Checkmarx
Enterprise application security platform with deep SAST, SCA, DAST, and supply chain security
ToolApplication SecurityCloud, Self-hosted
Pricing: Custom enterprise pricing
Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed September 2026 · How we review listings
What is Checkmarx?
Checkmarx is an enterprise application security platform that provides comprehensive SAST, SCA, DAST, API security testing, and supply chain security in a unified solution called Checkmarx One. With nearly two decades of SAST expertise, Checkmarx offers deep, accurate static analysis across a wide range of languages and frameworks, making it the go-to choice for large enterprises with complex codebases and strict compliance requirements. Checkmarx integrates into development workflows, including IDE-based experiences and AI coding-agent workflows, alongside its traditional orientation toward security teams.
Best for: Large enterprises that need comprehensive, compliance-driven application security testing with deep SAST accuracy and centralized security governance
Pros
- Strong SAST depth and accuracy from two decades of development
- Comprehensive platform covering SAST, SCA, DAST, and API security
- Strong compliance reporting and governance capabilities
- Custom query language allows tailored security rules for complex codebases
- Mature enterprise support with dedicated customer success
Things to check
- Significantly more expensive than Snyk with enterprise-only pricing
- Developer experience is less intuitive than Snyk's workflow integration
- Scan times can be slow for large codebases with deep analysis enabled
- Steep learning curve for custom query configuration
- Historically security-team focused rather than developer-first
Reported in public reviews and vendor documentation. See sources below.
Key Features
Do you work at Checkmarx? to confirm the details or send us a correction.
Add the Cyber Vendor Guide badge to your site
Checkmarx Comparisons
Sources & references
Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.
Spot an error, or do you represent Checkmarx? Request a correction.
Key facts
- Pricing
- Custom enterprise pricing
- Model
- Enterprise license (project/user-based)
- Founded
- 2006
- Cloud
- Yes
- Self-hosted
- Yes
Checkmarx Alternatives
- SnykDeveloper-first application security platform for finding an...
- SonarQubeOpen-source code quality and security analysis platform with...
- VeracodeCloud-based application security testing platform with SAST,...
- SemgrepLightweight, open-source static analysis with intuitive patt...
- GitHub Advanced SecurityGitHub-native security scanning with CodeQL SAST, secret sca...