Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | SonarQube Advanced Security by SonarSource View product | Checkmarx One by Checkmarx View product |
|---|---|---|
| Overview | ||
| What it is | SonarSource built SonarQube Advanced Security for open source dependency risk. Explore SBOM generation, review cloud deployment and compare similar SAST products. | Free trial available. Checkmarx One by Checkmarx offers SAST, SCA, DAST, API security, IaC. Compare features, use cases and leading Application Security alternatives. |
| Product type | Software Composition Analysis & Advanced SAST | Unified Cloud-Native Application Security (ASPM) |
| Best for | Cross-industry, Software & Technology, Financial Services, Healthcare, Public Sector | Global Enterprise, Software Teams |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | SaaSCloud |
| Deployment details | Self-managed (SonarQube Server); Cloud (SonarQube Cloud); Add-on for SonarQube Server Enterprise and SonarQube Cloud Enterprise | Cloud (SaaS); Developer Tooling; Cloud SaaS; Developer tooling |
| Data residency | Customer-controlled (Server); EU or US region (Cloud) | US; EU; Global |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | WindowsLinuxmacOSDockerKubernetes | GitHubGitLabBitbucketAzure DevOpsJiraAWSAzureJenkins |
| Compliance | Supports OWASP Top 10, CWE Top 25, SBOM (CycloneDX and SPDX) and secure development requirements | FedRAMPSOC 2 Type IIISO 27001PCI-DSSHIPAA |
| Integrations & coverage | ||
| Integrations | GitHubGitLabAzure DevOpsBitbucketJenkinsSonarQube for IDE | GitHubGitLabJiraAWSAzureJenkins |
| Industries | Cross-industrySoftware & TechnologyFinancial ServicesHealthcarePublic Sector | Global EnterpriseSoftware Teams |
| Regions | Global | GlobalUSEU |
| Vendor | ||
| Company | SonarSource | Checkmarx |
| Headquarters | Geneva, Switzerland | Tel Aviv, Israel |
| Company size | 1,000+ | 1,001-5,000 |
| Founded | 2008 | 2006 |
Overview
What it is
SonarQube Advanced Security
SonarSource built SonarQube Advanced Security for open source dependency risk. Explore SBOM generation, review cloud deployment and compare similar SAST products.Checkmarx One
Free trial available. Checkmarx One by Checkmarx offers SAST, SCA, DAST, API security, IaC. Compare features, use cases and leading Application Security alternatives.Product type
SonarQube Advanced Security
Software Composition Analysis & Advanced SASTCheckmarx One
Unified Cloud-Native Application Security (ASPM)Best for
SonarQube Advanced Security
Cross-industry, Software & Technology, Financial Services, Healthcare, Public SectorCheckmarx One
Global Enterprise, Software TeamsPricing
Pricing model
SonarQube Advanced Security
Contact VendorCheckmarx One
Contact VendorFree trial
SonarQube Advanced Security
Free trial: yesCheckmarx One
Free trial: yesDeployment
Deployment options
SonarQube Advanced Security
Checkmarx One
Deployment details
SonarQube Advanced Security
Self-managed (SonarQube Server); Cloud (SonarQube Cloud); Add-on for SonarQube Server Enterprise and SonarQube Cloud EnterpriseCheckmarx One
Cloud (SaaS); Developer Tooling; Cloud SaaS; Developer toolingData residency
SonarQube Advanced Security
Customer-controlled (Server); EU or US region (Cloud)Checkmarx One
US; EU; GlobalKey features
What it offers
SonarQube Advanced Security
- Software composition analysis (SCA)
- Vulnerable and malicious package detection
- License compliance
- SBOM generation
- Advanced SAST with third-party data flow
- Secrets detection
- Pull request and quality gate enforcement
- Open source dependency risk
Checkmarx One
- Unified cloud-native AppSec platform
- SAST, SCA, DAST, API security, IaC
- Single-pane vulnerability management
- Application Security
- SAST
- SCA
- DevSecOps
- ASPM
Platform & access
API access
SonarQube Advanced Security
API access: yesCheckmarx One
API access: yesSingle sign-on (SSO)
SonarQube Advanced Security
SSO: yesCheckmarx One
SSO: yesRole-based access (RBAC)
SonarQube Advanced Security
RBAC: yesCheckmarx One
RBAC: yesMulti-tenant
SonarQube Advanced Security
Multi-tenant: yesCheckmarx One
Multi-tenant: yesMobile app
SonarQube Advanced Security
Mobile app: noCheckmarx One
Mobile app: noSupported platforms
SonarQube Advanced Security
Checkmarx One
Compliance
SonarQube Advanced Security
Checkmarx One
Integrations & coverage
Integrations
SonarQube Advanced Security
Checkmarx One
Industries
SonarQube Advanced Security
Checkmarx One
Regions
SonarQube Advanced Security
Checkmarx One
Vendor
Company
SonarQube Advanced Security
SonarSourceCheckmarx One
CheckmarxHeadquarters
SonarQube Advanced Security
Geneva, SwitzerlandCheckmarx One
Tel Aviv, IsraelCompany size
SonarQube Advanced Security
1,000+Checkmarx One
1,001-5,000Founded
SonarQube Advanced Security
2008Checkmarx One
2006