Checkmarx One vs New Relic IAST

Checkmarx One is a paid web application-security platform focused on source-code analysis. It integrates with CI/CD workflows, scans pull requests, and supports IDE use so security checks can occur during development. Teams can define custom security rules and custom rules for their requirements, while automated fixes assist with remediation. The listed analysis target is source code. Pull-request scanning provides a way to examine proposed changes, and CI/CD integration connects checks with delivery processes. IDE support places analysis in developer tooling. Checkmarx One has no free plan, and pricing is available on request. The company was founded in 2006. Its web delivery model combines configurable security policies with automated assistance for addressing findings, without listing additional analysis targets or a free tier.

New Relic IAST probes running application code for vulnerabilities that could be exploited, helping DevOps and security teams address risk through the software development lifecycle. Dynamic assessment simulates attacks and can provide proof of exploit without code changes. New Relic APM agents deliver the capability, which can be enabled with a configuration setting change; supported languages are Go, Java, Node.js, and Ruby. Guided remediation can identify the code location, stack trace, HTTP trace, encountered URLs, exploit mechanism, and parameters involved. IAST is integrated with New Relic Vulnerability Management for ongoing discovery, fixing, and verification of high-risk vulnerabilities. Findings receive severity scores using CVSS version 3, with Low, Medium, High, and Critical ranges. The tool supports authenticated and API testing, CI/CD pipelines, and ticketing systems. A free New Relic plan is available, but IAST analysis is billed through an optional Compute Add On based on Compute Capacity Units consumed during analysis. Pricing for other plans is available on request.