Checkmarx
Under review· 4Application security testing platform for DevSecOps teams
Checkmarx has 1 plan: custom pricing for larger teams. We last read its pricing page on 3 October 2026. We have not recorded a price change.
Checkmarx plans and prices
Checkmarx One
Custom
- SAST Required
- Static Analysis Security Testing
- Highest accuracy and precision with leading F1-score
- Complete language coverage
- AI-powered remediation
- Secrets Detection
- Credential Security
- Identify 170+ secret patterns
Show all 68 featuresShow fewer
- Live secret validation
- Pre-commit exposure protection
- Infrastructure-as-Code (IaC) Security
- Scan Terraform, CloudFormation, Kubernetes, Helm for misconfigurations before they reach the cloud
- 18+ IaC platforms
- Policy-as-code enforcement
- Compliance mapping
- API Security
- Discover, inventory, test your entire API attack surface
- API discovery
- Global API inventory
- SAST+DAST integration
- Comprehensive open-source security, license compliance, and SBOM generation
- SBOM generation
- License risk management
- Reachability Analysis
- Malicious Package Protection
- Detect malicious, typosquatted, and compromised packages before they enter your build pipeline
- Unparalleled malicious package database
- Deep malicious package detection
- Package reliability metrics
- Container & Image Security
- Scan container images for vulnerabilities, misconfigurations, and embedded secrets
- Registry integration
- Layer-by-layer analysis
- Base image recommendations
- AI Supply Chain Security
- Generate a complete inventory of AI models, datasets, and dependencies powering your applications
- Audit-ready AI-BOMs
- Global AI Asset Inventory
- Enterprise AI Governance
- Dynamic Analysis (DAST)
- Dynamic application security testing purpose-built for AI-powered apps
- Seamless integration with the SDLC
- Fast and simple onboarding
- Authentication made simple
- Context-Enriched Risk Scoring
- Business-context scoring that cuts through noise — surface the vulnerabilities that represent genuine risk
- CVSS + business context
- Exploitability weighting
- Cross-engine correlation and BYOR results
- Continuous AppSec posture tracking across your entire application portfolio
- Real-time state and severity updates
- Portfolio-wide CISO-ready dashboards and filtering
- In-context triage guidance
- Full traceability and compliance mapping aligned to PCI DSS, HIPAA, SOC 2, and NIST
- PCI, HIPAA, SOC 2, NIST KPIs, Trends, Benchmarks, and Cloud Insights
- Automated audit reports
- Integrate with cloud tools, ticketing systems, and any IDE
- Visual Studio Code, Windsurf, Cursor, and more
- Multi-team workflows
- CI/CD pipelines
- Dedicated onboarding
- Named CSM and implementation support included
- Modular, not monolithic
- Single unified platform
- One dashboard, one data model, one API
- Pay only for what you use
- Expand as you grow
- No commitment
Price history
Last 0 recorded changes
No price changes recorded yet.
Other Security products
No confirmed alternatives yet.