Checkmarx SAST Alternatives

Our overall experience with Veracode has been very positive. The platform helps us strengthen application security across multiple stages of development by identifying vulnerabilities early in the SDLC. Integration with CI/CD pipelines makes security testing more efficient and reduces manual efforts for developers. The dashboard and reporting features provide good visibility into security posture and remediation progress. Overall, it has been a reliable and valuable solution for improving secure development practices.

Our overall experience with Fluid Attacks has been extremely positive. Their platform is very user-friendly and intuitive, allowing for centralized vulnerability management and risk tracking. Another key differentiator is their team. The staff is always attentive and available to answer any questions or concerns, providing personalized support that makes our work as developers much easier. It's a service that not only detects vulnerabilities but also truly contributes to achieving our business objectives by enabling us to deliver secure software continuously.

We have engaged AppKnox for our app vulnerability assessment and VAPT requirements, and the overall experience has been structured and professional. Their team has been responsive from onboarding through report delivery and retesting. AppKnox's automated vulnerability assessment (SAST/DAST/API) combined with manual penetration testing produced detailed, actionable reports that helped our engineering team prioritize and remediate issues efficiently. Revalidation after fixes was handled promptly.

HCL AppScan has significantly enhanced our application security testing process and it's become an essential part of our day-to-day activities. It provides comprehensive and customizable AST reports, enabling us to scan apps throughout the development lifecycle and identify vulns early. The platform is robust and supports scans at scale.

We use GitLab mainly for source code management, CI/CD pipelines, and collaboration between development teams. Having repository management, pipelines, and issue tracking in one platform helps simplify the development workflow and reduces the need for multiple separate tools. The CI/CD integration works well and is flexible enough for different deployment scenarios. Merge request and branch management features also help improve collaboration during development. Initial setup was relatively straightforward, although optimizing runners and pipelines required some tuning depending on the environment. One challenge is that some advanced features have a learning curve, especially for teams that are new to DevOps practices. Pipeline troubleshooting can also become difficult when configurations grow more complex.

After moving some of our toolsets around, we had a gap related to web app scanning. We slide Invicti into place and it has been an awesome product, with no major issues. It was straightward to set up, and it's easily been a "fire and forget" kind of tool, as we automate pulling the reports.

The project manager and technical resource dedicated to our account is amazing. They anticipate our needs, assist us with implementation, answer every question asked, and are extremely professional.

Good quality software and very good communication with the support team to address issues.