14 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>Score 5.4 out of 100
Based on 14 reviews and ratings
52 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>Score 8.7 out of 100
Based on 52 reviews and ratings
Attribute Ratings
- Nessus is rated higher in 1 area: Likelihood to Recommend
Likelihood to Recommend

6.0
Checkmarx
60%
2 Ratings
8.1
Nessus
81%
6 Ratings
Likelihood to Renew

Checkmarx
N/A
0 Ratings
9.1
Nessus
91%
1 Rating
Usability

Checkmarx
N/A
0 Ratings
9.7
Nessus
97%
2 Ratings
Support Rating

Checkmarx
N/A
0 Ratings
6.8
Nessus
68%
8 Ratings
Likelihood to Recommend
Checkmarx
It is well suited in cases where you wanna share reports with people that do not have a lot of knowledge in security concepts. It would help as the report has elaborate content explaining the issues and fix recommendations. If you want a SAST tool that gives fewer false positives, there are better options compared to Checkmarx. In cases where you want to do SAST scans regularly and quickly, Checkmarx may hold you back with its high count of false positives and lengthy reports.

Verified User
Engineer in Research & Development
Public Relations & Communications Company, 1001-5000 employeesNessus
Nessus is perfectly suitable for performing comprehensive vulnerability assessment scans being a vulnerability scanner. It is less appropriate for performing penetration testing since it is not a penetration testing tool, it does not have the ability and modules to exploit the vulnerabilities of the system.
Associate Security Consultant
SISA Information SecurityInformation Technology and Services, 201-500 employees
Pros
Checkmarx
- Supports a large number of languages
- Finds a large variety of potential risks

Verified User
Team Lead in Research & Development
Internet Company, 11-50 employeesNessus
- With Nessus we can find the missing critical patches for a server or workstations.
- Nessus points out any vulnerable or outdated software Technologies used in the system, thus eliminating any chances for security flaws being turned up.
- Nessus typically points any configuration level issues in accordance with the OWASP guidelines. Even the configuration of SSL related which are most of the time handled by some vendors or 3rd parties.
- Nessus not only lists out these Vulnerabilities but describes clearly the vulnerabilities in details with its thousands of plugins updated regularly, the tool also recommends solution with practical details of easy implementation.
Network Security Consultant
Digitalage Strategies Pvt LTDComputer & Network Security, 51-200 employees
Cons
Checkmarx
- Scan duration
- False positives
- Integration with other tools like Jenkins comes with some inconveniences.

Verified User
Engineer in Research & Development
Public Relations & Communications Company, 1001-5000 employeesNessus
- Could use an upgrade within reports.
- Scans can take a long time to complete. Have to break them down in small sections.

Verified User
Engineer in Information Technology
Hospital & Health Care Company, 1001-5000 employeesPricing Details
Checkmarx
General
Free Trial
—Free/Freemium Version
—Premium Consulting/Integration Services
—Entry-level set up fee?
No
Starting Price
—Checkmarx Editions & Modules
—
Additional Pricing Details
—Nessus
General
Free Trial
—Free/Freemium Version
—Premium Consulting/Integration Services
—Entry-level set up fee?
No
Starting Price
$0
Nessus Editions & Modules
Edition
1 Year | $2,790.00 |
---|---|
1 Year + Advanced Support | $3,190.00 |
2 Years | $5,440.00 |
2 Years + Advanced Support | $6,240.00 |
3 Years + Advanced Support | $9,151.00 |
3 Years | $7,951.00 |
- none
Additional Pricing Details
—Likelihood to Renew
Checkmarx
No score
No answers yet
No answers on this topic
Nessus
Nessus 9.1
Based on 1 answer
Nessus is best and easy to use application for Vulnerabilities finding and reporting, it has multiple platforms and wide scope covering almost all devices for security improvement so far, thus we are very likely to continue its services.
Network Security Consultant
Digitalage Strategies Pvt LTDComputer & Network Security, 51-200 employees
Usability
Checkmarx
No score
No answers yet
No answers on this topic
Nessus
Nessus 9.7
Based on 2 answers
It's very much a plug and play application that the user can go into with limited knowledge and set-up scans in minutes.

Verified User
Technician in Information Technology
Mental Health Care Company, 201-500 employeesSupport Rating
Checkmarx
No score
No answers yet
No answers on this topic
Nessus
Nessus 6.8
Based on 8 answers
I haven't needed to contact support yet. But issues are easily solved with a quick internet search which means support and by extension, the larger community are involved and knowledgeable.

Verified User
Technician in Information Technology
Mental Health Care Company, 201-500 employeesAlternatives Considered
Checkmarx
We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Verified User
Engineer in Research & Development
Public Relations & Communications Company, 1001-5000 employeesNessus
Sometimes when we identify a vulnerability with Nessus that has an exploit, we made a proof of concept with Metasploit in order to show to the IT managers the importance of the software/hardware hardening.
Auditor de Seguridad de la Información
PeñolesMining & Metals, 5001-10,000 employees
Return on Investment
Checkmarx
- Improved ability to provide high level of IA confidence
- Improved confidence in application-level security

Verified User
Team Lead in Research & Development
Internet Company, 11-50 employeesNessus
- Nessus certainly has a positive impact while me while performing my job, either as security research, or performing vulnerability assessments for clients. It gives a lot of information about the system/application after performing scans. The number of false positives is also less compared to other vulnerability scanners.
- The professional edition is very useful as policy templates available in this edition are very handy and useful even to perform compliance scan like PCI DSS scan.
- Also, the ability to export the scan results into reports in formats like HTML, PDF is very useful which could be for performing system/application reviews.
Associate Security Consultant
SISA Information SecurityInformation Technology and Services, 201-500 employees