TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Checkmarx

    Score7.6 out of 10
    N/ACheckmarx, an Israeli headquartered company with US offices, provides a suite of application security software delivered via the Checkmarx Software Security Platform. Individual modules and capabilities include Checkmarx Static Application Security Testing, Checkmarx Software Composition Analysis, Checkmarx Interactive Application Security Testing (CxIAST)N/A

    FortiSOAR

    Score8 out of 10
    N/ACyberSponse was a security orchestration, automation and response (SOAR) solution, now known as FortiSOAR. Fortinet acquired and now supports the solution (December 2019).N/A
    Pricing
    CheckmarxFortiSOAR
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    CheckmarxFortiSOAR
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Best Alternatives
    CheckmarxFortiSOAR
    Small Businesses
    Rencore Code (SPCAF)
    Score8.8 out of 10
    No answers on this topic
    Medium-sized Companies
    Trend Vision One Email and Collaboration Security
    Score9.9 out of 10
    Splunk SOAR
    Score9.1 out of 10
    Enterprises
    Trend Vision One Email and Collaboration Security
    Score9.9 out of 10
    Palo Alto Networks Cortex XSOAR
    Score1.1 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    CheckmarxFortiSOAR
    Likelihood to Recommend
    8.3
    (5 ratings)
    9.0
    (3 ratings)
    Usability
    7.7
    (2 ratings)
    -
    (0 ratings)
    User Testimonials
    CheckmarxFortiSOAR
    Likelihood to Recommend
    Checkmarx
    If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans.
    Incentivized
    Read full review
    Fortinet
    Most organization with medium & maturity SOC struggle with alert fatigue & false positives with addressing alert volume is result in increasing risk of critical alerts being masked by trivial one , in this situation FortiSOAR help in case management : rapidly response in case of crises also. FortiSOAR is designed very well where Fortinet have other stack of security component also like Fortinet NGFW & Forti SIEM etc.. Fortinet NGFW can and generate the FortiSOAR instance through FortiCloud for Customer . However In absence of FortiFabric it require lot of connectors to work well the solution.
    Incentivized
    Read full review
    Pros
    Checkmarx
    • Detects security vulnerabilities in source code with accuracy and detail.
    • Integrates seamlessly with CI/CD pipelines, IDEs, and repositories.
    • Provides clear reports and actionable fix recommendations for developers.
    Incentivized
    Read full review
    Fortinet
    • User-friendly interface and easy to read data on the panels.
    • Perfect for vulnerability management.
    • Great integration with different security operations center platforms.
    • Customized panels.
    • Setting User Permissions.
    • Scheduled asset scans with reports.
    Incentivized
    Read full review
    Cons
    Checkmarx
    • Scan duration
    • False positives
    • Integration with other tools like Jenkins comes with some inconveniences.
    Incentivized
    Read full review
    Fortinet
    • Training Services- Fortinet offers courses geared towards administration and designed and development of FortiSOAR , Which required multiples access , we need all training services with self pace basis , I think here Fortinet need to improve.
    • Licensing Model- Being as a new technology Licensing model should be crystal & Clear, be it Concurrent Users or The number of FortiSOAR nodes there should be no ambiguity .
    Incentivized
    Read full review
    Usability
    Checkmarx
    Their API based customizations which I leveraged to create an ASPM package, which is developer friendly and can extend above the dashboard features, other ones are UI which is great and feels clutter free. Menu and navigation is also good so as support. Only drawback is sometimes scan takes longer which I feel so can be reduced
    Incentivized
    Read full review
    Fortinet
    No answers on this topic
    Alternatives Considered
    Checkmarx
    Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems
    Incentivized
    Read full review
    Fortinet
    Done prove of concept (POC) thoroughly , where we judged the solution on every aspect & We came to know FortiSOAR will work well in our environment as it is blended with features like Case managements , Product Flexibility * Scalable Architecture . These features were much required to optimum use of our SOC solution. Since we have all the Fortinet security stack in our environment it helped us a lot in selection (POC) and also commercially.
    Incentivized
    Read full review
    Return on Investment
    Checkmarx
    • Improved ability to provide high level of IA confidence
    • Improved confidence in application-level security
    Incentivized
    Read full review
    Fortinet
    • Improved compliance control and risk management.
    • Improved the business process.
    • Improved incident visibility.
    Incentivized
    Read full review
    ScreenShots