Checkmarx vs. FOSSA

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Checkmarx
Score 8.2 out of 10
N/A
Checkmarx, an Israeli headquartered company with US offices, provides a suite of application security software delivered via the Checkmarx Software Security Platform. Individual modules and capabilities include Checkmarx Static Application Security Testing, Checkmarx Software Composition Analysis, Checkmarx Interactive Application Security Testing (CxIAST)N/A
FOSSA
Score 2.0 out of 10
N/A
FOSSA is a software composition analysis tool that continuously scans for open-source components and tracks dependencies and license compliance.N/A
Pricing
CheckmarxFOSSA
Editions & Modules
No answers on this topic
No answers on this topic
Offerings
Pricing Offerings
CheckmarxFOSSA
Free Trial
NoNo
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
NoNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
CheckmarxFOSSA
Top Pros
Top Cons

No answers on this topic

Best Alternatives
CheckmarxFOSSA
Small Businesses
GitLab
GitLab
Score 8.9 out of 10

No answers on this topic

Medium-sized Companies
GitLab
GitLab
Score 8.9 out of 10
Veracode
Veracode
Score 8.5 out of 10
Enterprises
GitLab
GitLab
Score 8.9 out of 10
Veracode
Veracode
Score 8.5 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
CheckmarxFOSSA
Likelihood to Recommend
7.0
(3 ratings)
5.0
(1 ratings)
Support Rating
-
(0 ratings)
10.0
(1 ratings)
User Testimonials
CheckmarxFOSSA
Likelihood to Recommend
Checkmarx
Chechmarx is really suited for finding wide range of security risks. It although identifies false positives which can be confusing at times. It can do better in terms of scan duration. They are better alternate competitors in the market who can do equally good or even better. It all depends on the scope of the problem you want to address
Read full review
FOSSA
The only issue we have had is sometimes the web app is too slow, and that causes issues with us wanting to continue to use FOSSA over going with another tool. That is the only problem. I noticed it happened more recently, but if that is solved now or will be solved, I would 100% recommend this tool to anyone!
Read full review
Pros
Checkmarx
  • Reporting
  • Language support
  • Fix recommendations
Read full review
FOSSA
  • Setup of tool.
  • Speed of scans.
  • Automated emails with reports.
Read full review
Cons
Checkmarx
  • Lots of false positives
  • Hard to integrate with CI
Read full review
FOSSA
  • Interface for loading results can be slow, this is the #1 issue we have faced.
  • Speed of scans could be improved.
Read full review
Support Rating
Checkmarx
No answers on this topic
FOSSA
Never needed support but the chat and help seem forefront of the app!
Read full review
Alternatives Considered
Checkmarx
We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.
Read full review
FOSSA
BlackDuck and Synk
Read full review
Return on Investment
Checkmarx
  • Improved ability to provide high level of IA confidence
  • Improved confidence in application-level security
Read full review
FOSSA
  • Hard to measure the ROI, but no doubt having licenses be above board is fantastic for protection of your software.
  • Caused developers to make more informed decisions.
Read full review
ScreenShots