Checkmarx Reviews, Ratings & Features 2026 | Gartner Peer Insights

The mobile AST market is composed of buyers and sellers of products and services that analyze and identify vulnerabilities in applications used with mobile platforms (iOS, Android and Windows 10 Mobile) during or post development. Many variations and flavors of techniques exist, but fundamentally mobile AST solutions test applications in three main ways: (1) SAST: These solutions statically analyze the source, binary or bytecode of an application to identify vulnerabilities. (2) Behavioral testing: Mobile AST solutions use behavioral analysis to observe the behavior of the app during runtime and identify actions that could be exploited by an attacker. (3) DAST: These solutions also use dynamic analysis to test the app in its runtime state. DAST simulates attacks against an application and analyzes the application's reactions, determining whether it is vulnerable.

Active

Find the top Mobile App Security Testing Tools with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Mobile Application Security Testing

Checkmarx SAST

Checkmarx

IT Security Service Specialist

Checkmarx has been responsive to our needs and requests and the help desk has been great.  We have integrated Static scanning into our build process in Jenkins and implemented failing builds for any high vulnerabilities found in the scan.  The IDE for self service static scans works well.  The product scans most languages that we commonly use with very few false/positives.

3B - 10B USD

50M - 250M USD

<50M USD

30B + USD

250M - 500M USD

500M - 1B USD

Director of Mobile and IoT Security

The tool has several static analysis rules that catch "low-hanging fruit" type of security vulnerabilities, but is overall cumbersome to leverage, hard to update, and not up-to-date with the fast-changing industry changes, notably mobile. 

Ing. Safety

It has significantly improved the security of our applications and the internal development process.
The development and security areas have more synergy and the final products are more secure and efficient. Checkmarx technical support is excelent.

Veracode

Other...

OpenText (Micro Focus)

Black Duck

NTT Application Security

HCLTech

Data Theorem

Checkmarx provides agentic application security, delivering enterprise-grade protection while lowering engineering costs and accelerating development velocity. The Checkmarx One platform scans trillions of lines of code each year for companies, cutting vulnerability density by more than half. Its autonomous security agents detect and counter AI-driven threats across the SDLC, providing prevention-first protection for legacy, modern, and AI-generated code at enterprise scale. 

Checkmarx is the Enterprise Application Security provider, offering the industry leading cloud-native platform, that builds DevSecTrust ‚Äì Checkmarx One‚Ñ¢.    
 
Fueled by intelligence from our industry leading AppSec security research team, our AI driven technology and services enable CISO, AppSec and Development leaders to prioritize their teams on what impacts their business.   
  
Our offering secures every phase of development for every application from the very first line of code until production (Shift Everywhere) while simultaneously balancing the dynamic needs of security and development teams.   
  
We are honored to serve more than 1,800 customers, including 60 percent of Fortune 100 organizations, and are committed to moving forward with an unwavering dedication to the safety and security of our customers and the applications that power our day-to-day lives.  
  
  
Checkmarx. Make Shift Happen.

Checkmarx is trusted by enterprises worldwide to secure their application development from code to cloud. Our consolidated platform and services balance the dynamic needs of enterprises by improving security and reducing TCO, while simultaneously building trust between AppSec, developers, and CISOs. At Checkmarx, we believe it’s not just about finding risk, but remediating it across the entire application footprint and software supply chain with one seamless process for all relevant stakeholders. 

Reviews

Ratings Overview

Overall experience with

Favorable Review

Excelent solution.

Critical Review

Basic Code Review tool

Likes and dislikes about

likes

dislikes