--- title: "Checkmarx Software Pricing, Alternatives & More 2026 | Capterra" description: "With the help of Capterra, learn about Checkmarx Software - reviews, pricing plans, popular comparisons to other Static Application Security Testing (SAST) products and more." source_url: "https://www.capterra.com/p/10021366/Checkmarx-One/" page_type: "product" language: "en" --- # Checkmarx Software Review 2026: Features, Integrations, Pros & Cons Last updated on September 17, 2026 Provider data verified by our Software Research team, and reviews moderated by our Reviews Verification team. [Description](#description)[Use cases](#use-cases)[Alternatives](#alternatives)[FAQs](#faqs)[Features](#features)[Pricing](#pricing)[Integrations](#integrations)[Support](#support)[Reviews](#reviews) Checkmarx ## What is Checkmarx? Checkmarx is a cloud-based application security platform that helps businesses find and fix security vulnerabilities across the full software development lifecycle. It brings together multiple security testing methods, including static code analysis, open-source dependency scanning, dynamic testing, API security, container security, and secrets detection, into a single platform. Security and development teams use Checkmarx to get a unified view of risk across their code, open-source components, containers, and APIs. Built-in prioritization helps teams focus on the vulnerabilities that pose the greatest real-world risk, and AI-generated fix suggestions are delivered directly in the developer's coding environment. Core features include software composition analysis with malicious package detection, infrastructure-as-code scanning, supply chain security, SBOM generation, and Application Security Posture Management (ASPM) for correlated risk visibility across all tools and teams. ## What is Checkmarx used for? [Static Application Security Testing (SAST)](https://www.capterra.com/sast-software/)[Generative AI](https://www.capterra.com/generative-ai-software/)[Vulnerability Scanner](https://www.capterra.com/vulnerability-scanner-software/) Overall rating Based on 7 user reviews Reviews sentiment Positive \- Neutral \- Negative \- Contact vendor for pricing Free trial not available Free version not included Capterra Shortlist charts the highest-rated and most popular products... Our "Best of" badge program showcases products with the highest ratings... Our "Best of" badge program showcases products with the highest ratings... Do you work for Checkmarx?[Manage this product listing](https://www.g2.com/products/checkmarx/claim_requests/new?auto=true) ## Checkmarx Overview Updated September 2026 AI summary Checkmarx delivers application security testing for businesses of all sizes, supporting static, dynamic, and interactive code analysis alongside vulnerability scanning and secure code review. It features multi-language and source-code scanning, real-time analytics, dashboards, and integrations with major CI/CD platforms, and is deployed via cloud, SaaS, or web-based options to fit diverse development workflows. ## Compare with a popular alternative Capterra selects software alternatives based on relevant features, verified user reviews and user interactions. Placement may be influenced by client status. ### Checkmarx 3.9 (7) VS. [### CodeScene](https://www.capterra.com/p/193379/CodeScene/) [4.7 (11)](https://www.capterra.com/p/193379/CodeScene/reviews/) Starting Price Contact vendor Starting Price $18 Per User, Per Month Free Trial Free Version Pricing Options Free Trial Free Version Ease Of Use 3.7 (7) Ease Of Use 4.0 (11) Value For Money 3.0 (4) Value For Money 4.4 (9) Customer Service 4.0 (3) Customer Service 4.9 (10) ## Checkmarx alternatives Highest Rated [GitHub](https://www.capterra.com/p/129067/GitHub/) [4.8 (6,206)](https://www.capterra.com/p/129067/GitHub/reviews/) Starting price $4.00 Per User, Per Month Pricing Options Free Trial Free Version User Rating 98% of reviewers rated it above 4 stars [Learn More](https://www.capterra.com/p/129067/GitHub/) [GitLab](https://www.capterra.com/p/159806/GitLab/) [4.6 (1,226)](https://www.capterra.com/p/159806/GitLab/reviews/) Starting price $29.00 Per User, Per Month Pricing Options Free Trial Free Version User Rating 96% of reviewers rated it above 4 stars [Learn More](https://www.capterra.com/p/159806/GitLab/) [SonarQube](https://www.capterra.com/p/210481/SonarQube/) [4.5 (68)](https://www.capterra.com/p/210481/SonarQube/reviews/) Starting price $720.00 Per User, Per Month Pricing Options Free Trial Free Version User Rating 94% of reviewers rated it above 4 stars [Learn More](https://www.capterra.com/p/210481/SonarQube/) [Coverity](https://www.capterra.com/p/163552/Coverity-Static-Code-Analysis/) [3.5 (6)](https://www.capterra.com/p/163552/Coverity-Static-Code-Analysis/#reviews) Starting price Contact vendor for pricing Pricing Options Free Trial Free Version User Rating 50% of reviewers rated it above 4 stars [Learn More](https://www.capterra.com/p/163552/Coverity-Static-Code-Analysis/) ## FAQs about Checkmarx Overview ### What company size and specific industries is Checkmarx built for? Checkmarx is designed for large enterprises and global organizations in financial services, healthcare, manufacturing, professional services, technology, and the U.S. federal government. Features and Usability ### What are the key features of Checkmarx? Checkmarx offers application security and security testing features centered on source-code scanning, vulnerability scanning, and multi-language scanning. It also includes access controls and permissions, alerts and notifications, activity tracking, dashboards, real-time analytics, reporting and analytics, third-party integrations, and collaboration tools for developers. Integrations ### Which third-party tools and platforms does Checkmarx integrate with? Checkmarx integrates with AWS Lambda, Azure Pipelines, GitLab, Jenkins, TeamCity, and Elsevier Pure. These integrations cover cloud functions, CI/CD, source control, build automation, and research management platforms, giving Checkmarx connections across development and deployment workflows. Getting Started and Support ### What training and onboarding options does Checkmarx offer? Checkmarx provides in person training, live online sessions, webinars, documentation, and videos for teams getting started. In person and live online formats support guided instruction, webinars offer scheduled overviews, and documentation and videos give self-paced reference material for learning product features and setup steps. Getting Started and Support ### What customer support options does Checkmarx offer? Checkmarx provides Email/Help Desk, FAQ/Forum, Knowledge Base, Phone Support, and 24/7 Live Rep. With no reviewer feedback about support quality available, the support experience cannot be characterized further. These channels give users multiple ways to seek help and product information at any time. ## Features AI summary Based on 98 Static Application Security Testing (SAST) reviews Capterra data shows that buyers of Static Application Security Testing (SAST) rank the following features as their top priorities: - **Application Security** (**75%** of reviewers rated this feature as critical) - **Dashboard** (**24%**) - **Integrated Development Environment** (**39%**) Checkmarx supports all three of the features reviewers call out most often: **Application Security**, **Dashboard**, and **Integrated Development Environment**. This coverage gives teams a way to identify security issues in code, monitor findings through a central view, and work within familiar development tools, helping businesses improve code quality, reduce risk, and address vulnerabilities earlier in the development process. Application Security 4.8 (4) 75.00% of 4 reviewers that rated this feature as important or highly important Identify and respond to security threats to developed applications Dashboard 3.5 (4) 75.00% of 4 reviewers that rated this feature as important or highly important Assembly of graphs and charts for visualizing and tracking statistics/metrics Integrated Development Environment 3.0 (3) 66.67% of 3 reviewers that rated this feature as important or highly important An application for source code editing, compiling, and debugging Vulnerability Scanning 4.8 (4) 75.00% of 4 reviewers that rated this feature as important or highly important Discover patch statuses and vulnerabilities Real-Time Analytics 3.0 (3) 66.67% of 3 reviewers that rated this feature as important or highly important Analyze and gain insights into data in real-time For Developers 4.0 (4) 75.00% of 4 reviewers that rated this feature as important or highly important For the intention to be used by developers Checkmarx 19 features ### All Features - Access Controls/Permissions: Define levels of authorization for access to specific files or systems - Alerts/Notifications: Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges - API: Application programming interface that allows for integration with other systems/databases - Application Security: Identify and respond to security threats to developed applications - Collaboration Tools: Provides a channel for team members to share AI models, media files, communicate, and work together - Compliance Management: Track and manage adherence to policies for any service, product, process, or supplier - Dashboard: Assembly of graphs and charts for visualizing and tracking statistics/metrics - Data Import/Export: Import and export data to and from software applications - Debugging: Detect and remove errors - For Developers: For the intention to be used by developers - Integrated Development Environment: An application for source code editing, compiling, and debugging - Multi-Language Scanning: Scan for security vulnerabilities in multiple coding languages - Real-Time Analytics: Analyze and gain insights into data in real-time - Reporting/Analytics: View and track pertinent metrics to find patterns and gain insights from data - Security Testing: Uncovers vulnerabilities of the system and determines whether system data and resources are protected from possible intruders - Software Development: Development of software programs - Source-Code Scanning: Scan the initial code written for application development - Third-Party Integrations: Set up connections to third-party platforms to improve business processes - Vulnerability Scanning: Discover patch statuses and vulnerabilities --- Features 4.3 (7) 4.3 Based on 7 reviews ## Pricing Value for money 3.0 (4) Value for money 3.0 (4) 3.0 Based on 4 reviews ## Integrations [ Jenkins](https://www.capterra.com/p/171026/Jenkins/)[ AWS Lambda](https://www.capterra.com/p/211010/AWS-Lambda/)[ TeamCity](https://www.capterra.com/p/136011/Teamcity/)[ Elsevier Pure](https://www.capterra.com/p/233902/Elsevier-Pure/)[ GitLab](https://www.capterra.com/p/10064243/GitLab/) ## Support, customer service and training options Customer Service 4.0 (3) Support - Email/Help Desk - FAQs/Forum - Knowledge Base - Phone Support - 24/7 (Live rep) - Chat Training - In Person - Live Online - Webinars - Documentation - Videos Deployment - Web - Android - iPhone/iPad Typical users - Freelancers - Small businesses - Mid size businesses - Enterprises Customer Service 4.0 (3) 4.0 Based on 3 reviews ## User reviews Overall rating 3.9 Based on 7 reviews Filter by rating 5(3) 4(2) 3(1) 2(0) 1(1) Mentioned topic Sorted by most recent Daniel B. Manager of Static Code Analysis Hospital & Health Care ### "Gives a full 360 degree view of vulnerabilities in static code" 5.0 Overall Rating 5.0 5.0 Ease of Use 5.0 5.0 Features 5.0 5.0 Customer Service 0.0 0.0 Likelihood to Recommend 10/10 January 22, 2023 My personal overall experience with SAST is positive. I like that I can tweak queries myself and if there is something I can't do, support is just a phone call/ticket away. They respond to all inquiries very quickly. Pros The ability to use CI/CD pipelines so when the build task kicks off, scanning for static code and open source libraries is done at build time. Cons The only thing I do not like is we have some languages that the product does not support like ColdFusion and R-Code. Alternatives considered [Veracode](https://www.capterra.com/p/227778/Veracode/) Review source Non-incentivized review: any software user can leave a review for any product listed on our site. All submitted reviews are subject to our verification process prior to publication. Shreyans M. Team Leader Banking ### "Preferred Vulnerability Management Tool" 4.0 Overall Rating 4.0 4.0 Ease of Use 4.0 4.0 Features 4.0 4.0 Customer Service 0.0 0.0 Likelihood to Recommend 8/10 November 12, 2022 Pros Can be used to analyse application, source code, byte code, and binaries for coding and design conditions.Key elements of the checkmarx dashboard can be split into two sections, namely scan, statistics and scan trends. Cons Unavailable or downtime of application causes delay in deploying the code through pipeline which is integrated with Checkmarx. Review source Incentivized review: software users are invited to submit an honest review and offered a nominal incentive for their time and effort. All incentivized reviews are subject to our verification process prior to publication. DG Donovan G. Head of QA Financial Services ### "Super expensive but also feels outdated" 1.0 Overall Rating 1.0 1.0 Ease of Use 1.0 1.0 Features 4.0 4.0 Customer Service 2.0 2.0 Likelihood to Recommend 3/10 March 25, 2022 Overall I did not enjoy using it. Pros It certainly covers all the vulnerability rules you would ever need. Cons It is SUPER expensive, very slow and the reporting is too messy. It would have been better if it can take a more integrated into the code approach like Sonar. Review source Incentivized review: software users are invited to submit an honest review and offered a nominal incentive for their time and effort. All incentivized reviews are subject to our verification process prior to publication. JM Juan M. Application Security Manager Banking ### "Checkmarx a strong and reliable competitor " 4.0 Overall Rating 4.0 4.0 Ease of Use 4.0 4.0 Features 4.0 4.0 Customer Service 5.0 5.0 Likelihood to Recommend 8/10 November 18, 2021 It has been a good experience, the support is fast and reliable. The tool work as expected and you can use the api integration to go even further. Pros Easy of use, the 0 complexity it adds to configure a new project, it feels to work in a collaborative way even in an on premise environment. Cons The implementation requires Windows and SQL, i would prefer that it runs on linux with postgresql. The reporting could be improved. Reasons for choosing Checkmarx We needed an on premise solution (veracode is 100% Cloud), and an easy y quick way to configure projects Fortify is a little bit complex, and depend on the language to be scanned Review source Incentivized review: software users are invited to submit an honest review and offered a nominal incentive for their time and effort. All incentivized reviews are subject to our verification process prior to publication. :man::computer: Sarai P. Web developer Publishing ### "Intuitive software " 5.0 Overall Rating 5.0 5.0 Ease of Use 5.0 5.0 Features 5.0 5.0 Customer Service 0.0 0.0 Likelihood to Recommend 4/10 April 26, 2021 Pros Finding code vulnerabilities is hard. CxSAST makes it easy. Not only does it point out the vulnerability, it explains why the code is vulnerable, which is very valuable for future proofing code. Cons Can sometimes include false positives. However this is mitigated by selecting “proposed not exploitable” if necessary. Review source Incentivized review: software users are invited to submit an honest review and offered a nominal incentive for their time and effort. All incentivized reviews are subject to our verification process prior to publication. TV Tiennot V. CTO Computer & Network Security ### "CxSAST - A great static software analyzer" 5.0 Overall Rating 5.0 5.0 Ease of Use 4.0 4.0 Features 5.0 5.0 Customer Service 5.0 5.0 Likelihood to Recommend 10/10 January 15, 2021 Pros CXSast has several very important advantages. The first is that the code is scanned before it is even compiled, this means that de developers can scan and fix while they are still in the coding process. Second CXSAST fully integrates in any devops proces. Scanning and reporting will be doen from within the screens developers work in, so no unneccesary switching between screens. (see extention CXflow) Nex to that the rules (or queries) are open, every one can see them or a organisation can tailor them to their own need. If needed a FP free setup can be created! V9.3 now enable installation of the engines on Linux, you can dockarize the stuff Last but not least CXSast can be setup with additions such as CX-SCA (opensource analysis) and CX-IAST (passive IAST scanning) Cons The installation can sometimes be difficult. However Checkmarx counters this by offering free installation services for their costumers. Review source Non-incentivized review: any software user can leave a review for any product listed on our site. All submitted reviews are subject to our verification process prior to publication. JM Jayesh M. Web Developer Leisure, Travel & Tourism ### "Its on OK Product" 3.0 Overall Rating 3.0 3.0 Ease of Use 3.0 3.0 Features 3.0 3.0 Customer Service 0.0 0.0 Likelihood to Recommend 6/10 August 19, 2019 Pros We use this tool to check security vulnerabilities Option to configure multiple projects Compare the results between two scans Download the report results Cons Not very User-Friendly. Takes time to run the scan Difficult to configure with development studios. Review source Non-incentivized review: any software user can leave a review for any product listed on our site. All submitted reviews are subject to our verification process prior to publication. [View all Reviews](https://www.capterra.com/p/10021366/Checkmarx-One/reviews/) ## Top-rated software of 2026 ### Fill out the form and we'll send a list of the top-rated software based on real user reviews directly to your inbox.