Checkmarx vs. Vulcan Cyber

Chechmarx is really suited for finding wide range of security risks. It although identifies false positives which can be confusing at times. It can do better in terms of scan duration. They are better alternate competitors in the market who can do equally good or even better. It all depends on the scope of the problem you want to address

Incentivized

It's really challenging at times to contend with multiple vulnerabilities on a daily basis, and having a way to make sense of what actually needs to be prioritized and what can be shifted further down the task list is extremely helpful. Because the solution suggests what your next step should be in mitigating a specific vulnerability, it helps us save time and research by enabling us to immediately take action after being informed about an issue.

Incentivized

• Reporting
• Language support
• Fix recommendations

Incentivized

• Alerting us to critical vulnerabilities
• Prioritizing the patch tasks that are most time-sensitive
• Providing a solution and roadmap to pressing issues

Incentivized

• Lots of false positives
• Hard to integrate with CI

Incentivized

• Auto-update feature could be streamlined

Incentivized

We actually use Checkmarx along with the other tools. However, the reason we chose Checkmarx is its wide support for languages and useful fix recommendations. The flowcharts help better understand the data flow and give a clear picture of what needs to be fixed and how. Also, developers can make a note of what should be avoided in the future. Overall, it's a great tool and would be a good investment to make.

Incentivized

Vulcan was easier to implement with our existing Security environment. The UX and UI were more intuitive and user-friendly. While SOAR is a super solid product, for our business Vulcan made more sense. It was more of a natural fit for a rapidly-expanding company in a hyper-growth phase using Edge technology.

Incentivized

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized

• Saving research hours for SecOps team
• Saving resolution hours for Security Engineering team
• Protecting the company from data breaches -- which could tremendously affect the business

Incentivized