shouldiuse.io

VERDICT

Should I use Checkmk?

Full-stack monitoring and observability for hybrid environments — discovers everything you run, cloud and on-prem. - checkmk.com

Depends. Buy if you operate dozens or hundreds of hybrid hosts and want agent-based monitoring with strong support. Small teams with a handful of servers should start with the free RAW edition or a lighter tool instead.

Confidence

High. Based on 40+ public sources: G2/Gartner/Capterra reviews, Reddit threads, security advisories, pricing pages, and case studies.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free

Checkmk RAW

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Checkmk ProFrom ~€1.90/host/mo; listings show up to ~€3,300/yr
Checkmk Ultimate / Managed Services~$400/mo listed for Ultimate

Best for

  • Hybrid on-prem + cloud estates
  • Ops teams monitoring hundreds of hosts
  • MSPs with many client environments
  • Nagios/Zabbix users wanting automation

Not for

  • Small teams with under ~20 servers — use simple uptime checks instead
  • Teams wanting zero-maintenance SaaS — you run and patch this server yourself
  • Cloud-native/Kubernetes-first shops needing per-second metric granularity
  • Anyone unwilling to deploy and maintain agents on every host

Gotchas - check before you buy

high

Agent CVEs mean prompt patching of every host agent, not just the server.

medium

Per-host licensing across 5 plans — costs jump as host count grows; size your estate before committing.

medium

Guess: free RAW edition lacks vendor support SLAs; paid editions needed for enterprise help.

low

Edition lineup was recently reshuffled; older pricing comparisons and docs may mismatch current tiers.

Pros and cons

Pros

  • Genuinely free, open-source RAW edition, not a time-limited trial
  • Strong ratings: 4.7/5 on G2 across 306 reviews
  • Auto-discovers hosts and services, cutting manual monitoring config
  • Users single out support for exceptional praise
  • Vendor publishes a vulnerability disclosure policy and hardening docs

Cons

  • Recurring local privilege-escalation vulnerabilities in the monitoring agent
  • 2022 disclosure: multiple bugs chainable for remote code execution
  • Self-hosted: you operate, secure, and patch the monitoring server
  • Five paid plans and per-host licensing; costs climb with estate size

Sources & method

Analyzed 9/21/2026 - 12 sources - Actively patched with a disclosure policy, but ~19 CVEs tracked — including agent privilege escalation and a 2022 RCE chain.

official x3review x5security x2news x2
  • Local privilege escalation via writable files in Checkmk agent, Writable agent files allowed local attackers to escalate privileges on monitored hosts.
  • Remote code execution by chaining multiple bugs (2022), SonarSource chained several vulnerabilities to achieve RCE on the monitoring server.
  • Recurring privilege-escalation CVEs (2025–2026), CVE-2025-39666 and CVE-2026-8593 are local privilege escalation issues in recent versions.
  • High-risk XSS in network monitoring UI (2026), Heise reported a highly risky cross-site scripting flaw; fixed via werk #19238.

Key stats

  • Value for money: 4/5

    Rating

  • Free

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 4/5. Free RAW tier; users call pricing fairly reasonable
  • Ease of use: 4/5. Reddit users report it's easy to run daily
  • Feature depth: 5/5. Auto-discovery across on-prem, cloud, containers
  • Support quality: 4/5. Glowing dedicated Reddit thread praises support
  • Security posture: 2/5. Recurring privilege-escalation CVEs; 2022 RCE chain
  • 4.7/5 G2 rating 306 reviews
  • €0 Starting price Free RAW edition; paid tiers reach ~€3,300/yr
  • Yes Free tier Open-source RAW edition
  • PSG Equity, 2025 Funding Growth investment in Checkmk GmbH

Pricing

Checkmk RAW

Free

  • Open source
  • Self-hosted full monitoring

Checkmk Pro

From ~€1.90/host/mo; listings show up to ~€3,300/yr

  • No host-count limit per vendor
  • Adds metrics and forecasting

Checkmk Ultimate / Managed Services

~$400/mo listed for Ultimate

  • Top edition for large estates
  • Managed Services edition aimed at MSPs

Security

Actively patched with a disclosure policy, but ~19 CVEs tracked — including agent privilege escalation and a 2022 RCE chain.

  • Local privilege escalation via writable files in Checkmk agentWritable agent files allowed local attackers to escalate privileges on monitored hosts.⁸
  • Remote code execution by chaining multiple bugs (2022)SonarSource chained several vulnerabilities to achieve RCE on the monitoring server.⁹
  • Recurring privilege-escalation CVEs (2025–2026)CVE-2025-39666 and CVE-2026-8593 are local privilege escalation issues in recent versions.
  • High-risk XSS in network monitoring UI (2026)Heise reported a highly risky cross-site scripting flaw; fixed via werk #19238.10

What users say

Users on Reddit and review sites rate Checkmk highly (4.7/5 G2, 4.5/5 Gartner), praising daily usability and standout support.

“I use checkmk on a daily basis.”
Reddit, r/devops
“The CheckMK Support is hands down the...”
Reddit, r/sysadmin
“Checkmk is awesome with regards to...”
Reddit, r/Checkmk

Alternatives

Compare Checkmk with each alternative.

  • SolarWinds Observability

    Top commercial alternative per Gartner Peer Insights comparisons

Companies that use it

  • HPE
  • IONOS
  • Swisscom
  • Heineken
  • LGB
Full analysis

Based on 40+ public sources: G2/Gartner/Capterra reviews, Reddit threads, security advisories, pricing pages, and case studies.

Powerful self-hosted monitoring with a real free tier; overkill for small estates, proven at HPE/IONOS/Swisscom scale.

Methodology

Based on 40+ public sources: G2/Gartner/Capterra reviews, Reddit threads, security advisories, pricing pages, and case studies.

Sources

  1. Checkmk Reviews 2026 — G2g2.com
    review
  2. Checkmk Reviews & Ratings — Gartner Peer Insightsgartner.com
    review
  3. Checkmk Pricing & Review — Capterracapterra.com
    review
  4. Anyone use(d) CheckMK monitoring system? — Redditreddit.com
    review
  5. An ode to CheckMK support — Redditreddit.com
    review
  6. Checkmk official sitecheckmk.com
    official
  7. Checkmk download pagecheckmk.com
    official
  8. Local privilege escalation in Checkmk agent — SEC Consultsec-consult.com
    security
  9. Checkmk RCE by chaining multiple bugs — SonarSourcesonarsource.com
    security
  10. High-risk XSS flaw in Checkmk — Heiseheise.de
    news
  11. PSG Equity invests in Checkmk — LinkedIn/A&O Shearmanlinkedin.com
    news
  12. New Checkmk editions lineup — Checkmk Forumforum.checkmk.com
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.