Alternatives to Checkmarx logo

Alternatives to Checkmarx

SonarQube, Veracode, Black Duck, WhiteSource, and Snyk are the most popular alternatives and competitors to Checkmarx.
30
53
+ 1
0

What is Checkmarx and what are its top alternatives?

It is a provider of state-of-the-art application security solution: static code analysis software, seamlessly integrated into development process.
Checkmarx is a tool in the Security category of a tech stack.
Checkmarx is an open source tool with GitHub stars and GitHub forks. Here鈥檚 a link to Checkmarx's open source repository on GitHub

Top Alternatives to Checkmarx

  • SonarQube

    SonarQube

    SonarQube provides an overview of the overall health of your source code and even more importantly, it highlights issues found on new code. With a Quality Gate set on your project, you will simply fix the Leak and start mechanically improving. ...

  • Veracode

    Veracode

    It seamlessly integrates application security into the software lifecycle, effectively eliminating vulnerabilities during the lowest-cost point in the development/deployment chain, and blocking threats while in production. ...

  • Black Duck

    Black Duck

    It is a solution that helps development teams manage risks that come with the use of open source. It gives you complete visibility into open source management, combining sophisticated, multi-factor open source detection capabilities with the Black Duck KnowledgeBase. ...

  • WhiteSource

    WhiteSource

    The leading solution for agile open source security and license compliance management, WhiteSource integrates with the DevOps pipeline to detect vulnerable open source libraries in real-time. ...

  • Snyk

    Snyk

    Fix vulnerabilities in Node & npm dependencies with a click.

  • OpenSSL

    OpenSSL

    It is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. It is also a general-purpose cryptography library. ...

  • Let's Encrypt

    Let's Encrypt

    It is a free, automated, and open certificate authority brought to you by the non-profit Internet Security Research Group (ISRG). ...

  • Ensighten

    Ensighten

    Ensighten is a comprehensive website security company, offering next generation compliance, enforcement and client-side protection against data loss, ad injection and intrusion. ...

Checkmarx alternatives & related posts

related SonarQube posts

Simon Reymann
Senior Fullstack Developer at QUANTUSflow Software GmbH | 27 upvotes 路 1.8M views

Our whole DevOps stack consists of the following tools:

  • GitHub (incl. GitHub Pages/Markdown for Documentation, GettingStarted and HowTo's) for collaborative review and code management tool
  • Respectively Git as revision control system
  • SourceTree as Git GUI
  • Visual Studio Code as IDE
  • CircleCI for continuous integration (automatize development process)
  • Prettier / TSLint / ESLint as code linter
  • SonarQube as quality gate
  • Docker as container management (incl. Docker Compose for multi-container application management)
  • VirtualBox for operating system simulation tests
  • Kubernetes as cluster management for docker containers
  • Heroku for deploying in test environments
  • nginx as web server (preferably used as facade server in production environment)
  • SSLMate (using OpenSSL) for certificate management
  • Amazon EC2 (incl. Amazon S3) for deploying in stage (production-like) and production environments
  • PostgreSQL as preferred database system
  • Redis as preferred in-memory database/store (great for caching)

The main reason we have chosen Kubernetes over Docker Swarm is related to the following artifacts:

  • Key features: Easy and flexible installation, Clear dashboard, Great scaling operations, Monitoring is an integral part, Great load balancing concepts, Monitors the condition and ensures compensation in the event of failure.
  • Applications: An application can be deployed using a combination of pods, deployments, and services (or micro-services).
  • Functionality: Kubernetes as a complex installation and setup process, but it not as limited as Docker Swarm.
  • Monitoring: It supports multiple versions of logging and monitoring when the services are deployed within the cluster (Elasticsearch/Kibana (ELK), Heapster/Grafana, Sysdig cloud integration).
  • Scalability: All-in-one framework for distributed systems.
  • Other Benefits: Kubernetes is backed by the Cloud Native Computing Foundation (CNCF), huge community among container orchestration tools, it is an open source and modular tool that works with any OS.
See more
Ganesa Vijayakumar
Full Stack Coder | Module Lead | 18 upvotes 路 1.9M views

I'm planning to create a web application and also a mobile application to provide a very good shopping experience to the end customers. Shortly, my application will be aggregate the product details from difference sources and giving a clear picture to the user that when and where to buy that product with best in Quality and cost.

I have planned to develop this in many milestones for adding N number of features and I have picked my first part to complete the core part (aggregate the product details from different sources).

As per my work experience and knowledge, I have chosen the followings stacks to this mission.

UI: I would like to develop this application using React, React Router and React Native since I'm a little bit familiar on this and also most importantly these will help on developing both web and mobile apps. In addition, I'm gonna use the stacks JavaScript, jQuery, jQuery UI, jQuery Mobile, Bootstrap wherever required.

Service: I have planned to use Java as the main business layer language as I have 7+ years of experience on this I believe I can do better work using Java than other languages. In addition, I'm thinking to use the stacks Node.js.

Database and ORM: I'm gonna pick MySQL as DB and Hibernate as ORM since I have a piece of good knowledge and also work experience on this combination.

Search Engine: I need to deal with a large amount of product data and it's in-detailed info to provide enough details to end user at the same time I need to focus on the performance area too. so I have decided to use Solr as a search engine for product search and suggestions. In addition, I'm thinking to replace Solr by Elasticsearch once explored/reviewed enough about Elasticsearch.

Host: As of now, my plan to complete the application with decent features first and deploy it in a free hosting environment like Docker and Heroku and then once it is stable then I have planned to use the AWS products Amazon S3, EC2, Amazon RDS and Amazon Route 53. I'm not sure about Microsoft Azure that what is the specialty in it than Heroku and Amazon EC2 Container Service. Anyhow, I will do explore these once again and pick the best suite one for my requirement once I reached this level.

Build and Repositories: I have decided to choose Apache Maven and Git as these are my favorites and also so popular on respectively build and repositories.

Additional Utilities :) - I would like to choose Codacy for code review as their Startup plan will be very helpful to this application. I'm already experienced with Google CheckStyle and SonarQube even I'm looking something on Codacy.

Happy Coding! Suggestions are welcome! :)

Thanks, Ganesa

See more
Veracode logo

Veracode

28
51
0
A simpler and more scalable way to increase the resiliency of your global application infrastructure
28
51
+ 1
0
PROS OF VERACODE
    No pros available
    CONS OF VERACODE
      No cons available

      related Veracode posts

      Black Duck logo

      Black Duck

      16
      43
      0
      Open Source Security & License tracking
      16
      43
      + 1
      0
      PROS OF BLACK DUCK
        No pros available
        CONS OF BLACK DUCK
          No cons available

          related Black Duck posts

          WhiteSource logo

          WhiteSource

          9
          29
          0
          Find & fix security and compliance issues in open source libraries in real-time
          9
          29
          + 1
          0
          PROS OF WHITESOURCE
            No pros available
            CONS OF WHITESOURCE
              No cons available

              related WhiteSource posts

              Bryan Dady
              SRE Manager at Subsplash | 3 upvotes 路 135.5K views

              I'm beginning to research the right way to better integrate how we achieve SCA / shift-left / SecureDevOps / secure software supply chain. If you use or have evaluated WhiteSource, Snyk, Sonatype Nexus, SonarQube or similar, I would very much appreciate your perspective on strengths and weaknesses and how you selected your ultimate solution. I want to integrate with GitLab CI.

              See more
              Snyk logo

              Snyk

              495
              142
              2
              Fix vulnerabilities in Node & npm dependencies with a click
              495
              142
              + 1
              2
              CONS OF SNYK
                No cons available

                related Snyk posts

                Bryan Dady
                SRE Manager at Subsplash | 3 upvotes 路 135.5K views

                I'm beginning to research the right way to better integrate how we achieve SCA / shift-left / SecureDevOps / secure software supply chain. If you use or have evaluated WhiteSource, Snyk, Sonatype Nexus, SonarQube or similar, I would very much appreciate your perspective on strengths and weaknesses and how you selected your ultimate solution. I want to integrate with GitLab CI.

                See more
                OpenSSL logo

                OpenSSL

                7.6K
                2.3K
                0
                Full-featured toolkit for the Transport Layer Security and Secure Sockets Layer protocols
                7.6K
                2.3K
                + 1
                0
                PROS OF OPENSSL
                  No pros available
                  CONS OF OPENSSL
                    No cons available

                    related OpenSSL posts

                    Simon Reymann
                    Senior Fullstack Developer at QUANTUSflow Software GmbH | 27 upvotes 路 1.8M views

                    Our whole DevOps stack consists of the following tools:

                    • GitHub (incl. GitHub Pages/Markdown for Documentation, GettingStarted and HowTo's) for collaborative review and code management tool
                    • Respectively Git as revision control system
                    • SourceTree as Git GUI
                    • Visual Studio Code as IDE
                    • CircleCI for continuous integration (automatize development process)
                    • Prettier / TSLint / ESLint as code linter
                    • SonarQube as quality gate
                    • Docker as container management (incl. Docker Compose for multi-container application management)
                    • VirtualBox for operating system simulation tests
                    • Kubernetes as cluster management for docker containers
                    • Heroku for deploying in test environments
                    • nginx as web server (preferably used as facade server in production environment)
                    • SSLMate (using OpenSSL) for certificate management
                    • Amazon EC2 (incl. Amazon S3) for deploying in stage (production-like) and production environments
                    • PostgreSQL as preferred database system
                    • Redis as preferred in-memory database/store (great for caching)

                    The main reason we have chosen Kubernetes over Docker Swarm is related to the following artifacts:

                    • Key features: Easy and flexible installation, Clear dashboard, Great scaling operations, Monitoring is an integral part, Great load balancing concepts, Monitors the condition and ensures compensation in the event of failure.
                    • Applications: An application can be deployed using a combination of pods, deployments, and services (or micro-services).
                    • Functionality: Kubernetes as a complex installation and setup process, but it not as limited as Docker Swarm.
                    • Monitoring: It supports multiple versions of logging and monitoring when the services are deployed within the cluster (Elasticsearch/Kibana (ELK), Heapster/Grafana, Sysdig cloud integration).
                    • Scalability: All-in-one framework for distributed systems.
                    • Other Benefits: Kubernetes is backed by the Cloud Native Computing Foundation (CNCF), huge community among container orchestration tools, it is an open source and modular tool that works with any OS.
                    See more
                    Let's Encrypt logo

                    Let's Encrypt

                    1.5K
                    895
                    93
                    A free, automated, and open Certificate Authority (CA)
                    1.5K
                    895
                    + 1
                    93
                    CONS OF LET'S ENCRYPT
                      No cons available

                      related Let's Encrypt posts

                      Ensighten logo

                      Ensighten

                      394
                      6
                      0
                      Website Security & Privacy Compliance
                      394
                      6
                      + 1
                      0
                      PROS OF ENSIGHTEN
                        No pros available
                        CONS OF ENSIGHTEN
                          No cons available

                          related Ensighten posts