Checkmarx vs. IBM watsonx Code Assistant Portfolio

If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans.

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

I would recommend for understanding your Mainframe components not for the GenAI piece involved from just my experience. The explanations were not up to the quality we wanted but its deterministic side provided a lot of value for different members of my team. The visuals would be great. I am not sure where it currently stands

Incentivized

Invited by TrustRadius (TR) on Vendor's Behalf

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Detects security vulnerabilities in source code with accuracy and detail.
• Integrates seamlessly with CI/CD pipelines, IDEs, and repositories.
• Provides clear reports and actionable fix recommendations for developers.

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• It can automatically revamp specific parts of the COBOL code and very useful when we want to maintain the existing codebase but improve its structure. I can highlight a block of COBOL code and use Watsonx Assistant to suggest ways to simplify and optimize it.
• Legacy codes, mostly written in COBOL, are cryptic and difficult to understand. Watsonx Assistant analyzes the code and provides insights into its functionalities and dependencies. A great help when working on older applications where understanding the codebase is crucial.
• A step-by-step approach to modernize our applications slowly and steadily, so that we can control the process better. I don't have to change everything at once. Instead, I can focus on specific COBOL modules and automatically convert them to Java.

Incentivized

Invited by TrustRadius (TR) on Vendor's Behalf

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Scan duration
• False positives
• Integration with other tools like Jenkins comes with some inconveniences.

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• IDE integration is not always optimal
• I wish it could it could generate the code of an entire WEB site based on user specifications
• I with there was a functionality to generate code based on design documents such as Sequence Diagrams, Database Architecture etc.

Incentivized

Invited by TrustRadius (TR) on Vendor's Behalf

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

Their API based customizations which I leveraged to create an ASPM package, which is developer friendly and can extend above the dashboard features, other ones are UI which is great and feels clutter free. Menu and navigation is also good so as support. Only drawback is sometimes scan takes longer which I feel so can be reduced

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

Security is very important in the mainframe world. At Watsonx, we work in the trusted Z environment, which has strong security rules, stricter than those of other cloud-based solutions. My domain is primarily mainframe modernization and Watsonx Code Assistant for Z is specifically used to understand and work with COBOL, the language used majorly in mainframe environments, not any general-purpose language that used in various platforms. It understands the nuances of COBOL and Assembler specific to the Z environment, something crucial for my work.

Incentivized

Invited by TrustRadius (TR) on Vendor's Behalf

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• While manual review and adjustments are still needed, it's a 50-70% reduction in manual coding. Think about it - a project estimated to take a year is done in 4-6 months.
• We've been able to introduce new features and improvements more quickly by updating our technology faster. One relevant example is we recently released an important update to our main product 45 days earlier than planned.
• It has been a smart move and it's really paid off for our company. We've cut down a lot of time we used to spend doing things manually. We now spend our resources more wisely, work faster and finish projects sooner and as a result, we've reduced our development costs by 25%.

Incentivized

Invited by TrustRadius (TR) on Vendor's Behalf

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info