Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Head-to-head · IDE Code Security Plugins

Fortify Static Code Analyzer vs Checkmarx IDE Plugins

  • Updated Oct 2026
  • Both researched from official sources
  • 1 check side by side
Higher score Fortify Static Code Analyzer #4 in IDE Code Security Plugins 8.8/10 Pricing on request ✓ 0 of 4 features Visit OpenText
Checkmarx IDE Plugins #5 in IDE Code Security Plugins 8.7/10 Pricing on request ✓ 1 of 4 features Visit Checkmarx

Fortify Static Code Analyzer leads on 0 checks, Checkmarx IDE Plugins on 0, and 1 is even. Who comes out ahead on the 1 yes/no, price and count check where we have data for both products. The editor score weighs everything else too.

Our verdict

  • Highest scoreFortify Static Code Analyzer · 8.8/10
  • Most featuresCheckmarx IDE Plugins · 1 of 4

Fortify Static Code Analyzer scores higher on our rubric for ide code security plugins: 8.8 against 8.7 out of 10; our editors rank them #4 and #5.

Fortify Static Code Analyzer is the better fit for mid-market and enterprise security teams. Checkmarx IDE Plugins is the better fit for enterprises already using Checkmarx services.

  • Fortify Static Code Analyzer fits best

    Mid-market and enterprise security teams

  • Checkmarx IDE Plugins fits best

    Enterprises already using Checkmarx services

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature Fortify Static Code Analyzer 8.8/10 Visit ↗ Checkmarx IDE Plugins 8.7/10 Visit ↗
At a glance
Editor score 8.8 8.7
Ranking #4 in IDE Code Security Plugins #5 in IDE Code Security Plugins
Best for Mid-market and enterprise security teams Enterprises already using Checkmarx services
Pricing model Paid Paid
Starting price Pricing on request Pricing on request
Free plan Not checked yet Not checked yet
Free trial — —
Deployment Self-hosted Desktop
Built for Mid-market, Enterprise Mid-market, Enterprise
Features Fortify Static Code Analyzer 0/4 · Checkmarx IDE Plugins 1/4
Security analysis Not checked yet ✓ (best)
Taint analysis Not checked yet Not checked yet
Code quality checks Not checked yet Not checked yet
In-IDE fixes Not checked yet Not checked yet
Specs
IDE coverage Not checked yet Broad
Languages supported Not checked yet Not checked yet
Our review
Pros
  • Analyzes source code and compiled artifacts with dataflow and control-flow tracing
  • Supports custom analysis rules, prioritization, and remediation guidance
  • Connects with IDEs and CI/CD or build pipelines
  • Launch Checkmarx security scans from supported IDEs
  • Review findings and their source locations alongside code
  • Bring security checks into developer workflows
Cons
  • Licensing is handled through sales rather than public pricing
  • Requires a self-hosted deployment
  • Listed support channel is documentation
  • Depends on Checkmarx services configured by the organization
  • Not positioned as a standalone code editor or independently priced tool
  • Commercial access and pricing are handled through Checkmarx sales
Our verdict

Fortify Static Code Analyzer is OpenText’s self-hosted static application security testing product. It analyzes source code and compiled artifacts to identify security vulnerabilities, including in Java and other supported languages.…

Read the review →

For development teams whose organizations use Checkmarx application-security services, Checkmarx IDE Plugins bring scan initiation and findings into supported development environments. Developers can start scans from an IDE and review…

Read the review →
  1. Fortify Static Code AnalyzerIDE Code Security Plugins 8.8Pricing on request
  2. Checkmarx IDE PluginsIDE Code Security Plugins 8.7Pricing on request

Strengths and trade-offs

  • Fortify Static Code Analyzer — where it wins

    • Analyzes source code and compiled artifacts with dataflow and control-flow tracing
    • Supports custom analysis rules, prioritization, and remediation guidance
    • Connects with IDEs and CI/CD or build pipelines

    Where it doesn't

    • Licensing is handled through sales rather than public pricing
    • Requires a self-hosted deployment
    • Listed support channel is documentation

  • Checkmarx IDE Plugins — where it wins

    • Launch Checkmarx security scans from supported IDEs
    • Review findings and their source locations alongside code
    • Bring security checks into developer workflows

    Where it doesn't

    • Depends on Checkmarx services configured by the organization
    • Not positioned as a standalone code editor or independently priced tool
    • Commercial access and pricing are handled through Checkmarx sales
  • Fortify Static Code Analyzer8.8/10 · Pricing on request

    Self-hosted code analysis with custom rules, IDE feedback, and CI/CD integration.

    Visit OpenTextFull verdict →
  • Checkmarx IDE Plugins8.7/10 · Pricing on request

    A way for Checkmarx customers to launch scans and review findings in supported IDEs.

    Visit CheckmarxFull verdict →

More comparisons

All IDE code security plugins comparisons → · Full ranking →

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Last updated · How we research and update