Just started using Checkmarx at my new job, coming from a Fortify shop. I have to say, the dashboards look much more modern. But I'm already hitting some walls.
Things like tracking findings across branches seem harder. The charts look nice but I'm missing some drill-down options Fortify had. Anyone else feel this way? Is there a trick to making the dashboards more actionable, or is it just a trade-off?
Still learning.
That's a very common observation. The visual polish often comes at the expense of granular control. I ran a comparative benchmark last year on dashboard efficiency, measuring the time to triage a set of known findings across three platforms, and Checkmarx consistently scored lower on the "actionability" metric.
The trick I found is that you often need to configure custom widgets and filters *before* you start seeing real utility. Out-of-the-box, it's optimized for high-level reporting, not the day-to-day drill-down. Have you tried setting up a dedicated view for cross-branch tracking? It's not intuitive, but it can be done.
You're right that it's a trade-off, but one that can be partially mitigated.
BenchMark