What users are saying about

Checkmarx vs Onapsis

Checkmarx
14 Ratings
Onapsis
4 Ratings

Checkmarx

14 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>
Score 5.4 out of 100

Based on 14 reviews and ratings

Onapsis

4 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>
Score 8.8 out of 100

Based on 4 reviews and ratings

Attribute Ratings

  • Onapsis is rated higher in 1 area: Likelihood to Recommend

Likelihood to Recommend

6.0

Checkmarx

60%
2 Ratings
9.0

Onapsis

90%
3 Ratings

Likelihood to Recommend

Checkmarx

It is well suited in cases where you wanna share reports with people that do not have a lot of knowledge in security concepts. It would help as the report has elaborate content explaining the issues and fix recommendations. If you want a SAST tool that gives fewer false positives, there are better options compared to Checkmarx. In cases where you want to do SAST scans regularly and quickly, Checkmarx may hold you back with its high count of false positives and lengthy reports.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Onapsis

Onapsis is divided into 4 major components,
  1. Assess
  2. Comply
  3. Defend
  4. Control
In assess, it does a whitebox and blackbox testing of the ERP systems that have been added to the Onapsis console. It highlights relevant application issues and automates the process, also provides the solutions to implement the fix.In comply, it provides a governance on the various regulatory compliances which the firm has to follow, as well as provides a firm grip to the audit and ERP admin team.In control, it enables a workflow of 15 pre-defined parameter values within the SAP system and helps monitor, and track the changes made to those parameters. The capabilities are to either block, or request for an approval for changes made to those parameters in addition to just monitoring them.In defend, it goes through the SAP logs; and compares it with a pre-defined ruleset to alert the end-users via email or SIEM tool or both.

Read full review

Jineshwar Panchal | TrustRadius Reviewer
Jineshwar Panchal
View all 3 answers on this topic

Pros

Checkmarx

  • Supports a large number of languages
  • Finds a large variety of potential risks

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Onapsis

  • Eliminating the manual process improves the overall accuracy of results and also frees up valuable resources to focus on other different projects.
  • Onapsis provides great leverage to our technical teams in order to review in a standardized way of the landscape.
  • Onapsis always matches vulnerabilities with useful context and finds possible solutions.
  • Onapsis is usually implemented to continuously monitor, and alert us on any issues on the SAP systems. Not only this but implementing Onapsis also eliminates the network on the year-end and month-end audits and helps in making the overall process faster, smooth, efficient as well as accurate.

Read full review

Kelly Cokorudy | TrustRadius Reviewer
Kelly Cokorudy
View all 3 answers on this topic

Cons

Checkmarx

  • Scan duration
  • False positives
  • Integration with other tools like Jenkins comes with some inconveniences.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Onapsis

  • Multiple UIs
  • No proper customization of UI log-off
  • Tedious setup of Control component
  • No proper error messages received

Read full review

Jineshwar Panchal | TrustRadius Reviewer
Jineshwar Panchal
View all 3 answers on this topic

Pricing Details

Checkmarx

General

Free Trial
—
Free/Freemium Version
—
Premium Consulting/Integration Services
—
Entry-level set up fee?
No

Starting Price

—

Onapsis

General

Free Trial
—
Free/Freemium Version
—
Premium Consulting/Integration Services
—
Entry-level set up fee?
No

Starting Price

—

Alternatives Considered

Checkmarx

We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Onapsis

Honestly, I havent use something like Onapsis before and currently I am not aware if there is something similiar out there. They are one of a kind and is a complete suit, so is unlikelly that someone from outside will appear with a better solution.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 3 answers on this topic

Return on Investment

Checkmarx

  • Improved ability to provide high level of IA confidence
  • Improved confidence in application-level security

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Onapsis

  • It offers very reasonable packages.
  • The customer support of Onapsis is reliable and efficient.
  • It is a great platform as it shows a unified and easy-to-read different and complex topics in a simpler way.

Read full review

Kelly Cokorudy | TrustRadius Reviewer
Kelly Cokorudy
View all 3 answers on this topic

Add comparison