Checkmarx vs. Pantheon

If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans.

Incentivized

Pantheon is excellent for medium-large websites that require high availability and a managed workflow. It would be inappropriate for small websites because of the cost or for situations where more control of the environment is appropriate. We find it useful because we rarely do anything outside of the Drupal application.

Incentivized

• Detects security vulnerabilities in source code with accuracy and detail.
• Integrates seamlessly with CI/CD pipelines, IDEs, and repositories.
• Provides clear reports and actionable fix recommendations for developers.

Incentivized

• Effective use of our codebase deployment and implementation.
• The dashboard functionality and general stability and security are excellent.
• The server is quite consistent, and if you need assistance from the support team, they are very quick to respond.
• Automatic updates let me ensure that my customers have safe websites without increasing my own expense.
• The team offers excellent assistance and help for chat.

Incentivized

• Scan duration
• False positives
• Integration with other tools like Jenkins comes with some inconveniences.

Incentivized

• Pricing structure has too large of a jump between Basic and Performance plans
• Have run into issues with prescribed WP updates not working through dashboard and having to do manually.
• Pantheon site dashboard occasionally is unavailable (the site is never affected though)

Incentivized

The environment is stable and we have not had any issues/downtime. The annual cost is reasonable.

Incentivized

Their API based customizations which I leveraged to create an ASPM package, which is developer friendly and can extend above the dashboard features, other ones are UI which is great and feels clutter free. Menu and navigation is also good so as support. Only drawback is sometimes scan takes longer which I feel so can be reduced

Incentivized

Pantheon is an easy system, especially to the users with previous experience with other similar platform and the interface is clear enough to easily understand how things operates. On the Cloud deployment everything also works effectively and the technical team from Pantheon community are very helpful on providing the necessary assistant to their customers.

Incentivized

Even tier 1 Pantheon chat and ticket support are knowledgeable, competent, and useful. They routinely understand and promptly resolve urgent, complex, and/or unusual issues that other hosts need to escalate to tier 2 or tier 3 support personnel. I honestly can't think of a truly negative or disappointing support experience in the years I've used Pantheon hosting for client websites.

Incentivized

Once the environments were up and running, the implementation was easy to synchronize with latest data prior to switchover.

Incentivized

Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems

Incentivized

Although it may seem a good fit for a company that needs extra control over the deployment process and development process, for a firm that is mainly concentrating on SEO, it would be an overkill. Pantheon provides that sweet automation that allows us to shed some weight on development and focus on our business activities.

Incentivized

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized

• Pantheon allows ordinary sites to excel esp if there is consistent development going on behind the scenes.
• Website management is super easy and the hosting fee gets paid off as you save on developer hours.
• Expensive for those who are not consistently developing on the platform, there are other options out there at better price points.

Incentivized