Checkmarx vs. PyCharm

Chechmarx is really suited for finding wide range of security risks. It although identifies false positives which can be confusing at times. It can do better in terms of scan duration. They are better alternate competitors in the market who can do equally good or even better. It all depends on the scope of the problem you want to address

Incentivized

It's easy to create virtual environments and install packages for different projects as we may need project-specific packages for doing our experiments, also it's easy to see what changes we have made and create pull requests faster. But sometimes we want some light python editor like Jupiter notebook as PyCharm is relatively heavier, also Jupiter notebooks are a good option when we need to run remote code on local machines.

Incentivized

• Reporting
• Language support
• Fix recommendations

Incentivized

• Git integration is really essential as it allows anyone to visually see the local and remote changes, compare revisions without the need for complex commands.
• Complex debugging tools are basked into the IDE. Controls like break on exception are sometimes very helpful to identify errors quickly.
• Multiple runtimes - Python, Flask, Django, Docker are native the to IDE. This makes development and debugging and even more seamless.
• Integrates with Jupyter and Markdown files as well. Side by side rendering and editing makes it simple to develop such files.

Incentivized

• Lots of false positives
• Hard to integrate with CI

Incentivized

• The biggest complaint I have about PyCharm is that it can use a lot of RAM which slows down the computer / IDE. I use the paid version, and have otherwise found nothing to complain about the interface, utility, and capabilities.

Incentivized

It's perfect for our needs, cuts development time, is really helpful for newbies to understand projects structure

Incentivized

I rate 10/10 because I have never needed a direct customer support from the JetBrains so far. Whenever and for whatever kind of problems I came across, I have been able to resolve it within the internet community, simply by Googling because turns out most of the time, it was me who lacked the proper information to use the IDE or simply make the proper configuration. I have never came across a bug in PyCharm either so it deserves 10/10 for overall support

Incentivized

We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Incentivized

PyCharm is the best IDE for python development. PyCharm offers various features: source code completion, support for unit testing, integration with Docker/GitLab/Git, ability to manage and configure virtual environments, auto-indentation, and re-factoring code with ease. Support for JSON/Shell scripts and support for Flask/Django Other tools are effective for creating isolated scripts but not for handling projects with more than two scripts.

Incentivized

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized

• Buying the licensed pro version is a bit costly, but overall because of its features and its speed, the time taken by a developer to develop something can be improved. Indirectly getting a good return of Investment.
• Considering the team size and its features, one can go for the licensed version as the ROI is high.
• Customer support is also good for a licensed version, thereby saving the time, which in turn shows ROI as high.

Incentivized