What users are saying about

Checkmarx vs Nessus

Checkmarx
14 Ratings
Nessus
52 Ratings

Checkmarx

14 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>
Score 5.4 out of 100

Based on 14 reviews and ratings

Nessus

52 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>
Score 8.7 out of 100

Based on 52 reviews and ratings

Attribute Ratings

  • Nessus is rated higher in 1 area: Likelihood to Recommend

Likelihood to Recommend

6.0

Checkmarx

60%
2 Ratings
8.1

Nessus

81%
6 Ratings

Likelihood to Renew

Checkmarx

N/A
0 Ratings
9.1

Nessus

91%
1 Rating

Usability

Checkmarx

N/A
0 Ratings
9.7

Nessus

97%
2 Ratings

Support Rating

Checkmarx

N/A
0 Ratings
6.8

Nessus

68%
8 Ratings

Likelihood to Recommend

Checkmarx

It is well suited in cases where you wanna share reports with people that do not have a lot of knowledge in security concepts. It would help as the report has elaborate content explaining the issues and fix recommendations. If you want a SAST tool that gives fewer false positives, there are better options compared to Checkmarx. In cases where you want to do SAST scans regularly and quickly, Checkmarx may hold you back with its high count of false positives and lengthy reports.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Nessus

Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.

Read full review

Tejas Gandhi | TrustRadius Reviewer
Tejas Gandhi
View all 6 answers on this topic

Pros

Checkmarx

  • Supports a large number of languages
  • Finds a large variety of potential risks

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Nessus

  • With Nessus we can find the missing critical patches for a server or workstations.
  • Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up.
  • Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties.
  • Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation.

Read full review

Sohail Zende | TrustRadius Reviewer
Sohail Zende
View all 6 answers on this topic

Cons

Checkmarx

  • Scan duration
  • False positives
  • Integration with other tools like Jenkins comes with some inconveniences.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Nessus

  • Could use an upgrade within reports.
  • Scans can take a long time to complete. Have to break them down in small sections.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 6 answers on this topic

Pricing Details

Checkmarx

General

Free Trial
—
Free/Freemium Version
—
Premium Consulting/Integration Services
—
Entry-level set up fee?
No

Starting Price

—

Checkmarx Editions & Modules

—
Additional Pricing Details
—

Nessus

General

Free Trial
—
Free/Freemium Version
—
Premium Consulting/Integration Services
—
Entry-level set up fee?
No

Starting Price

$0

Nessus Editions & Modules

Edition
1 Year$2,790.00
1 Year + Advanced Support$3,190.00
2 Years$5,440.00
2 Years + Advanced Support$6,240.00
3 Years + Advanced Support$9,151.00
3 Years$7,951.00
  1. none
Additional Pricing Details
—

Likelihood to Renew

Checkmarx

No score
No answers yet
No answers on this topic

Nessus

Nessus 9.1
Based on 1 answer
Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.

Read full review

Sohail Zende | TrustRadius Reviewer
Sohail Zende
View all 1 answers on this topic

Usability

Checkmarx

No score
No answers yet
No answers on this topic

Nessus

Nessus 9.7
Based on 2 answers
It's very much a plug and play application that the user can go into with limited knowledge and set-up scans in minutes.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Support Rating

Checkmarx

No score
No answers yet
No answers on this topic

Nessus

Nessus 6.8
Based on 8 answers
I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 8 answers on this topic

Alternatives Considered

Checkmarx

We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Nessus

Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.

Read full review

Omar Israel Sánchez Monroy | TrustRadius Reviewer
Omar Israel Sánchez Monroy
View all 6 answers on this topic

Return on Investment

Checkmarx

  • Improved ability to provide high level of IA confidence
  • Improved confidence in application-level security

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Nessus

  • Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
  • The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
  • Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.

Read full review

Tejas Gandhi | TrustRadius Reviewer
Tejas Gandhi
View all 6 answers on this topic

Add comparison