Checkmarx
Application security testing platform with bug detection
Ranked #2 in Best software composition analysis tools.
Checkmarx provides static application security testing (SAST) to identify bugs and vulnerabilities in source code. It integrates with development pipelines and offers both on-premise and cloud deployment options.
At a glance
| Price from | Custom enterprise pricing |
| Best for | Security-conscious organisations requiring detailed vulnerability analysis and compliance reporting |
From Checkmarx's own website.
Company facts
| Founded | 2006 |
| Headquarters | Tel Aviv |
| Industry | Computer security |
| Social profiles | LinkedIn, X, Facebook, YouTube |
Facilities and features
Its website also mentions:
- Published pricing
- API
- Integrations
- SOC 2
What stands out
Checkmarx delivers the industry's highest fidelity findings through its new Fusion hybrid engine.
“Most comprehensive findings. Highest fidelity.”Checkmarx, own website
The AI tool generates merge-ready fixes to accelerate remediation velocity significantly.
“Checkmarx delivers AI-generated, merge-ready fixes at the point of code creation for 50% faster MTTR, 30–50% fewer duplicate fixes, and zero AppSec headcount increase.”Checkmarx, own website
Worth knowing
- Expensive for small-to-medium teams
- Can be resource-intensive during large scans
How it ranks
Checkmarx is ranked 2nd of 10 in Best software composition analysis tools (Lister Score 94.0).
#2 in Best software composition analysis tools · Lister Score 94.0
Checkmarx is a unified AI-powered application security platform that provides a correlated risk view across every surface. It is recognised as a Gartner Magic Quadrant Leader for software supply chain security.
The AI tool combines rules-based precision with frontier AI to deliver high fidelity scanning.
How the score is made up: fit to this ranking's criteria 40; evidence on its own site 20; how complete its published information is 18; buying information on its own site 16.
“SCA and Malicious Package Protection flag risky dependencies before merge.”Checkmarx, own website
| Rank | Best software composition analysis tools | Score |
|---|---|---|
| 1 | Cloudsmith | 96.0 |
| 2 | Checkmarx | 94.0 |
| 3 | Mend.io | 94.0 |
| 4 | Snyk | 94.0 |
| 5 | Socket | 92.0 |
| 6 | Dependency-Track | 90.0 |
| 7 | Endor Labs | 90.0 |
| 8 | FOSSA | 88.0 |
| 9 | Legit Security | 88.0 |
| 10 | Veracode | 88.0 |
Frequently asked questions
How does Checkmarx rank on Lister?
Checkmarx is ranked 2nd of 10 in Best software composition analysis tools (Lister Score 94.0).