Checkmarx vs. Trend Micro Cloud One - Application Security

Checkmarx works best in organizations with secure development practices where code is regularly scanned during development. It's ideal for CI/CD pipelines, ensuring vulnerabilities are caught early. Checkmarx might not be the best for old systems that aren’t updated often, as setting it up can take time. It’s also less useful for teams that mostly use third-party libraries instead of writing their own code.

Incentivized

Scenarios where it's well suited - 1) AWS cloud environments where application security and ZTN is a must. 2) One-stop-shop for centralized discovery of apps/workloads. 3) Custom reporting client needs. 4) CI/CD pipeline - easy to design DevOps cycles.

Incentivized

• Reporting
• Language support
• Fix recommendations

Incentivized

• Easy integration with AWS environment
• holistic protection - workload and network security
• Monitoring capabilities - SIEM tools which helps in RCA analysis.

Incentivized

• Lots of false positives
• Hard to integrate with CI

Incentivized

• Found a tad difficult in case of hybrid cloud environments - VMware specific etc
• API calls did not work well with only a few applications ( SNOW etc), most of it is fine
• Professional services / Support - dedicated customer support should be more proactive, flexible

Incentivized

Checkmarx's usability is generally good, but it can be a bit complex for new users. The interface may take some time to get used to, especially for those unfamiliar with security tools. Once you become familiar with it, it’s effective and integrates well into development workflows.

Incentivized

We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Incentivized

1) flexible customer support and PoV assistance as compared to other vendors 2) Quick TAT turnaround, and easy sampling - Automation features are smooth to use and leverage 3) Our client was interested in this solution since they heard it from one of their other partners from USA - So, this solution was already a step ahead, we just had to pick it up and get used to it

Incentivized

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized

• Our single PoV helped few customers already - RoI return - Excellent
• GTM strategy - Go to Market worked - Saved potentially 500k USD minimum for client - within few months
• Allianz assistance - client support in planning helped to further smoothen the RoI cycle, we have planned upto FY 23 for our healthcare client

Incentivized