No more typing reviews! Try our Samantha, our new voice AI agent.

Cycode vs Software Risk Manager ASPM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cycode
Ranking in Static Application Security Testing (SAST)
22nd
Ranking in Software Composition Analysis (SCA)
16th
Ranking in Application Security Posture Management (ASPM)
11th
Average Rating
7.6
Reviews Sentiment
7.7
Number of Reviews
3
Ranking in other categories
Software Supply Chain Security (10th)
Software Risk Manager ASPM
Ranking in Static Application Security Testing (SAST)
30th
Ranking in Software Composition Analysis (SCA)
23rd
Ranking in Application Security Posture Management (ASPM)
17th
Average Rating
0.0
Reviews Sentiment
7.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2026, in the Application Security Posture Management (ASPM) category, the mindshare of Cycode is 4.7%, down from 4.9% compared to the previous year. The mindshare of Software Risk Manager ASPM is 3.4%, up from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Posture Management (ASPM) Mindshare Distribution
ProductMindshare (%)
Cycode4.7%
Software Risk Manager ASPM3.4%
Other91.9%
Application Security Posture Management (ASPM)
 

Featured Reviews

reviewer2014131 - PeerSpot reviewer
DevSecOps Security Engineer at a manufacturing company with 10,001+ employees
Secret scanning has strengthened our code security and now needs better container integration
Regarding container scanning, Cycode can be improved as it does not have a CLI. As a DevSecOps professional, having a CLI is a must-have for any tool to integrate it into systems. Although Cycode does have a CLI, specifically for the container scanning module, a CLI does not exist. This is why all the modules that Cycode offers cannot be fully leveraged. A CLI for the container scanning module is believed to be on Cycode's roadmap, but it is not available today. As a big enterprise dealing with many assets, Cycode being faster would be beneficial. With many assets on-boarded on Cycode, the tool sometimes becomes slow. Making Cycode faster would definitely help. Other than that, things are good.
Saravanan_Radhakrishnan - PeerSpot reviewer
Senior Manager at Happiest Minds Technologies
Facilitates continuous assessment of applications, covering both static and dynamic security aspects
Code Dx lacks one aspect, the dynamic security part, known as DAST. It's not an on-premise solution; it's in the cloud now. There are compliance standards and data standards where the customer might need to have the data on-premises for dynamic security testing. So that is one shortfall. An area of improvement could be developing an on-premise DAST solution. The current one is a complete cloud-based solution, and that can be one of the areas of improvement.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cycode has positively impacted the organization by saving time in the pipeline and providing one platform for secret scanning, SAST, and Infrastructure as Code facilities."
"Cycode excels in secret scanning and is brilliant at finding and identifying secrets within code."
"In my experience as an integrator with Cycode, the biggest advantage is that it is platform agnostic and language agnostic."
"The customers were looking for something around static security and dynamic security, and in all those areas, they were looking for an industry leader with a proven solution. Synopsys is a Gartner leader, so I position this particular technology for the technical pre-sales part of it."
 

Cons

"Regarding container scanning, Cycode can be improved as it does not have a CLI."
"Currently, Cycode does not have good container security, and while it is a full solution, companies desiring a single platform must seek additional tools to scan container images."
"While I appreciate the advantages of Cycode, one area for improvement is the machine learning aspect and how it can assist during AI operations."
"The initial setup is a bit challenging because things are not easy. It needs a lot of technology adaptability plus the customer's environment-specific use cases."
 

Pricing and Cost Advice

Information not available
"It is more of an enterprise solution for budget-conscious customers. So, it's moderately priced. It's not for everybody."
report
Use our free recommendation engine to learn which Application Security Posture Management (ASPM) solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
27%
Financial Services Firm
9%
University
7%
Construction Company
6%
Manufacturing Company
14%
Comms Service Provider
12%
Financial Services Firm
12%
University
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cycode?
I find the pricing of Cycode to be reasonable for the work being done, although I haven't compared it with other tools to provide detailed feedback about its affordability.
What needs improvement with Cycode?
While I appreciate the advantages of Cycode, one area for improvement is the machine learning aspect and how it can assist during AI operations. This tool needs capabilities for monitoring cloud co...
What is your primary use case for Cycode?
Cycode is used for our software development, maintaining clean code quality, and managing secrets within our enterprise. We write secure code by adhering to secure coding principles, ensuring that ...
Ask a question
Earn 20 points
 

Also Known As

No data available
Code Dx
 

Overview

 

Sample Customers

Information Not Available
Discover why companies like: CGI said, "Synopsys and Software Risk Manager have provided the results we’re looking for".
Find out what your peers are saying about Snyk, Wiz, Veracode and others in Application Security Posture Management (ASPM). Updated: October 2026.
917,433 professionals have used our research since 2012.