Checkmarx vs. Cloudflare Access vs. Netskope Private Access

If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans.

Incentivized

I wanted to securely connect to my servers without getting tracked by malicious attackers, even though I was on public Wi-Fi. Security was my top priority, and I also wanted a setup that was easy and quick to start and provided great network performance. Cloudflare's Zero trust matches my criteria for becoming my first choice.

Incentivized

Netskope Private Access provides only authenticated users to access the application and it only allows those users whose access has been provided. It provides fast and secure access to the application, whereas a VPN allows users to connect to the whole network once the VPN is connected. Sometimes due to some back-end changes at the stitcher or management plane user is not able to connect the application which leads to customer business.

• Supports a large number of languages
• Finds a large variety of potential risks

Incentivized

• Block access to known bad, risky, or unwanted destinations at the DNS or HTTP level.
• Excellent protection for remote users.
• Best in class browser isolation techniques.

Incentivized

• Great replacement of VPN based access, avoiding VPN overheads, latency, and poor user experience.
• Zero trust network access, which provide per application access without using network tunnel.
• Strong cloud native architecture that can scale globally with low latency.
• Unified secure access to private, SaaS, and Web Apps.
• Context-aware security with real-time visibility and data protection.

Incentivized

• DAST capability can be the one where it does not support native use case of using OTP based arch
• API Scanning is something that lacks a bit due to not much customizations
• Branch wise reports for SAST is not available

Incentivized

• Cloudflare picks the nearest device location to route the traffic, but It would be great if we could select any particular location.
• Cloudflare enables monitoring for all the connected clients; it would be great if we could monitor any individual client device while keeping some client devices private.
• Sometimes, its DNS is not able to resolve a few project websites; we have to manually purge the cache and even disable the Security to get the work done. So, it would be better if we could manually provide a DNS list or whitelist some websites.

Incentivized

• Publisher upgrade should be pre intimidated.
• NPA user interface can be more simplified.
• Backend changes should be notified.

We are delighted with everything they are adding and how the product is growing.

Incentivized

Checkmarx's usability is generally good, but it can be a bit complex for new users. The interface may take some time to get used to, especially for those unfamiliar with security tools. Once you become familiar with it, it’s effective and integrates well into development workflows.

Incentivized

Within a few hours, new engineers are trained in basic tasks and are quite happy they are able to resolve issues independently. After SSO is configured, onboarding is as simple as signing into m365 via a web browser popup.

Incentivized

As I said before, I find it´s UI very intuitive and it´s very easy to use and configure, everything is where it should be and allows for a good workflow. For the end user it´s only a login page that pops out automatically and close itself once it´s authenticated so it stay out of the way of the user.

Incentivized

Good chat support from the portal for basic questions and minor issues. The enterprise support line is provided as well.

The support is good, but the problem is that even if you indicate that you prefer support in Spanish, the application indicates that it is available. I have never had a technician who spoke to me in Spanish.

Incentivized

The process was smooth and well managed.
There was probably good technical coordination and support.
There were only minor details that could be improved.

Incentivized

Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems

Incentivized

As long as all Cloudflare products and services rely on anycast technology, in a complex approach Cloudflare is faster and more relevant for cloud applications. The balance between security and performance is fully established. Also, Cloudflare has quite a good stack for API connection protection, like the API Shield example, which makes it more effective compared to F5 for example. Warp as a ZTNA agent gives better visibility and device posture information than FortiClient does.

Incentivized

Incentivized

• Great diversity of vulnerabilities covered.
• Quicker scans
• They are feature rich compared to other tools I used in the past.
• Dashboards are not customizable enough.
• High number of false positives take up time and sometimes make our report look bad.

Incentivized

• Cloudflare has provided us with 100% uptime even during planned maintenance
• Cloudflare has reduced time for engineering fixes from hours (or days) to minutes in some cases (primarily through Workers)

Incentivized

• It´s easy for the end user
• Azure AD integration
• DLP policies and web detection it´s good

Incentivized