Amazon CodeGuru vs. Checkmarx

Amazon CodeGuru can be really useful to any company that develops applications and make it possible to integrate with your cloud infrastructure (AWS).In general, we can notice that the codes have been more clean and trustable.

Incentivized

Chechmarx is really suited for finding wide range of security risks. It although identifies false positives which can be confusing at times. It can do better in terms of scan duration. They are better alternate competitors in the market who can do equally good or even better. It all depends on the scope of the problem you want to address

Incentivized

• Reporting
• Language support
• Fix recommendations

Incentivized

• They could have more suggestions but it's part of the maturation process

Incentivized

• Lots of false positives
• Hard to integrate with CI

Incentivized

We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Incentivized

• We have been much more productive and producing codes with less bugs and more trustable

Incentivized

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized