Checkmarx vs. ZAP Data Hub

If you are going with SAST process or want to improve overall security posture then go for it like integrating it with post deployment steps. If you are more concerned about proactive controls better choose other options such as pee-commit hooks and CI security. Also choose other tools for DAST and API scans.

Incentivized

ZAP is an incredible tool for those IT Organizations that need to stay lean. Within days, I was able to implement the ZAP solution instead of hiring Developers and ETL developers to tie into multiple Data infrastructures.

Incentivized

• Detects security vulnerabilities in source code with accuracy and detail.
• Integrates seamlessly with CI/CD pipelines, IDEs, and repositories.
• Provides clear reports and actionable fix recommendations for developers.

Incentivized

• Extremely Robust Interface
• Implementation and Connection to Data Stores extremely fast. I was able to implement BI reporting within days.
• Fantastic Support
• Cost Effective Tool for any IT organization. Reduction in FTE, Data Reporting Deployment, and Cube Creation.

Incentivized

• Scan duration
• False positives
• Integration with other tools like Jenkins comes with some inconveniences.

Incentivized

• I would love to see a strong integration with Google Analytics. ZAP works great with CRM platforms but would be interested to get the metrics on how marketing campaigns are tied to organic traffic and PPC.

Incentivized

Their API based customizations which I leveraged to create an ASPM package, which is developer friendly and can extend above the dashboard features, other ones are UI which is great and feels clutter free. Menu and navigation is also good so as support. Only drawback is sometimes scan takes longer which I feel so can be reduced

Incentivized

Checkmarx is easier to integrate with development tools and gives quick feedback during coding, which is helpful for developers. Veracode is more focused on scanning and reporting for compliance, but it’s more complex to set up. We chose Checkmarx because it fits better into our development process, offering faster scans and more useful suggestions for fixing problems

Incentivized

ZAP has a better interface and user-friendly.

Incentivized

• Improved ability to provide high level of IA confidence
• Improved confidence in application-level security

Incentivized