Who is Checkmarx best for?

Checkmarx is built for Enterprise AppSec teams and security engineers, CISOs and security leaders at large organizations, DevSecOps engineers integrating security into CI/CD pipelines, Application developers seeking in-IDE security guidance. Common use cases include Shifting security left into developer IDEs and CI/CD pipelines; Consolidating multiple AppSec point tools into a single enterprise platform; Meeting compliance requirements (PCI DSS, HIPAA, FISMA, FedRAMP) with built-in presets.

How is Checkmarx priced?

Checkmarx does not publish list pricing publicly; all contracts are quote-based. Third-party estimates indicate starting costs of approximately $59,000 per year for entry-level deployments, scaling to approximately $500,000 or more per year for organizations with ~250 developers. Pricing is modular (SAST, SCA, IaC, DAST, API Security, ASPM sold individually or bundled) and varies by deployment model (SaaS via Checkmarx One or on-premises), developer seat count, and scan volume. Multi-year commitments and competitive pressure commonly yield 20–40% discounts below list. Some free open-source tools (KICS, ZAP, 2MS) are available separately.

What are the alternatives to Checkmarx?

Common DevSecOps & Application Security alternatives to Checkmarx include Endor Labs, Snyk, Wiz, Semgrep, Jit. See the full comparison hub at /verticals/devsecops-application-security/compare.

What do users praise about Checkmarx?

Users frequently praise: Comprehensive SAST, SCA, and IaC coverage in one platform; Strong CI/CD pipeline integration; Broad language and framework support; Responsive and knowledgeable customer support; Effective risk prioritization via ASPM; Scalability for large enterprise environments; Good price-performance ratio for enterprise buyers; Customizable scan queries and policies.

What are common complaints about Checkmarx?

Frequently cited limitations: High number of false positives, especially for less common languages; Slow SAST scan times on large or monorepo codebases; Complex and non-intuitive UI/UX; High licensing costs, especially at scale; Reporting can be slow and complex to configure; Limited deep support for newer frameworks (Rust, Go, serverless); Pipeline integration errors can be difficult to diagnose; Additional modules require separate licensing fees.

When was Checkmarx founded and where?

Checkmarx was founded in 2006, headquartered in Paramus, NJ, USA by Maty Siman, Emmanuel Benzaquen.

How big is Checkmarx?

Checkmarx reports 900-1000 employees, 1,800+ total; 860+ on Checkmarx One ente customers, >$150M ARR.

AI visibility report

AI visibility report for Checkmarx in DevSecOps & Application Security.

Outside the top three on 18 of the 25 prompts buyers actually ask.

Endor Labs is cited on 8 of those losses.

25 prompts

6 platforms

Updated Aug 14, 2026 - refreshed weekly

Track Checkmarx daily

Free trial. Setup comes pre-filled for Checkmarx.

Track Checkmarx across these prompts daily.

Start free trial

18percent

Presence Rate

Low presence

Still absent from 82% of tracked prompt responses

Top-3 citations across 150 prompt × platform pairs

+0.34

Sentiment

-1.00.0+1.0

Positive

No clearrank

Peer Ranking

#1#12

No clear rankin DevSecOps & Application Security

Key Metrics

Presence Rate

18.0%

Share of Voice

15.7%

Avg Position

#25.4

Docs Presence

2.0%

Blog Presence

1.3%

Brand Mentions

36.0%

Platform Breakdown

Grok

72%18/25 prompts

Perplexity

Research dossierCapabilities, use cases, sources, reviews, pricing, and FAQ

Overview

Checkmarx is an enterprise application security testing (AST) company founded in 2006 and headquartered in Paramus, NJ. Its flagship product, Checkmarx One, is a unified, cloud-native platform integrating SAST, SCA, DAST, API security, IaC scanning, container security, secrets detection, and Application Security Posture Management (ASPM) under a single interface. An agentic AI layer — the Assist family (Developer, Triage, Remediation Assist) — embeds AI-guided vulnerability prevention and auto-remediation directly into developer IDEs and CI/CD workflows. The platform scans over 800 billion lines of code monthly and supports 75+ programming languages. Acquired by Hellman & Friedman in 2020 for $1.15 billion, Checkmarx One surpassed $150M ARR in October 2025. The company serves more than 1,800 enterprise customers globally, including 40% of Fortune 100 companies, and has been named a Gartner Magic Quadrant Leader for AST seven consecutive times.

AI visibility report

AI visibility report for Checkmarx in DevSecOps & Application Security.

Outside the top three on 18 of the 25 prompts buyers actually ask.

Endor Labs is cited on 8 of those losses.

25 prompts

6 platforms

Updated Aug 14, 2026 - refreshed weekly

Track Checkmarx daily

Free trial. Setup comes pre-filled for Checkmarx.

Track Checkmarx across these prompts daily.

Start free trial

18percent

Presence Rate

Low presence

Still absent from 82% of tracked prompt responses

Top-3 citations across 150 prompt × platform pairs

+0.34

Sentiment

-1.00.0+1.0

Positive

No clearrank

Peer Ranking

#1#12

No clear rankin DevSecOps & Application Security

Key Metrics

Presence Rate

18.0%

Share of Voice

15.7%

Avg Position

#25.4

Docs Presence

2.0%

Blog Presence

1.3%

Brand Mentions

36.0%

Platform Breakdown

Grok

72%18/25 prompts

Perplexity

Research dossierCapabilities, use cases, sources, reviews, pricing, and FAQ

Overview

Reviews

4.6/5Gartner Peer Insights·453+

Praised

Comprehensive SAST, SCA, and IaC coverage in one platform
Strong CI/CD pipeline integration
Broad language and framework support
Responsive and knowledgeable customer support
Effective risk prioritization via ASPM
Scalability for large enterprise environments
Good price-performance ratio for enterprise buyers
Customizable scan queries and policies

Criticized

High number of false positives, especially for less common languages
Slow SAST scan times on large or monorepo codebases
Complex and non-intuitive UI/UX
High licensing costs, especially at scale
Reporting can be slow and complex to configure
Limited deep support for newer frameworks (Rust, Go, serverless)
Pipeline integration errors can be difficult to diagnose
Additional modules require separate licensing fees

Checkmarx consistently earns strong enterprise ratings, recognized as a Gartner Peer Insights Customers' Choice for AST for six consecutive years (2019–2024) with an overall 4.7/5 score and 92% recommendation rate. Reviewers praise its comprehensive feature coverage, broad language support, CI/CD integration quality, and responsive customer support. Common criticisms include high false positive rates (especially for niche languages), slow scan times on large codebases, UI complexity, and high licensing costs. Gartner Peer Insights shows 4.6/5 across 453+ verified reviews; PeerSpot rates Checkmarx One 7.8/10, noting it as the #2 ranked AST solution on their platform.

Prompt	Google AI Mode	Bing Copilot	Gemini Search	ChatGPT	Perplexity	Grok
Capability4/5 cited (80%)
Which software supply chain security tools detect malicious packages, not just known vulnerable versions?	A competitor was cited	Neither your brand nor a competitor was cited	Your brand was cited	A competitor was cited	Your brand and a competitor were cited	Your brand and a competitor were cited

#	Brand	PresencePres.	Share of VoiceSoV	DocsDocs	BlogBlog	MentionsMent.	Avg PosPos	Sentiment
1	Endor Labs	28.7%	23.0%	0.0%	28.0%	16.7%	#18.9	+0.27
2	Snyk	22.0%	17.6%	12.7%	6.7%	60.7%	#27.9	+0.44
3	Wiz	18.0%	13.0%	0.0%	0.0%	18.0%	#25.0	+0.33
4	Checkmarx	18.0%	15.7%	2.0%	1.3%	36.0%	#25.4	+0.34
5	Semgrep	14.0%	11.8%	6.0%	4.7%	33.3%	#28.8	+0.42
6	Jit	10.7%	4.7%	0.0%	0.0%	2.7%	#16.9	+0.25
7	Veracode	6.7%	6.1%	0.7%	5.3%	25.3%	#36.0	+0.31
8	SonarSource	4.7%	2.9%	1.3%	0.7%	2.7%	#21.9	+0.37
9	Aqua Security	4.7%	2.0%	0.0%	0.0%	12.0%	#32.8	+0.29
10	GitGuardian	4.0%	2.7%	0.7%	2.7%	8.7%	#25.5	+0.30
11	Socket	1.3%	0.5%	0.7%	0.0%	7.3%	#10.5	+0.35
12	Chainguard	0.0%	0.0%	0.0%	0.0%	1.3%	—	—

Developer Experience4/5 cited (80%)
What security tooling do teams typically use for managing findings across dozens of repositories from a single security engineer workflow?	Neither your brand nor a competitor was cited	Neither your brand nor a competitor was cited	Neither your brand nor a competitor was cited	A competitor was cited	A competitor was cited	A competitor was cited

Integrations & Ecosystem4/5 cited (80%)
Which DevSecOps tools integrate best with SIEM platforms for correlating app security findings with infrastructure events?	Neither your brand nor a competitor was cited	Neither your brand nor a competitor was cited	Neither your brand nor a competitor was cited	A competitor was cited	Your brand and a competitor were cited	Your brand and a competitor were cited

Performance & Reliability4/5 cited (80%)
Which application security scanning tools are fastest at scale and least likely to slow down PR pipelines as the codebase grows?	A competitor was cited	Neither your brand nor a competitor was cited	Neither your brand nor a competitor was cited	A competitor was cited	A competitor was cited	Your brand and a competitor were cited

AI visibility report for Checkmarx in DevSecOps & Application Security.

Key Metrics

Platform Breakdown

Overview

AI visibility report for Checkmarx in DevSecOps & Application Security.

Key Metrics

Platform Breakdown

Overview

Prompts where competitors are visible and Checkmarx is not.

Where Checkmarx is winning2

Where Checkmarx is losing5

Key Facts

Key Capabilities10

Key Use Cases8

Checkmarx customer outcomes

Recent Trend

How AI describes Checkmarx3

Most cited sources8

Alternatives in DevSecOps & Application Security6

Reviews

Pricing

Limitations

Topic Coverage

Prompt-Level Results

Vertical Ranking

Turn this into your team dashboard

Frequently asked questions

Setup & First Run2/5 cited (40%)
What are the best software supply chain security tools for a polyglot monorepo with Node.js, Python, and Go services?	A competitor was cited	Neither your brand nor a competitor was cited	A competitor was cited	A competitor was cited	Neither your brand nor a competitor was cited	A competitor was cited

AI visibility report for Checkmarx in DevSecOps & Application Security.

Key Metrics

Platform Breakdown

Overview

AI visibility report for Checkmarx in DevSecOps & Application Security.

Key Metrics

Platform Breakdown

Overview

Prompts where competitors are visible and Checkmarx is not.

Where Checkmarx is winning2

Where Checkmarx is losing5

Key Facts

Key Capabilities10

Key Use Cases8

Checkmarx customer outcomes

Recent Trend

How AI describes Checkmarx3

Most cited sources8

Alternatives in DevSecOps & Application Security6

Reviews

Pricing

Limitations

Topic Coverage

Prompt-Level Results

Vertical Ranking

Turn this into your team dashboard

Frequently asked questions

What does Checkmarx do?

Who is Checkmarx best for?

How is Checkmarx priced?

What are the alternatives to Checkmarx?

What do users praise about Checkmarx?

What are common complaints about Checkmarx?

When was Checkmarx founded and where?

How big is Checkmarx?