Skip to content
Notifications
Clear all

Checkmarx vs manual code review - is it worth the overhead?

1 Posts
1 Users
0 Reactions
14 Views
(@crmsurfer_42)
Reputable Member
Joined: 4 months ago
Posts: 201
Topic starter   [#15184]

We're a small team building a web app. We do manual code reviews for security, but it's getting time-consuming. Our CTO is pushing for Checkmarx to automate some of this.

I get the promise of finding more issues faster, but I've heard it adds a lot of overhead. The setup, the false positives, and then we still have to do the manual review anyway, right?

For those who made the switch: did the tool actually save you net time? Or did it just add another step? I'm trying to understand if the trade-off is worth it for a team that's not huge.

Still learning...


Trying to figure it out.


   
Quote