What users are saying about

Checkmarx vs Metasploit

Checkmarx
11 Ratings
Metasploit
19 Ratings

Checkmarx

11 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 7.5 out of 100

Based on 11 reviews and ratings

Metasploit

19 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener noreferrer'>trScore algorithm: Learn more.</a>
Score 9 out of 100

Based on 19 reviews and ratings

Likelihood to Recommend

Checkmarx

It is well suited in cases where you wanna share reports with people that do not have a lot of knowledge in security concepts. It would help as the report has elaborate content explaining the issues and fix recommendations. If you want a SAST tool that gives fewer false positives, there are better options compared to Checkmarx. In cases where you want to do SAST scans regularly and quickly, Checkmarx may hold you back with its high count of false positives and lengthy reports.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Metasploit

It is easy to use with sufficient documentation on how to use the tools for end users or newbies. Experienced testers will find it easy to customise and configure the test cases. Just wished that I could have taken up a course on using this tool in my study days so that I could had explored more and improved my familiarity with the tool, unlike when working where access and time to explore the other features of the tool is limited

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 7 answers on this topic

Pros

Checkmarx

  • Supports a large number of languages
  • Finds a large variety of potential risks

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Metasploit

  • Scanning our network for new or existing vulnerable systems.
  • Automation of manual tests and exploits to allow what used to be days of effort to be squeezed into hours.
  • Metasploit has become an integral part in our validation of new systems before their inclusion in our production network.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 7 answers on this topic

Cons

Checkmarx

  • Scan duration
  • False positives
  • Integration with other tools like Jenkins comes with some inconveniences.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Metasploit

  • Have encountered issues with updating especially after moving from BackTrack to Kali.
  • Sometimes it gets a little buggy, but that's a rare occurrence.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 7 answers on this topic

Likelihood to Renew

Checkmarx

No score
No answers yet
No answers on this topic

Metasploit

Metasploit 10.0
Based on 1 answer
It is an incredibly easy framework to use. We can have new testers come in and immediately start using Metasploit. Also it allows advanced users to customize modules so that the inexperienced testers can use the modules without having all the technical knowledge behind the actual exploit

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 1 answers on this topic

Usability

Checkmarx

No score
No answers yet
No answers on this topic

Metasploit

Metasploit 10.0
Based on 1 answer
Super easy to use! Like I said in my prior ratings, this is perfect for newer testers to come right in and start testing. The more experienced testers can even write modules for the more advanced findings so that the newer testers are able to use the modules to accurately test the said findings. This is why it scales so well!

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 1 answers on this topic

Support Rating

Checkmarx

No score
No answers yet
No answers on this topic

Metasploit

Metasploit 7.0
Based on 4 answers
It is very easy to use. Just about any tester of any level of experience can use it, which makes me more confident on network tests. Experiences testers can also write modules fairly easy to let the more inexperienced once replicate their findings. Like I have said in my prior reviews, it is super scaleable for the whole team and modules can be written on the fly so that newer testers can replication senior tester results.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 4 answers on this topic

Implementation Rating

Checkmarx

No score
No answers yet
No answers on this topic

Metasploit

Metasploit 10.0
Based on 3 answers
I do not have many key insights regarding implementation of Metasploit, but it would be nice if the package was more friendly to other OS's outside of Debian and Ubuntu. When we install on Ubuntu and Debain (like a kali OS) it is incredibly simple. But if we install it on something such as Red Hat Enterprise Linux or FreeBSD, then we have a lot of issues getting it up and going.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 3 answers on this topic

Alternatives Considered

Checkmarx

We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Metasploit

You can configure and develop your own versions of exploits that are suitable for your business. The free version is very useful and the Rapid7 website has a lot of info to help you understand the exploits. Nessus just lets you identify the vulnerabilities but Metasploit lets you attack with vectors.

Read full review

Omar Israel Sánchez Monroy | TrustRadius Reviewer
Omar Israel Sánchez Monroy
View all 7 answers on this topic

Return on Investment

Checkmarx

  • Improved ability to provide high level of IA confidence
  • Improved confidence in application-level security

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Metasploit

  • We have been able to weed out false positives with a more manual vetting of scanned vulnerabilities.
  • Our teams have become more well versed in penetration testing with Metasploit to understand the vulnerabilities potentially present.

Read full review

Alan Matson, CCNA:S, MCP | TrustRadius Reviewer
Alan Matson, CCNA:S, MCP
View all 7 answers on this topic

Pricing Details

Checkmarx

General

Free Trial
—
Free/Freemium Version
—
Premium Consulting/Integration Services
—
Entry-level set up fee?
No

Metasploit

General

Free Trial
—
Free/Freemium Version
—
Premium Consulting/Integration Services
—
Entry-level set up fee?
No

Add comparison