Regulated enterprises consolidating AppSec tooling across many teams and needing audit-ready compliance reports.
Startups and mid-market engineering teams — Semgrep or Snyk offer faster, more developer-friendly workflows at a fraction of the cost.
What is Checkmarx?
Checkmarx is a legacy-to-modern AppSec platform now unified as Checkmarx One. It provides SAST, SCA, IaC scanning, DAST, API security, and container scanning with a shared policy and triage layer. Long-standing presence in Fortune 2000 AppSec programs, often alongside or replacing Fortify. Known for deep language coverage and enterprise-grade compliance reporting (PCI, HIPAA, SOX).
Key features
Integrations
What people actually pay
No price data yet — be the first to share
No price data yet for Checkmarx. Help the community — share what you pay (anonymized).
User Reviews
Be the first to review this tool