Checkmarx vs. Rapid7 AppSpider

Checkmarx

20 Reviews and Ratings

Rapid7 AppSpider

Rapid7 AppSpider

6 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Checkmarx	Score 8.2 out of 10	N/A	Checkmarx, an Israeli headquartered company with US offices, provides a suite of application security software delivered via the Checkmarx Software Security Platform. Individual modules and capabilities include Checkmarx Static Application Security Testing, Checkmarx Software Composition Analysis, Checkmarx Interactive Application Security Testing (CxIAST)	N/A
Rapid7 AppSpider	Score 8.6 out of 10	N/A	AppSpider, from Boston-based Rapid7, is an application security and testing offering based on technology acquired from NT OBJECTives (their similarly named software NTOSpider, acquired with the company during April, 2015).	$2,000 Per Application

Pricing

Checkmarx

Rapid7 AppSpider

Editions & Modules

No answers on this topic

InsightAppSec: $2,000.00
Per Application

Offerings

Pricing Offerings
Checkmarx	Rapid7 AppSpider
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

No setup fee

Additional Details

—

—

More Pricing Information

Community Pulse
	Checkmarx	Rapid7 AppSpider
Top Pros	Pro False positive Pro Data flow Pro Number of languages	Pro Single page Pro Web applications
Top Cons	Minus False positives Minus Additional plugins Minus Hard to integrate	Minus Rest api

Best Alternatives
	Checkmarx	Rapid7 AppSpider
Small Businesses	GitLab Score 8.9 out of 10	GitLab Score 8.9 out of 10
Medium-sized Companies	GitLab Score 8.9 out of 10	GitLab Score 8.9 out of 10
Enterprises	GitLab Score 8.9 out of 10	GitLab Score 8.9 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Checkmarx	Rapid7 AppSpider
Likelihood to Recommend	7.0 (3 ratings)	8.0 (2 ratings)

User Testimonials
	Checkmarx	Rapid7 AppSpider
Likelihood to Recommend	Checkmarx Chechmarx is really suited for finding wide range of security risks. It although identifies false positives which can be confusing at times. It can do better in terms of scan duration. They are better alternate competitors in the market who can do equally good or even better. It all depends on the scope of the problem you want to address Incentivized Verified User Anonymous Read full review	Rapid7 Rapid7 AppSpider could be your default DAST (Dynamic Application Security Testing), it covers the OWASP top 10 for web and APIs. Great tools, with a very nice and understandable report and analytics, work excellent for one-shot or continuous monitoring of your web assets. Also has a fair amount of integrations with other popular tools. Incentivized Randy Varela Offensive Security Engineer Lead Read full review
Pros	Checkmarx Reporting Language support Fix recommendations Incentivized Verified User Anonymous Read full review	Rapid7 Does a great job scanning Single Page Apps as well as APIs etc. We use this weekly and have faced no scan errors due to process failures or accidentally DoSing etc. Incentivized Verified User Anonymous Read full review
Cons	Checkmarx Lots of false positives Hard to integrate with CI Incentivized Verified User Anonymous Read full review	Rapid7 Scan might be slow compared to other tools. Not a lot of training on the vendor side. Incentivized Randy Varela Offensive Security Engineer Lead Read full review
Alternatives Considered	Checkmarx We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make. Incentivized Verified User Anonymous Read full review	Rapid7 BurpSuite isn't a competitor necessarily but still for the price of a few hundred dollars per user it is a great tool, however, AppSpider blew it out of the water with its accuracy in terms of vulnerabilities reported as well as other aspects such as UI, customer support etc. Incentivized Verified User Anonymous Read full review
Return on Investment	Checkmarx Improved ability to provide high level of IA confidence Improved confidence in application-level security Incentivized Verified User Anonymous Read full review	Rapid7 Great ROI for consultant projects. Incentivized Randy Varela Offensive Security Engineer Lead Read full review
ScreenShots