---
title: "Report – Forrester Wave 2025"
date: "2025-09-04T12:17:12+00:00"
url: "https://checkmarx.com/forrester-wave-2025/"
description: "Download the 2025 Forrester Wave for Static Analysis Security Testing . Get expert insights on leading SAST solutions, vendor evaluations, and market analysis."
---

# Report – Forrester Wave 2025

    ![background image](https://checkmarx.com/wp-content/uploads/2025/09/Forrester_2025_bg_1_5x-1-scaled.webp) Analyst Report

# The Forrester Wave™: Static Application Security Testing Solutions, Q3 2025

Checkmarx received the highest score in the Current Offering category of the 10 vendors evaluated.

 [Access Report Now ](#form)

 ![hero_image](https://checkmarx.com/wp-content/uploads/2025/03/hero_image.png)

 ![Apple-White](https://checkmarx.com/wp-content/uploads/2024/07/Apple-White.svg)

 ![04 Salesforce](https://checkmarx.com/wp-content/uploads/2024/07/04-Salesforce.svg)

 ![05 Siemens](https://checkmarx.com/wp-content/uploads/2024/07/05-Siemens.svg)

 ![06 Walmart](https://checkmarx.com/wp-content/uploads/2024/07/06-Walmart.svg)

 ![Ford-White](https://checkmarx.com/wp-content/uploads/2024/07/Ford-White.svg)

 ![08 CITI](https://checkmarx.com/wp-content/uploads/2024/07/08-CITI.svg)

 ![VISA-White](https://checkmarx.com/wp-content/uploads/2024/07/VISA-White.svg)

 ![Carlsberg](https://checkmarx.com/wp-content/uploads/2025/02/Carlsberg.svg)

 ![10 Elevance Health](https://checkmarx.com/wp-content/uploads/2024/07/10-Elevance-Health.svg)

 ![12 Orange](https://checkmarx.com/wp-content/uploads/2024/07/12-Orange.svg)

 ![13 Airbus Group](https://checkmarx.com/wp-content/uploads/2024/07/13-Airbus-Group.svg)

 ![14 Novartis](https://checkmarx.com/wp-content/uploads/2024/07/14-Novartis.svg)

 ![16 GE](https://checkmarx.com/wp-content/uploads/2024/07/16-GE.svg)

 ![17 Sainsbury's](https://checkmarx.com/wp-content/uploads/2024/07/17-Sainsburys.svg)

 ![18 PWC](https://checkmarx.com/wp-content/uploads/2024/07/18-PWC.svg)

 ![19 The weather company](https://checkmarx.com/wp-content/uploads/2024/07/19-The-weather-company.svg)

 ![20 CGI](https://checkmarx.com/wp-content/uploads/2024/07/20-CGI.svg)

 ![21 Adidas](https://checkmarx.com/wp-content/uploads/2024/07/21-Adidas.svg)

 ![22 SAP](https://checkmarx.com/wp-content/uploads/2024/07/22-SAP.svg)

Independent research can help you make more informed AppSec purchasing decisions.

The Forrester Wave™: Static Application Security Testing specifically evaluates SAST providers against 23 criteria across three dimensions: Current Offering, Strategy, and Customer Feedback.

We’re delighted to report that Checkmarx has been named as a ‘Leader’. We also received the highest score in the Current Offering category of the 10 vendors evaluated.

“Checkmarx stands out for its investment in AI.”
“Checkmarx’s vision is to secure modern applications.”
“Checkmarx is ideal for enterprises leveraging existing and emerging technologies in their application development.”

**Checkmarx received the highest scores possible (5/5) for:**

- Risk prioritization
- Language and framework support
- Modern application development support
- Policy management
- Application portfolio risk management
- AI-powered tools in SDLC
- Roadmap
- Supporting services and offerings

 **Access the report now for more details on what to look for in a SAST solution and how Checkmarx and other vendors measure up in the evaluation.**

‎

The Forrester Wave™: Static Application Security Testing Solutions, Q3 2025, Forrester Research, Inc., September 9, 2025

Forrester does not endorse any company, product, brand, or service included in its research publications and does not advise any person to select the products or services of any company or brand based on the ratings included in such publications. Information is based on the best available resources. Opinions reflect judgment at the time and are subject to change. For more information, read about Forrester’s objectivity [here ](https://forrester.com/about-us/objectivity/).

### Get The Full Analyst Report

## What Our Customers Say About Us

See why enterprises trust our approach to AppSec to secure their business-critical applications.

“We view Checkmarx as our trusted partner. They’ve elevated our security posture by consolidating our SAST, SCA, and API Security into a unified platform, Checkmarx One, enabling us to achieve vulnerability remediation, reduce noise, and benefit from strong support.”

 ![Matthew Hurewitz Checkmarx](https://checkmarx.com/wp-content/uploads/2025/06/Matthew-Hurewitz-Checkmarx-150x150.webp)Matthew Hurewitz

Director, Platforms and Application Security

 ![best buy cx logo](https://checkmarx.com/wp-content/uploads/2025/06/best-buy-cx-logo.svg)

“Incorporating Checkmarx’s technology has revolutionized our development culture. It’s more than just technology; it serves as the foundation of our security strategy, ensuring that our applications are secure by design.”

 ![Sudharma Thikkavarapu](https://checkmarx.com/wp-content/uploads/2024/04/Sudharma-Thikkavarapu-150x150.webp)Sudharma Thikkavarapu

Sr. Director, Product Security Engineering

 ![Dell](https://checkmarx.com/wp-content/uploads/2024/04/Dell.svg)

“Checkmarx One definitely checks all my boxes from a security standpoint and has a great interface that’s engaging and easy to use. Some of the solutions we considered were more complicated. With Checkmarx One, it’s easy to get right to the problem with little to no learning curve.”

 ![Joel Godbout](https://checkmarx.com/wp-content/uploads/2024/04/Joel-Godbout-150x150.webp)Joel Godbout

Cybersecurity and Networking Manager

 ![PCL](https://checkmarx.com/wp-content/uploads/2024/04/PCL.svg)

“The success of our AppSec program can be directly attributed to the tooling, processes and support provided by Checkmarx managed services. Our mission revolves around providing secure and compliant lottery and gaming applications and services to our clients around the globe, and with Checkmarx SAST, SCA and associated components enhanced by their stellar service support, we deliver on this promise with confidence and certainty.”

 ![Dion Alexopoulos](https://checkmarx.com/wp-content/uploads/2024/04/Dion-Alexopoulos-150x150.webp)Dion Alexopoulos

Head of Information Security

 ![Allwyn](https://checkmarx.com/wp-content/uploads/2024/04/Allwyn.svg)

“After nearly nine years of using Checkmarx’s SAST, CGI’s journey has been one of seamless integration and consistent satisfaction. The last three years have been particularly smooth, reflecting the solution’s reliability and our successful partnership.”

 ![Abhishek Das](https://checkmarx.com/wp-content/uploads/2024/04/Abhishek-Das-150x150.webp)Abhishek Das

Lead Security Analyst

 ![CGI](https://checkmarx.com/wp-content/uploads/2024/04/CGI.svg)

“After reviewing the Checkmarx platform, I’m not sure how Veracode is able to exist while being at a similar price point.”

Financial Services:

DevSecOps Engineering

“By Far The Best AppSec Tooling Decision We Have Made!!”

 ![Gartner](https://checkmarx.com/wp-content/uploads/2024/04/Gartner.svg)

“We were thrilled to find Checkmarx, which helped us improve the SLA for identifying and remediating risk, reduce risk and the number of vulnerabilities, and eliminate high- and medium-risk issues.”

 ![Ubirajara Aguiar Jr.](https://checkmarx.com/wp-content/uploads/2024/04/Ubirajara-Aguiar-Jr-150x150.webp)Ubirajara Aguiar Jr.

Tech Lead, Red Team/DevSecOps

 ![Pismo](https://checkmarx.com/wp-content/uploads/2024/04/Pismo.svg)

“Checkmarx made security team and developers life easier.”

Security Analyst

IT Services

 ![Gartner](https://checkmarx.com/wp-content/uploads/2024/04/Gartner.svg)

## Market Technology Leadership

40%

of Fortune 100

1800+

Customers in 70 countries

75+

Languages 100+ frameworks

6X

Leader at Gartner® Magic Quadrant™ for Application Security Testing

## Industry Recognition

 ![Gartner Peer Insights Customer Choice for Application Security](https://checkmarx.com/wp-content/uploads/2025/05/02-Gartner.svg)

 ![SAST Forrester Wave Leader 2025 Award logo](https://checkmarx.com/wp-content/uploads/2025/09/FORRESTER-2025-Checkmarx-Badge.png)

 ![Fortress Cyber Security Award 2024](https://checkmarx.com/wp-content/uploads/2024/07/CyberSecurityAward-2024-01.png)

 ![CRN Security 100 2024 Awards](https://checkmarx.com/wp-content/uploads/2024/06/04_crn.webp)
