• HOME
  • CATEGORIES

    • CATEGORIES

    • Browse All Categories
  • FOR VENDORS

    • FOR VENDORS

    • Log In to Vendor Portal
    • Get Started
  • REVIEWS

    • REVIEWS

    • Write a Review
    • Product Reviews
    • Vendor Directory
    • Product Comparisons
  • GARTNER PEER COMMUNITY™
  • GARTNER.COM
  • Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQPrivacyTerms of Service
    ©2026 Gartner, Inc. and/or its affiliates.
    All rights reserved.
  • Categories

    • No categories available

      Browse All Categories

      Select a category to view markets

  • For Vendors

    • Log In to Vendor Portal 

    • Get Started 

  • Write a Review

Join / Sign In
  1. Home
  2. /
  3. Checkmarx SAST
Logo of Checkmarx SAST

Checkmarx SAST

byCheckmarx
in
4.6
Market Presence: Application Security Testing, Mobile Application Security Testing

Overview

Product Information on Checkmarx SAST

Updated 13th October 2025

What is Checkmarx SAST?

Checkmarx SAST is a software designed to analyze application source code in order to identify security vulnerabilities during the software development process. The software supports multiple programming languages and frameworks, enabling development and security teams to detect issues early in the application life cycle. Checkmarx SAST provides features such as automated code scanning, integration with development environments and CI/CD pipelines, customizable reporting, and support for compliance requirements. The software addresses business problems related to software security by helping organizations manage and reduce risks associated with insecure code, promoting safer software releases, and assisting with regulatory adherence.

Checkmarx SAST Pricing

Checkmarx SAST software is offered through a pricing model that typically includes tiered packages based on the number of applications, lines of code, or developers requiring access. Pricing may vary depending on deployment type such as cloud or on-premises and can involve annual subscription or perpetual licensing options with additional fees for maintenance and support.

Overall experience with Checkmarx SAST

Manager, IT Security and Risk Management
30B + USD, Finance (non-banking)
FAVORABLE

“Consistent SAST Scanning Performance Offset by Outdated and Slow User Interface”

4.0
Apr 13, 2026
This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.
APPLICATION SECURITY ENGINNER
30B + USD, Energy and Utilities
CRITICAL

“Checkmarx SAST Offers Detailed Results but Faces Interface and Support Challenges”

3.0
Feb 17, 2026
This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.

About Company

Company Description

Updated 15th December 2025

Checkmarx provides agentic application security, delivering enterprise-grade protection while lowering engineering costs and accelerating development velocity. The Checkmarx One platform scans trillions of lines of code each year for companies, cutting vulnerability density by more than half. Its autonomous security agents detect and counter AI-driven threats across the SDLC, providing prevention-first protection for legacy, modern, and AI-generated code at enterprise scale.

Company Details

Updated 15th December 2025
Company type
Private
Year Founded
2006
Head office location
Paramus, United States
Number of employees
501 - 1000
Website
http://www.checkmarx.com

Do You Manage Peer Insights at Checkmarx?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

Top Checkmarx SAST Alternatives

Logo of Veracode
1. Veracode
4.5
(410 Ratings)
Logo of Fluid Attacks
2. Fluid Attacks
4.8
(337 Ratings)
Logo of Appknox
3. Appknox
4.7
(326 Ratings)
View All Alternatives

Peer Discussions

Checkmarx SAST Reviews and Ratings

4.6

(414 Ratings)

Rating Distribution

5 Star
62%
4 Star
33%
3 Star
3%
2 Star
1%
1 Star
0%
Why ratings and reviews count differ?
  • Manager, IT Security and Risk Management
    10B+ USD
    Finance (non-banking)
    Review Source

    Consistent SAST Scanning Performance Offset by Outdated and Slow User Interface

    4.0
    Apr 13, 2026
    Checkmarx SAST is an old but gold solutions: it does it job very good i.e. SAST security scanning, but the user experience of the Web interface is far from being perfect. The scanning results are OK, in line with the expectation, not too many false positive and very rare false negatives, which is the most important feature of this scanner.
  • Manager, IT Security and Risk Management
    10B+ USD
    Finance (non-banking)
    Review Source

    Consistent SAST Scanning Performance Offset by Outdated and Slow User Interface

    4.0
    Apr 13, 2026
    Checkmarx SAST is an old but gold solutions: it does it job very good i.e. SAST security scanning, but the user experience of the Web interface is far from being perfect. The scanning results are OK, in line with the expectation, not too many false positive and very rare false negatives, which is the most important feature of this scanner.
  • Read All 433 Reviews

    Get unlimited access to verified peer reviews and insights

    Read unlimited Gartner-vetted product reviews
    View and share valuable product insights
    Download full product profiles
    Review products you use today

Recommended Gartner Insights

  • Critical Capabilities for Application Security Testing
  • Magic Quadrant for Application Security Testing
Powered by Google TranslateThis service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.

Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.

This site is protected by hCaptcha and its Privacy Policy and Terms of Use apply.


Software reviews and ratings for EMMS, BI, CRM, MDM, analytics, security and other platforms - Peer Insights by Gartner
Community GuidelinesListing GuidelinesBrowse VendorsRules of EngagementFAQsPrivacyTerms of Use

©2026 Gartner, Inc. and/or its affiliates.

All rights reserved.

User Sentiment About Checkmarx SAST
Reviewer Insights for: Checkmarx SAST
Deciding Factors: Checkmarx SAST Vs. Market Average
Performance of Checkmarx SAST Across Market Features

Checkmarx SAST Likes & Dislikes

Like

It allows product development teams to interact with it whatever they want: via Web UI, API or multiple CI platform integrations, usually via plugins. It is very important in a heterogenic environment. Another important fact is consistency with results, not too many false positives, configruabels policies and scan configuration.

Like

It allows product development teams to interact with it whatever they want: via Web UI, API or multiple CI platform integrations, usually via plugins. It is very important in a heterogenic environment. Another important fact is consistency with results, not too many false positives, configruabels policies and scan configuration.

Like

It allows product development teams to interact with it whatever they want: via Web UI, API or multiple CI platform integrations, usually via plugins. It is very important in a heterogenic environment. Another important fact is consistency with results, not too many false positives, configruabels policies and scan configuration.

Dislike

Support lead from the product team. Issues in pipeline giving errors but errors are hard to understand.

Dislike

Support lead from the product team. Issues in pipeline giving errors but errors are hard to understand.

Dislike

Support lead from the product team. Issues in pipeline giving errors but errors are hard to understand.