Number of Seats/Users: Checkmarx One offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows Checkmarx One that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from Checkmarx One. Checkmarx One reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: Checkmarx One offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from Checkmarx One. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: Checkmarx One often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase, our internal data shows that Checkmarx One is a solid contender for enterprise application security, with broad adoption across industries like finance, healthcare, and publishing. Most Spendbase clients say it’s a reliable and full-featured platform, especially praised for its powerful SAST (Static Application Security Testing) capabilities and deep CI/CD pipeline integration.

From our data, there are a few standout positives:

– Comprehensive Security Coverage: Clients consistently mention that Checkmarx One scans code before it’s compiled, catches vulnerabilities in multiple stages of the SDLC, and makes it easy to spot security flaws in open source libraries.
– Ease of Use & Configurability: Many appreciate the intuitive dashboard and the option to configure projects, tailor rules, and compare results between scans. The open rules system allows for flexible adjustments.
– Collaboration & Integration: Integrations with developer tools, CI/CD, and devops screens make security part of the daily workflow. API integration also gets shout-outs for extending functionality.
– Strong Support: Quick and effective customer support is mentioned often. Clients feel confident reaching out, knowing a phone call or ticket gets a speedy response.

However, our internal data shows a few areas for improvement:

– Performance & Cost: Some say that the platform can feel “super expensive” and scanning processes can be slow. It’s less price-competitive than alternatives and might be out of reach for smaller budgets.
– User Experience: Spendbase clients mention that the UI isn’t always user-friendly, especially for new projects or when configuring development environments. Reporting can be messy and could use modernization.
– False Positives & Coverage: Occasional false positives still pop up, but the platform offers options to flag “proposed not exploitable”. On the downside, not all programming languages are supported, which can be a blocker for teams with niche stacks.
– System Requirements: Windows and SQL dependencies for on-prem setups are noted as limitations—many clients prefer Linux and PostgreSQL for flexibility.
– Downtime Concerns: Pipeline delays during application downtime pose deployment challenges, adding frustration for fast-paced dev teams.

In summary, Spendbase clients appreciate Checkmarx One for its broad security capabilities, collaboration, and good support. The biggest requests are simplified setup, faster scans, lower costs, more user-friendly interfaces, and broader language support. For organizations looking to consolidate AppSec tools and empower dev teams, Checkmarx One stands tall—but keep these pointers in mind for the best experience (and let us find you a great discount).