Checkmarx vs. NordLayer

If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans.

Incentivized

NordLayer has become an invaluable resource for our security posture and day-to-day activity. The primary use case is preventing staff members from accessing sensitive resources on an unencrypted connection, applying NordLayer and conditional access policies in congruency. The ability to create teams and assigned them to specific dedicated servers is also helpful and allows for further security segmentation

Incentivized

• Detects security vulnerabilities in source code with accuracy and detail.
• Integrates seamlessly with CI/CD pipelines, IDEs, and repositories.
• Provides clear reports and actionable fix recommendations for developers.

Incentivized

• Easy to use
• Simple user interface desgin
• Support many VPN protocol
• Fast and reliable connection

Incentivized

• Scan duration
• False positives
• Integration with other tools like Jenkins comes with some inconveniences.

Incentivized

• The browser plugin needs some work, or some research about what browser/OS restrictions may limit its functionality. Ours does not work at all even after contacting support so we do not use it
• Toast/Windows notifications scheduled or deployed through admin center would be amazing. The ability to remind a user who has been disconnected for X hours would be a great feature

Incentivized

Their API based customizations which I leveraged to create an ASPM package, which is developer friendly and can extend above the dashboard features, other ones are UI which is great and feels clutter free. Menu and navigation is also good so as support. Only drawback is sometimes scan takes longer which I feel so can be reduced

Incentivized

Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems

Incentivized

easy configuration and use case

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized

• Improved sercurity
• Incresed productivity
• Performance impact

Incentivized