Checkmarx vs. IBM Cloud Continuous Delivery

Checkmarx works best in organizations with secure development practices where code is regularly scanned during development. It's ideal for CI/CD pipelines, ensuring vulnerabilities are caught early. Checkmarx might not be the best for old systems that aren’t updated often, as setting it up can take time. It’s also less useful for teams that mostly use third-party libraries instead of writing their own code.

Incentivized

It provides a cloud-based integrated development environment that integrates with other IBM Cloud services to provide a streamlined development workflow. This includes real-time collaboration and code sharing capabilities, making it easy for teams to work together on projects. This feature is very useful for our app to maintain the code

Incentivized

• Reporting
• Language support
• Fix recommendations

Incentivized

• It contains the deployment templates which are much more time saving and is of great use.
• This has the integration of the Cloud applications which makes the work much more convenient.
• This is flexible when it comes to development, deployment, and delivery.
• [It] also has a much more reasonable pricing.
• Provides space for the data storage.
• [IBM Cloud Developer Tools] also can support many useful tools.

Incentivized

• Lots of false positives
• Hard to integrate with CI

Incentivized

• Its price is quite high and this made it unsuitable for us as we cannot afford such high rates.
• Its Setup takes much longer time and this is frustrating.
• Its interface needs to be improved and easy even for the Newbies.

Incentivized

It's a great platform to develop, run, test and deploy the applications easily. And it makes very easier and secure the implementation of continuous delivery process. For first time and experts also can use this service so easily. Great service provided by the IBM Cloud Continuous Service. There are more services that helps a lot to work on it. Thanks a lot.

Incentivized

Checkmarx's usability is generally good, but it can be a bit complex for new users. The interface may take some time to get used to, especially for those unfamiliar with security tools. Once you become familiar with it, it’s effective and integrates well into development workflows.

Incentivized

Nothing special to say : the UX is clear and simple.

Incentivized

In more than a year using the IBM Cloud Continuous Delivery tool, I haven't had any major complaints or problems. However, in the last month, IBM suffered from a couple of problems through several of its services, and for a short period of time, I couldn't deploy successfully my projects. The problem was brief and was quickly fixed.

Incentivized

We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Incentivized

We chose IBM Cloud Developer Tools for multiple reasons. Cost, current infrastructure vendor list, and Cloud Operations team experience were key driving factors for us. Palo Alto's Prisma Cloud product was slick for sure but we found it more difficult to deploy and integrate with our current environment and applications

Incentivized

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized

• This has made the configuration files much easier to access.
• Has made the commands more logical as well as easy for use and learning.
• Contains great AI capabilities
• The documentation needs improvement.
• Error received from commands are pretty hard to understand.

Incentivized