Checkmarx One Platform Application Security Efficacy Report

This technical report presents a comparative analysis of the application security efficacy of Checkmarx's Static Application Security Testing (SAST) and Software Composition Analysis (SCA) against a competitor's solutions. The objective of the study, commissioned by Checkmarx and conducted by Tolly, was to evaluate the accuracy and effectiveness of both solutions in identifying vulnerabilities within software applications. The testing involved scanning three applications with SAST and two applications with SCA, focusing on metrics such as true positives (TP), false positives (FP), and false negatives (FN). The results indicated that Checkmarx outperformed the competitor, demonstrating higher TP rates and lower FP and FN rates across both testing methodologies. The report details the methodology, test setup, and findings, emphasizing the importance of accurate vulnerability detection in safeguarding business assets against potential cyber threats. Additionally, it highlights the significance of identifying exploitable vulnerabilities to prioritize remediation efforts effectively.