What users are saying about
11 Ratings
19 Ratings
11 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 7.5 out of 100
19 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 9 out of 100

Likelihood to Recommend

Checkmarx

It is well suited in cases where you wanna share reports with people that do not have a lot of knowledge in security concepts. It would help as the report has elaborate content explaining the issues and fix recommendations. If you want a SAST tool that gives fewer false positives, there are better options compared to Checkmarx. In cases where you want to do SAST scans regularly and quickly, Checkmarx may hold you back with its high count of false positives and lengthy reports.
Anonymous | TrustRadius Reviewer

Metasploit

It is easy to use with sufficient documentation on how to use the tools for end users or newbies. Experienced testers will find it easy to customise and configure the test cases. Just wished that I could have taken up a course on using this tool in my study days so that I could had explored more and improved my familiarity with the tool, unlike when working where access and time to explore the other features of the tool is limited
Anonymous | TrustRadius Reviewer

Pros

Checkmarx

  • Supports a large number of languages
  • Finds a large variety of potential risks
Anonymous | TrustRadius Reviewer

Metasploit

  • Scanning our network for new or existing vulnerable systems.
  • Automation of manual tests and exploits to allow what used to be days of effort to be squeezed into hours.
  • Metasploit has become an integral part in our validation of new systems before their inclusion in our production network.
Anonymous | TrustRadius Reviewer

Cons

Checkmarx

  • Scan duration
  • False positives
  • Integration with other tools like Jenkins comes with some inconveniences.
Anonymous | TrustRadius Reviewer

Metasploit

  • Have encountered issues with updating especially after moving from BackTrack to Kali.
  • Sometimes it gets a little buggy, but that's a rare occurrence.
Anonymous | TrustRadius Reviewer

Likelihood to Renew

Checkmarx

No score
No answers yet
No answers on this topic

Metasploit

Metasploit 10.0
Based on 1 answer
It is an incredibly easy framework to use. We can have new testers come in and immediately start using Metasploit. Also it allows advanced users to customize modules so that the inexperienced testers can use the modules without having all the technical knowledge behind the actual exploit
Anonymous | TrustRadius Reviewer

Usability

Checkmarx

No score
No answers yet
No answers on this topic

Metasploit

Metasploit 10.0
Based on 1 answer
Super easy to use! Like I said in my prior ratings, this is perfect for newer testers to come right in and start testing. The more experienced testers can even write modules for the more advanced findings so that the newer testers are able to use the modules to accurately test the said findings. This is why it scales so well!
Anonymous | TrustRadius Reviewer

Support Rating

Checkmarx

No score
No answers yet
No answers on this topic

Metasploit

Metasploit 7.0
Based on 4 answers
It is very easy to use. Just about any tester of any level of experience can use it, which makes me more confident on network tests. Experiences testers can also write modules fairly easy to let the more inexperienced once replicate their findings. Like I have said in my prior reviews, it is super scaleable for the whole team and modules can be written on the fly so that newer testers can replication senior tester results.
Anonymous | TrustRadius Reviewer

Implementation Rating

Checkmarx

No score
No answers yet
No answers on this topic

Metasploit

Metasploit 10.0
Based on 3 answers
I do not have many key insights regarding implementation of Metasploit, but it would be nice if the package was more friendly to other OS's outside of Debian and Ubuntu. When we install on Ubuntu and Debain (like a kali OS) it is incredibly simple. But if we install it on something such as Red Hat Enterprise Linux or FreeBSD, then we have a lot of issues getting it up and going.
Anonymous | TrustRadius Reviewer

Alternatives Considered

Checkmarx

We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.
Anonymous | TrustRadius Reviewer

Metasploit

You can configure and develop your own versions of exploits that are suitable for your business. The free version is very useful and the Rapid7 website has a lot of info to help you understand the exploits. Nessus just lets you identify the vulnerabilities but Metasploit lets you attack with vectors.
Omar Israel Sánchez Monroy | TrustRadius Reviewer

Return on Investment

Checkmarx

  • Improved ability to provide high level of IA confidence
  • Improved confidence in application-level security
Anonymous | TrustRadius Reviewer

Metasploit

  • We have been able to weed out false positives with a more manual vetting of scanned vulnerabilities.
  • Our teams have become more well versed in penetration testing with Metasploit to understand the vulnerabilities potentially present.
Alan Matson, CCNA:S, MCP | TrustRadius Reviewer

Pricing Details

Checkmarx

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Metasploit

General

Free Trial
Free/Freemium Version
Premium Consulting/Integration Services
Entry-level set up fee?
No

Add comparison