Overview
Product Information on Checkmarx SAST
What is Checkmarx SAST?
Checkmarx SAST Pricing
Overall experience with Checkmarx SAST
“Checkmarx strengthens security-as-code to help build secure applications”
“Checkmarx SAST Offers Detailed Results but Faces Interface and Support Challenges”
About Company
Company Description
Checkmarx provides agentic application security, delivering enterprise-grade protection while lowering engineering costs and accelerating development velocity. The Checkmarx One platform scans trillions of lines of code each year for companies, cutting vulnerability density by more than half. Its autonomous security agents detect and counter AI-driven threats across the SDLC, providing prevention-first protection for legacy, modern, and AI-generated code at enterprise scale.
Company Details
Do You Manage Peer Insights at Checkmarx?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
Top Checkmarx SAST Alternatives
Peer Discussions
Checkmarx SAST Reviews and Ratings
- IT Security & Risk Management Associate1B-10B USDTransportationReview Source
Checkmarx strengthens security-as-code to help build secure applications
The overall experience with CheckmarX has been truly exceptional. The vendor has been very supportive of us throughout the implementation and post-implementation phases, addressing our concerns promptly and smoothly. They also consistently share updates and newly added features, taking time to explain them clearly to our team. CheckmarX's SAST solution is reliable and suited for development and security teams looking to integrate security seamlessly into their process. More importantly, it plays a critical or crucial role in strengthening our application security by identifying vulnerabilities in the early development cycle, reducing risk, and ensuring that our product or application is secure and compliant. - Manager, IT Security and Risk Management<50M USDBankingReview Source
Discuss the product's advantages and areas for improvement.
Overall, the experience is acceptable. Regarding the local version of Checkmarx, since there is a new EOS version every year, a new version is released almost every year. Updating Checkmarx will introduce new vulnerabilities. During the transition period of upgrading and conversion, can the manufacturer temporarily borrow the license to allow the old version and the new version to run simultaneously? For normal business use, the old version should still be used. The new version can be provided to the AP colleagues to identify and fix the vulnerabilities first, so as to avoid a large number of vulnerabilities after direct upgrade that may cause problems in internal processes. - Manager, IT Security and Risk Management10B+ USDFinance (non-banking)Review Source
Consistent SAST Scanning Performance Offset by Outdated and Slow User Interface
Checkmarx SAST is an old but gold solutions: it does it job very good i.e. SAST security scanning, but the user experience of the Web interface is far from being perfect. The scanning results are OK, in line with the expectation, not too many false positive and very rare false negatives, which is the most important feature of this scanner. - MANAGER, IT SECURITY AND RISK MANAGEMENT1B-10B USDTelecommunicationReview Source
Comprehensive Vulnerability Tracking Provided With Helpful Support Team Assistance
We are using Checkmarx SAST, SCA and CxOne-DAST for our inhouse developed application, it's provide you the comprehensive vulnerability report and easy to manage and track the vulnerability on the tools. The overall experience was good and especially when it come with the CxSupport team in order to upgrade/update or troubleshooting the product. - SOFTWARE DEVELOPMENT MANAGER50M-1B USDBankingReview Source
Buy it now, improve security
Checkmarx have been a great vendor, provided excellent customer service with a product that has really helped us tighten up our security posture and ensure we minimise our vulnerabilities. Where new, and critical issues have appeared, Checkmarx have reached out proactively to warn us and suggest a sensible course of action, before we've even realised we're affected.



