/cyber-checkmarx/checkmarx-pricing-feedback-for-a-100-user-enterprise-is-it-negotiable-2/ Fri, 21 Aug 2026 00:56:07 +0000 Checkmarx Reviews chrisk https://communities.stackinsight.net/community/cyber-checkmarx/checkmarx-pricing-feedback-for-a-100-user-enterprise-is-it-negotiable-2/