What users are saying about
14 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>Score 5.4 out of 100
Based on 14 reviews and ratings
22 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>Score 9.3 out of 100
Based on 22 reviews and ratings
Attribute Ratings
- Metasploit is rated higher in 1 area: Likelihood to Recommend
Likelihood to Recommend

6.0
Checkmarx
60%
2 Ratings

10.0
Metasploit
100%
7 Ratings
Likelihood to Renew

Checkmarx
N/A
0 Ratings

10.0
Metasploit
100%
1 Rating
Usability

Checkmarx
N/A
0 Ratings

10.0
Metasploit
100%
1 Rating
Support Rating

Checkmarx
N/A
0 Ratings

7.0
Metasploit
70%
4 Ratings
Implementation Rating

Checkmarx
N/A
0 Ratings

10.0
Metasploit
100%
3 Ratings
Likelihood to Recommend
Checkmarx
It is well suited in cases where you wanna share reports with people that do not have a lot of knowledge in security concepts. It would help as the report has elaborate content explaining the issues and fix recommendations. If you want a SAST tool that gives fewer false positives, there are better options compared to Checkmarx. In cases where you want to do SAST scans regularly and quickly, Checkmarx may hold you back with its high count of false positives and lengthy reports.

Verified User
Engineer in Research & Development
Public Relations & Communications Company, 1001-5000 employeesMetasploit
It is easy to use with sufficient documentation on how to use the tools for end users or newbies. Experienced testers will find it easy to customise and configure the test cases. Just wished that I could have taken up a course on using this tool in my study days so that I could had explored more and improved my familiarity with the tool, unlike when working where access and time to explore the other features of the tool is limited

Verified User
Consultant in Information Technology
Information Technology & Services Company, 1001-5000 employeesPros
Checkmarx
- Supports a large number of languages
- Finds a large variety of potential risks

Verified User
Team Lead in Research & Development
Internet Company, 11-50 employeesMetasploit
- Scanning our network for new or existing vulnerable systems.
- Automation of manual tests and exploits to allow what used to be days of effort to be squeezed into hours.
- Metasploit has become an integral part in our validation of new systems before their inclusion in our production network.

Verified User
Engineer in Information Technology
Hospitality Company, 501-1000 employeesCons
Checkmarx
- Scan duration
- False positives
- Integration with other tools like Jenkins comes with some inconveniences.

Verified User
Engineer in Research & Development
Public Relations & Communications Company, 1001-5000 employeesMetasploit
- Have encountered issues with updating especially after moving from BackTrack to Kali.
- Sometimes it gets a little buggy, but that's a rare occurrence.

Verified User
Engineer in Information Technology
Non-Profit Organization Management Company, 501-1000 employeesPricing Details
Checkmarx
General
Free Trial
—Free/Freemium Version
—Premium Consulting/Integration Services
—Entry-level set up fee?
No
Starting Price
—Metasploit
General
Free Trial
—Free/Freemium Version
—Premium Consulting/Integration Services
—Entry-level set up fee?
No
Starting Price
—Likelihood to Renew
Checkmarx
No score
No answers yet
No answers on this topic
Metasploit
Metasploit 10.0
Based on 1 answer
It is an incredibly easy framework to use. We can have new testers come in and immediately start using Metasploit. Also it allows advanced users to customize modules so that the inexperienced testers can use the modules without having all the technical knowledge behind the actual exploit

Verified User
Team Lead in Information Technology
Computer & Network Security Company, 1-10 employeesUsability
Checkmarx
No score
No answers yet
No answers on this topic
Metasploit
Metasploit 10.0
Based on 1 answer
Super easy to use! Like I said in my prior ratings, this is perfect for newer testers to come right in and start testing. The more experienced testers can even write modules for the more advanced findings so that the newer testers are able to use the modules to accurately test the said findings. This is why it scales so well!

Verified User
Team Lead in Information Technology
Computer & Network Security Company, 1-10 employeesSupport Rating
Checkmarx
No score
No answers yet
No answers on this topic
Metasploit
Metasploit 7.0
Based on 4 answers
It is very easy to use. Just about any tester of any level of experience can use it, which makes me more confident on network tests. Experiences testers can also write modules fairly easy to let the more inexperienced once replicate their findings. Like I have said in my prior reviews, it is super scaleable for the whole team and modules can be written on the fly so that newer testers can replication senior tester results.

Verified User
Team Lead in Information Technology
Computer & Network Security Company, 1-10 employeesImplementation Rating
Checkmarx
No score
No answers yet
No answers on this topic
Metasploit
Metasploit 10.0
Based on 3 answers
I do not have many key insights regarding implementation of Metasploit, but it would be nice if the package was more friendly to other OS's outside of Debian and Ubuntu. When we install on Ubuntu and Debain (like a kali OS) it is incredibly simple. But if we install it on something such as Red Hat Enterprise Linux or FreeBSD, then we have a lot of issues getting it up and going.

Verified User
Team Lead in Information Technology
Computer & Network Security Company, 1-10 employeesAlternatives Considered
Checkmarx
We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Verified User
Engineer in Research & Development
Public Relations & Communications Company, 1001-5000 employeesMetasploit
You can configure and develop your own versions of exploits that are suitable for your business. The free version is very useful and the Rapid7 website has a lot of info to help you understand the exploits. Nessus just lets you identify the vulnerabilities but Metasploit lets you attack with vectors.
Auditor de Seguridad de la InformaciĂłn
PeñolesMining & Metals, 5001-10,000 employees
Return on Investment
Checkmarx
- Improved ability to provide high level of IA confidence
- Improved confidence in application-level security

Verified User
Team Lead in Research & Development
Internet Company, 11-50 employeesMetasploit
- We have been able to weed out false positives with a more manual vetting of scanned vulnerabilities.
- Our teams have become more well versed in penetration testing with Metasploit to understand the vulnerabilities potentially present.
Senior Network Security Engineer
InsightInformation Technology and Services, 5001-10,000 employees