Checkmarx, an Israeli headquartered company with US offices, provides a suite of application security software delivered via the Checkmarx Software Security Platform. Individual modules and capabilities include Checkmarx Static Application Security Testing, Checkmarx Software Composition Analysis, Checkmarx Interactive Application Security Testing (CxIAST)
N/A
Visual Studio
Score 8.7 out of 10
N/A
Visual Studio (now in the 2022 edition) is a 64-bit IDE that makes it easier to work with bigger projects and complex workloads, boasting a fluid and responsive experience for users. The IDE features IntelliCode, its automatic code completion tools that understand code context and that can complete up to a whole line at once to drive accurate and confident coding.
If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans.
When working with base C# code for desktop and web projects, then Microsoft Visual Studio is ideal as it provides the libraries and interfaces needed to quickly create, test and deploy solutions. It is when slightly more complex scenarios are required that issues can arise. The built-in integration for things like PowerBI Paginated Reports and dashboards is far from ideal.
VS is the best and is required for building Microsoft applications. The quality and usefulness of the product far out-weight the licensing costs associated with it.
Their API based customizations which I leveraged to create an ASPM package, which is developer friendly and can extend above the dashboard features, other ones are UI which is great and feels clutter free. Menu and navigation is also good so as support. Only drawback is sometimes scan takes longer which I feel so can be reduced
I love the overall usability of Microsoft Visual Studio. I’ve been using this IDE for more than 20 years, and I’ve seen it evolve by leaps and bounds. Today, with AI and code-suggestion/completion features, developers no longer need to remember countless libraries, methods, or language syntax, or invest a huge amount of programming effort to complete a project. It truly offers everything a developer needs to program, debug, test, and deploy in a single IDE.
There are many resources available supporting Visual Studio IDE. Microsoft whitepapers, forum posts, and online Visual Studio documentation. There are countless demonstration videos available, as well. If users are having issues, they can call Microsoft Support, but depending on the company's agreement with Microsoft, the number of included support calls will vary from organization to organization. I've found that Microsoft support calls can be hit or miss depending on who you get, but they can usually get you with the right support person for your issue.
IT is very complicated to understand all the functions that the environment has if you are not familiar with this type of development environments. It is important to select a good in-person training to achieve to understand all the possibilities and the capacity of the application. In this case, you will be able to develop a lot type of different applications.
If you are not accustomed to develop in this type of development environments it would be complicated to follow all the parts of the course because if the course does not include a great tour with all the concepts to develop you will not have the option to understand all the functions.
Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems
I personally feel Visual Studio IDE has [a] better interface and [is more] user friendly than other IDEs. It has better code maintainability and intellisense. Its inbuilt team foundation server help coders to check on their code then and go. Better nugget package management, quality testing and gives features to extract TRX file as result of testing which includes all the summary of each test case.
Using the integration between Visual Studio and our source control service, the cost of re-work and losing code is drastically reduced.
Paid versions of Visual Studio enable developers to be so much more productive than hacked-together open source solutions that it's hard to imagine developing in Windows without it.
When combined with support subscriptions and the vast array of free online help options available, Visual Studio saves our developers time by keeping them coding and testing, not wasting their time trying to guess their way out of problems or spend endless hours online hoping to find answers.
