Checkmarx One vs Parasoft SOAtest comparison

Checkmarx One
Read 67 Checkmarx One reviews
  • 31,565 Views
  • 20,243 Comparison Views
86% willing to recommend
Parasoft SOAtest
Read 30 Parasoft SOAtest reviews
  • 1,106 Views
  • 742 Comparison Views
92% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between Checkmarx One and Parasoft SOAtest based on real PeerSpot user reviews.

Find out in this report how the two Static Application Security Testing (SAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Checkmarx One vs. Parasoft SOAtest Report (Updated: May 2024).
Buyer's Guide
Checkmarx One vs. Parasoft SOAtest
May 2024
Download the complete report
Helped 787,061 peers since 2012
 

Categories and Ranking

Checkmarx One
Ranking in Static Application Security Testing (SAST)
3rd
Average Rating
7.6
Number of Reviews
67
Ranking in other categories
Application Security Tools (3rd), Vulnerability Management (11th), Static Code Analysis (2nd), API Security (4th), DevSecOps (2nd), Risk-Based Vulnerability Management (5th)
Parasoft SOAtest
Ranking in Static Application Security Testing (SAST)
29th
Average Rating
8.2
Number of Reviews
30
Ranking in other categories
Functional Testing Tools (24th), API Testing Tools (9th), Test Automation Tools (21st)
 

Market share comparison

As of June 2024, in the Static Application Security Testing (SAST) category, the market share of Checkmarx One is 10.2% and it decreased by 20.5% compared to the previous year. The market share of Parasoft SOAtest is 0.4% and it increased by 12.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST)
Unique Categories:
Application Security Tools
13.2%
Vulnerability Management
1.3%
Functional Testing Tools
0.5%
API Testing Tools
2.4%
 

Featured Reviews

RB
Jul 11, 2022
Useful automation , detailed reports, but scalability could improve
We use Checkmarx as a code analysis tool We have always used some kind of code analysis tool and Checkmarx has been working for us at this time. We like the tool. The most valuable feature of Checkmarx are the automation and information that it provides in the reports. I am using Checkmarx for…
Read full review
Milind Parab - PeerSpot reviewer
Jan 3, 2023
Useful for automated SQA, certifications, but the summary reports could improve
The summary reports could be improved because sometimes it is not very concise. The waiver process can also be improved because Parasoft SQAtest doesn't have a method to waive off one rule. Additionally, adding some guidance on providing standard templates could be helpful for new engineers or in complexity reduction. It could be sustained in a better way because it currently just gives the number that is a level of looping or callings. Hence, if something can be improved to refactor the code, then it should be code restructuring and all the information that can be provided to look at the complexity of the code.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The SAST component was absolutely 100% stable."
"The setup is fairly easy. We didn't struggle with the process at all."
"The most valuable feature is the simple user interface."
"We use the solution to validate the source code and do SAST and security analysis."
"It allows for SAST scanning of uncompiled code. Further, it natively integrates with all key repos formats (Git, TFS, SVN, Perforce, etc)."
"The administration in Checkmarx is very good."
"The value you can get out of the speedy production may be worth the price tag."
"The UI is user-friendly."
More Checkmarx One pros
"The testing time is shortened because we generate test data automatically with SOAtest."
"Technical support is helpful."
"They have a feature where they can record traffic and create tests on the report traffic."
"If you want something that’s not provided out of the box, then you can write it yourself and integrate it with SOAtest."
"Every imaginable source in the entire world of information technology can be accessed and used."
"Automatic testing is the most valuable feature."
"Generating new messages, based on the existing .EDN and .XML messages, is a crucial part or the testing project that I’m currently in."
"Since the solution has both command line and automation options, it generates good reports."
More Parasoft SOAtest pros
 

Cons

"I would like the product to include more debugging and developed tools. It needs to also add enhancements on the coding side."
"The integration could improve by including, for example, DevSecOps."
"Checkmarx reports many false positives that we need to manually segregate and mark “Not exploitable”."
"The plugins for the development environment have room for improvements such as for Android Studio and X code."
"Checkmarx could improve the speed of the scans."
"We are trying to find out if there is a way to identify the run-time null values. I am analyzing different tools to check if there is any tool that supports run-time null value identification, but I don't think any of the tools in the market currently supports this feature. It would be helpful if Checkmarx can identify and throw an exception for a null value at the run time. It would make things a lot easier if there is a way for Checkmarx to identify nullable fields or hard-coded values in the code. The accessibility for customized Checkmarx rules is currently limited and should be improved. In addition, it would be great if Checkmarx can do static code and dynamic code validation. It does a lot of security-related scanning, and it should also do static code and dynamic code validation. Currently, for security-related validation, we are using Checkmarx, and for static code and dynamic code validation, we are using some other tools. We are spending money on different tools. We can pay a little extra money and use Checkmarx for everything."
"I would like to see the DAST solution in the future."
"C, C++, VB and T-SQL are not supported by this product. Although, C and C++ were advertised as being supported."
More Checkmarx One cons
"Parasoft SOAtest has an internal refresh function where you can refresh the software to show the changes you’ve made in your projects. Unfortunately this function does not work properly, because it often does not show the changes after you’ve hit te refresh button a few times."
"Reporting facilities can be better."
"The performance could be a bit better."
"From an automation point of view, it should have better clarity and be more user friendly."
"During the process of working with SOAtest and building test cases, the .TST files will grow. A negative side effect is that saving your changes takes more time."
"Reports could be customized and more descriptive according to the user's or company's requirements."
"The summary reports could be improved."
"UI testing should be more in-depth."
More Parasoft SOAtest cons
 

Pricing and Cost Advice

"The average deal size was usually anywhere between $120K to $175K on an annual basis, which could be divided across 12 months."
"We have purchased an annual license to use this solution. The price is reasonable."
"​Checkmarx is not a cheap scanning tool, but none of the security tools are cheap. Checkmarx is a powerful scanning tool, and it’s essential to have one of these products."
"The solution's price is high and you pay based on the number of users."
"The number of users and coverage for languages will have an impact on the cost of the license."
"It is the right price for quality delivery."
"It is not expensive, but sometimes, their pricing model or licensing model is not very clear. There are similar variables, such as projects or developers, and sometimes, it is a little bit confusing."
"Most of my customers opted for a perpetual license. They prefer to pay the highest amount up front for the perpetual license and then pay for additional support annually."
More Checkmarx One pricing and cost advice
"From what I understand, Parasoft SOAtest isn't the cheapest option. But it has a lot to offer."
"The cost of Parasoft seems to have gotten higher with a projection that wasn't really stipulated for our company. They've done a tremendous job at negotiating those deals."
"They do have a confusing licensing structure."
"The license price is a little expensive, but it provides a better outcome in terms of the end-to-end automation process."
"It is an expensive product, so think carefully about whether it fits your purposes and is the right tool for you."
"We are completed satisfied with Parasoft SOAtest. The ROI is more than 95%."
"The price is around $5,000 USD."
"I think it would be a great step to decrease the price of the licenses."
report
See which vendors are best for you
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
See recommendations
787,061 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Computer Software Company
15%
Manufacturing Company
9%
Insurance Company
5%
Financial Services Firm
30%
Manufacturing Company
16%
Computer Software Company
13%
Government
4%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What alternatives are there for Fortify WebInspect and Fortify SCA?
I would like to recommend Checkmarx. With Checkmarx, you are able to have an all in one solution for SAST and SCA as well. Veracode is only a cloud solution. Hope this helps.
See all answers
What do you like most about Checkmarx?
Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%.
See all answers
What is your experience regarding pricing and costs for Checkmarx?
The solution's price is high and you pay based on the number of users.
See all answers
What do you like most about Parasoft SOAtest?
Since the solution has both command line and automation options, it generates good reports.
See all answers
What is your experience regarding pricing and costs for Parasoft SOAtest?
The price is average. It isn't overly expensive.
See all answers
What needs improvement with Parasoft SOAtest?
Tuning the tool takes time because it gives quite a long list of warnings. Going through that is a challenge. It only happens in the initial stage when we are setting up the tool, but it can be imp...
See all answers
 

Comparisons

SonarQube vs Checkmarx One Logo
SonarQube vs Checkmarx One
Compared 52% of the time
Veracode vs Checkmarx One Logo
Veracode vs Checkmarx One
Compared 13% of the time
Fortify on Demand vs Checkmarx One Logo
Fortify on Demand vs Checkmarx One
Compared 6% of the time
Snyk vs Checkmarx One Logo
Snyk vs Checkmarx One
Compared 4% of the time
Coverity vs Checkmarx One Logo
Coverity vs Checkmarx One
Compared 3% of the time
More Checkmarx One Competitors
Postman vs Parasoft SOAtest Logo
Postman vs Parasoft SOAtest
Compared 21% of the time
SonarQube vs Parasoft SOAtest Logo
SonarQube vs Parasoft SOAtest
Compared 17% of the time
Coverity vs Parasoft SOAtest Logo
Coverity vs Parasoft SOAtest
Compared 14% of the time
Polyspace Code Prover vs Parasoft SOAtest Logo
Polyspace Code Prover vs Parasoft SOAtest
Compared 8% of the time
ReadyAPI vs Parasoft SOAtest Logo
ReadyAPI vs Parasoft SOAtest
Compared 7% of the time
More Parasoft SOAtest Competitors
 

Product Reports

Buyer's Guide
Checkmarx One
June 2024
Checkmarx One reportDownload Checkmarx One product report
Buyer's Guide
Parasoft SOAtest
May 2024
Parasoft SOAtest reportDownload Parasoft SOAtest product report
 

Also Known As

No data available
SOAtest
 

Learn More

Checkmarx
Parasoft
 

Overview

Checkmarx One is an enterprise cloud-native application security platform focused on providing cross-tool, correlated results to help AppSec and developer teams prioritize where to focus time and resources.

Checkmarx One offers comprehensive application scanning across the SDLC:

  • Static Application Security Testing (SAST)
  • Software Composition Analysis (SCA)
  • API security
  • Dynamic Application Security Testing (DAST)
  • Container security
  • IaC security
  • Correlation, prioritization, and risk management
  • Codebashing secure code training
  • AI security
  • Tech partnerships extending AppSec into runtime analysis
  • Developer tool integrations including: CI/CD tools, development frameworks, feedback tools, IDEs, programming languages and SCMs

Checkmarx One provides everything you need to secure application development from the first line of code through deployment and runtime in the cloud. With an ever-evolving set of AppSec engines, correlation and prioritization features, and AI capabilities, Checkmarx One helps consolidate expanding lists of AppSec tools and make better sense of results. Its capabilities are designed to provide an improved developer experience to build trust with development teams and ensure the success of your AppSec program investment.

Parasoft SOAtest delivers fully integrated API and web service testing capabilities that automate end-to-end functional API testing. Streamline automated testing with advanced codeless test creation for applications with multiple interfaces (REST & SOAP APIs, microservices, databases, and more).

SOAtest reduces the risk of security breaches and performance outages by transforming functional testing artifacts into security and load equivalents. Such reuse, along with continuous monitoring of APIs for change, allows faster and more efficient testing.

 

Sample Customers

YIT, Salesforce, Coca-Cola, SAP, U.S. Army, Liveperson, Playtech Case Study: Liveperson Implements Innovative Secure SDLC
Charter Communications, Sabre, Caesars Entertainment, Charles Schwab, ING, Intel, Northbridge Financial, Capital Services, WoodmenLife
Buyer's Guide
Checkmarx One vs. Parasoft SOAtest
May 2024
Free Report: Checkmarx One vs. Parasoft SOAtest
Find out what your peers are saying about Checkmarx One vs. Parasoft SOAtest and other solutions. Updated: May 2024.
DOWNLOAD NOW
787,061 professionals have used our research since 2012.
See our Checkmarx One vs. Parasoft SOAtest report.
See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.