HOME / SOFTWARE / APPLICATION SECURITY TESTING TOOLS WITH GITHUB INTEGRATION / CHECKMARX

Checkmarx

Application security testing platform with bug detection

RANKED #2 · APPLICATION SECURITY TESTING TOOLS WITH GITHUB INTEGRATIONLISTERSCORE 94.0

Checkmarx provides static application security testing (SAST) to identify bugs and vulnerabilities in source code. It integrates with development pipelines and offers both on-premise and cloud deployment options.

Pricing from	Custom enterprise pricing
Best for	Security-conscious organisations requiring detailed vulnerability analysis and compliance reporting
Website	www.checkmarx.com

Company facts

Founded	2006
Headquarters	Tel Aviv
Industry	Computer security
Social profiles	LinkedIn, X, Facebook, YouTube

Facilities and features

Published pricing
API
Integrations
SOC 2

What stands out

Checkmarx delivers the industry's highest fidelity findings through its new Fusion hybrid engine.

“Most comprehensive findings. Highest fidelity.”Checkmarx, own website

The AI tool generates merge-ready fixes to accelerate remediation velocity significantly.

“Checkmarx delivers AI-generated, merge-ready fixes at the point of code creation for 50% faster MTTR, 30–50% fewer duplicate fixes, and zero AppSec headcount increase.”Checkmarx, own website

Strengths and trade-offs

Supports 35+ programming languages with deep semantic analysis
Strong audit trail and compliance reporting for regulated industries

Expensive for small-to-medium teams
Can be resource-intensive during large scans

Appears in

SOFTWAREVERIFIED

How Checkmarx ranks

#2 in AI code security tools for enterprises

How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 16.

“Checkmarx One Secures It. The Agentic Application Security Platform Combining Hybrid scanning,”Checkmarx, own website

“Checkmarx Assist Codebashing AI Inventory Get A Custom Quote Enterprise COMPLETE COVERAGE & FULL COMPLIANCE Maximum coverage and control for organizations with the most demanding security requirements.”Checkmarx, own website

#4 in AI code security tools with a team plan

How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 16.

“Checkmarx One Secures It. The Agentic Application Security Platform Combining Hybrid scanning,”Checkmarx, own website

“Pricing Checkmarx One Pricing & Packages Find the right plan for your team, no matter where you are on your AppSec journey.”Checkmarx, own website

#2 in Best AI code security tools

How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 16.

“AI generates code faster than it can be secured. Checkmarx governs the risk, from code to runtime with agentic AI application security.”Checkmarx, own website

#2 in Best software composition analysis tools

How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 16.

“SCA and Malicious Package Protection flag risky dependencies before merge.”Checkmarx, own website

Alternatives to Checkmarx

Snyk	#1 in Application security testing tools with GitHub integration	96.0
Mend.io Unified governance for software and AI security	#3 in Application security testing tools with GitHub integration	94.0
Semgrep Static analysis that finds bugs, security issues, and anti-patterns in your codebase	#4 in Application security testing tools with GitHub integration	92.0
SonarQube	#5 in Application security testing tools with GitHub integration	90.0
StackHawk Integrates into the agent loop to test, surface, and fix vulnerabilities before a PR is opened.	#6 in Application security testing tools with GitHub integration	90.0
GitHub	#7 in Application security testing tools with GitHub integration	86.0

Questions about Checkmarx

How much does Checkmarx cost?

Lister lists Checkmarx's pricing as: Custom enterprise pricing.

Who is Checkmarx best for?

Checkmarx is best for security-conscious organisations requiring detailed vulnerability analysis and compliance reporting.

Where does Checkmarx rank?

Checkmarx is ranked #2 in Application security testing tools with GitHub integration (Lister Score 94.0), #2 in AI code security tools for enterprises (Lister Score 94.0), #2 in Best software composition analysis tools (Lister Score 94.0), #2 in Best AI code security tools (Lister Score 94.0), #4 in AI code security tools with a team plan (Lister Score 94.0), #6 in Top 10 AI Bug Detection Tools (Lister Score 83.3) and #8 in Top 10 AI Code-Review Tools (Lister Score 78.7).

What are the best alternatives to Checkmarx?

The closest alternatives on Lister are Snyk (#1 in Application security testing tools with GitHub integration), Mend.io (#3 in Application security testing tools with GitHub integration) and Semgrep (#4 in Application security testing tools with GitHub integration).

Where is Checkmarx based?

Checkmarx is headquartered in Tel Aviv, and was founded in 2006.

Is this your company?

Claim Checkmarx to suggest corrections to its listing (pricing, features, details) or ask about an enhanced profile. We review every claim before anything changes.