aqua cloud vs. Checkmarx

1. I used this to do test cases, wherein I got the results with visuals. I explained to clients very well with the visual examples as well. 2. Even I was very new to this tool, it gave me the best company. Even while integrating components as a beginner. 3. Even if I have got any bugs in test cases, it helped me to resolve in a better way. Happy user me! Thanks Aqua ALM.

Incentivized

If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans.

Incentivized

• Writing test case and use case
• Visuals
• Very easy to create complex logs in the test case

Incentivized

• Detects security vulnerabilities in source code with accuracy and detail.
• Integrates seamlessly with CI/CD pipelines, IDEs, and repositories.
• Provides clear reports and actionable fix recommendations for developers.

Incentivized

• I did not find automation of test in this tool, which I did it manually while doing test case
• Apart from that I did not find anything bad in this tool, looks good
• NA

Incentivized

• Scan duration
• False positives
• Integration with other tools like Jenkins comes with some inconveniences.

Incentivized

Their API based customizations which I leveraged to create an ASPM package, which is developer friendly and can extend above the dashboard features, other ones are UI which is great and feels clutter free. Menu and navigation is also good so as support. Only drawback is sometimes scan takes longer which I feel so can be reduced

Incentivized

I use aqua ALM for test cases. It has got the integration with Jira. Best thing is it will surely very well connect the organization in only one hub. I will perform test case, use cases.It has got open-source & many tools in one platform. Aqua ALM will our organization to manage, plan and to execute the use cases incidents in clear manner, it also fetches the reports which we give input. By this, we will also download the FLOW reports, visual diagrams. Happy clients! They appreciated my project.

Incentivized

Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems

Incentivized

• Once I was working on my project's use case incident, I wanted the result to get in tree view, but I didnt get. Visuals I got, not which is the one I wanted. Anyways I explained the same to clients. so I would highly like the AQUA team to improve this.
• I really wanted to appreciate that bug reporting in use case incidents. Very good!
• In one of the projects I wanted to work in the FLOW DIAGRAM VISUAL. I got the excellent result in this. Thank you again :)

Incentivized

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized