Checkmarx, an Israeli headquartered company with US offices, provides a suite of application security software delivered via the Checkmarx Software Security Platform. Individual modules and capabilities include Checkmarx Static Application Security Testing, Checkmarx Software Composition Analysis, Checkmarx Interactive Application Security Testing (CxIAST)
N/A
IntelliJ IDEA
Score 9.3 out of 10
N/A
IntelliJ IDEA is an IDE that aims to give Java and Kotlin developers everything they need out of the box, including a smart code editor, built-in developer tools, framework support, database support, web development support, and much more.
$19.90
per month
Pricing
Checkmarx
IntelliJ IDEA
Editions & Modules
No answers on this topic
For Individual Use (Monthly billing)
$19.90
per month
For Organizations (Monthly billing)
$71.90
per month
For Individual Use (Yearly billing)
$199
per year
For Organizations (Yearly billing)
$719
per year
Offerings
Pricing Offerings
Checkmarx
IntelliJ IDEA
Free Trial
No
Yes
Free/Freemium Version
No
Yes
Premium Consulting/Integration Services
No
No
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
—
All Products Pack (For Individual Use) – $299 /1st year, $ 239 /2nd year and $ 179 /3d year onwards
All Products Pack (For Organizations) – $979 / year
If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans.
This is a superb tool if your project involves a lot of backend development, especially in Java/Spring Boot and Kotlin. The support for the front end is great as well, but some developers may prefer to use the GitHub copilot add-on. I especially love using the GitHub copilot add-on. It may be less appropriate if your project requires heavy use of HotSwaps for backend debugging, as sometimes the support for that can be limited.
Unit testing: Fully integrated into IntelliJ IDEA. Your unit tests will run smoothly and efficiently, with excellent debugging tools for when things get tricky.
Spring integration: Our Spring project using Maven works flawlessly in IntelliJ IDEA. I know firsthand that Apache is also easily and readily supported too. The integration is seamless and very easy to set up using IntelliJ IDEA's set up wizard when importing new projects.
Customization: IntelliJ IDEA comes out of the box with a bunch of handy shortcuts, as well as text prediction, syntax error detection, and other tools to help keep your code clean. But even better is that it allows for total customization of shortcuts you can easily create to suit your needs.
VS Code is maturing and has a Scala plugin now. The overall experience with VS Code - for web development at least - is very snappy/fast. IntelliJ feels a bit sluggish in comparison. If that Scala plugin for VS Code is deemed mature enough - we may not bother renewing and resort to the Community Edition if we need it.
Their API based customizations which I leveraged to create an ASPM package, which is developer friendly and can extend above the dashboard features, other ones are UI which is great and feels clutter free. Menu and navigation is also good so as support. Only drawback is sometimes scan takes longer which I feel so can be reduced
There is always room for improvement, but I haven't met any IDE that I liked more so far. Even if it did not fit a use case right out of the box, there is always a way to configure how it works to do just that.
Customer support is really good in the case of IntelliJ. If you are paying for this product then, the company makes sure that you will get all the services adequately. Regular update patches are provided to improve the IDE. An online bug report makes it easier for the developers to find the solution as fast as possible. The large online community also helps to find the various solutions to the issues.
This installs just like any other application - its pretty straight forward. Perhaps licensing could be more challenging - but if you use the cloud licensing they offer its as simple as having engineers login to the application and it just works.
Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems
Eclipse is just so old, like a dinosaur, compared to IntelliJ. There are still formats that Eclipse supports better, especially old and/or propriety ones. Still, most of the modern software development needs can be done on IntelliJ, & in a much better way, some of them are not even supported on Eclipse.
