How does Fluid Attacks' solution compare to Checkmarx's? The following comparison table enables you to discern the performance of both providers across various attributes essential for meeting your company’s cybersecurity needs. To better understand each attribute, read their descriptions in the dedicated page.

Organization

Attribute	Essential	Advanced	Checkmarx
Focus	Native ASPM with built-in scanners	AI-powered PTaaS on top of native ASPM with built-in scanners	Native ASPM with built-in scanners
Extras	None	None	None
Employees	130	Same	902
Reputation	9.82 from 60 reviews over 6 years on Gartner and Clutch	Same	8.46 from 149 reviews over 9 years on  G2, Gartner, PeerSpot, Software Advice and TrustRadius
Followers	18K based on the following: Facebook, Instagram, LinkedIn, X and YouTube	Same	132K based on the following: Facebook, LinkedIn, X and YouTube
Research firms	None	None	Forrester, Frost & Sullivan, GigaOM, IDC, Info-Tech Research Group and Nucleus Research
Founded	2001	Same	2006
Funding	Bootstrapped	Same	$92M USD in 4 rounds from 6 investors (3 acquisitions)
Revenue	5M to 10M	Same	100M to 500M
CVE	257 CVEs reported to MITRE, ranked among the top 10CVE labs worldwide	Same	Pending
Compliance	SOC 2 Type II and SOC 3	Same	CSA STAR Level 1, FedRAMP Authorized, HIPAA, ISO/IEC 27001 and SOC 2 Type II
Documentation	Yes	Yes	Yes
Visits	27K per month. Top 3: 51% BR, 8% IN, 7% CO and others 34%	Same	104K per month. Top 3: 49% US, 14% TH, 8% IT and others 29%
Authority	32 out of 100	Same	43 out of 100
Distribution	Direct or with any of its 14 partners	Same	Direct or with any of its 60 partners
Marketplaces	AWS	Same	AWS
Freemium	No	No	No
Free trial	21-day free trial	PoV	PoC
Demo	Yes	Yes	Yes
Pricing	Contact sales and marketplace	Contact sales	Contact sales and marketplace
Pricing drivers	Groups	Authors	Developers

Product

Attribute	Essential	Advanced	Checkmarx
ASPM	Yes	Yes	Yes
IDE	5 functionalities, 4 in common and 1 additional	Same, plus 1 functionality	6 functionalities, 4 in common and 2 additional
CLI	Yes	Yes	Yes
CI/CD	Breaks the build	Same	Breaks the build
SCA	24 package managers, 14 in common and 10 additional	Same	19 package managers, 14 in common and 5 additional
Reachability	5 languages, 3 in common and 2 additional	Same	Yes. No information available
SBOM	22 package managers, 11 in common and 11 additional	Same	19 package managers, 11 in common and 8 additional
Containers	4 distributions, 3 in common and 1 additional	Same	3 distributions, all in common
Source SAST (languages)	18, 16 in common and 2 additional	Same, plus 4. All in common	46, 20 in common and 26 additional
Source SAST (frameworks)	22, 10 in common and 12 additional	Same	52, 10 in common and 42 additional
Binary SAST	1 type of binary	Same	No
DAST	10 attack surface types, 5 in common and 5 additional	Same	7 attack surface types, 5 in common and 2 additional
IAST	No	No	No
CSPM	Yes	Yes	No
Secrets	15 secrets types, 5 in common and 10 additional	Same, plus verify other attack vectors and secrets exploitability	5 secrets types, all in common
AI	3 functions, 2 in common and 1 additional	Same	4 functions, 2 in common and 2 additional
Open-source	MPL-2.0 license, totally equivalent to the paid version	Not applicable	Apache License version 2.0, partially equivalent to the paid version
Deployment	SaaS	Same	SaaS and on-premises
Regions	US	Same	ANZ, EU, IND, ISR, SNG, UAE and US
Status	Yes	Yes	Yes
Incidents	6 per year	Same	7.1 per year

Integrations

Attribute	Essential	Advanced	Checkmarx
SCM	4, 3 in common and 1 additional	Same	4, 3 in common and 1 additional
Binary repositories	None	None	5
Ticketing	3, all in common	Same	5, 3 in common and 2 additional
ChatOps	None	None	2
IDE	2, all in common	Same	4, 2 in common and 2 additional
CI/CD	20, 10 in common and 10 additional	Same	17, 10 in common and 7 additional
SCA	Native scanner	Same	Native scanner
Container	Native scanner	Same	Native scanner
SAST	Native scanner	Same	Native scanner
DAST	Native scanner	Same	Native scanner
IAST	None	None	None
Cloud	3, all in common	Same	3, all in common
CSPM	Native scanner	Same	None
Secrets	Native scanner	Same	Native scanner
Compliance	None	None	None