Checkmarx
Agentic AI-powered application security platform for the era of AI-generated code
Enterprise·All audiences·Powered by Anthropic·API available
Key strengths
Hybrid scanning combining rules-based precision with AI (Anthropic)Highest fidelity vulnerability detection (11% higher true-positive rate, 2.5x higher F1 score than average SAST tools)AI-powered security agents (Developer Assist, Triage & Remediation Assist)AI supply chain security (AI-BOM, LLM scanning, MCP scanning)Unified risk intelligence and ASPM across every attack surface800B+ lines of code analyzed monthlyGartner Magic Quadrant Leader and Forrester Wave Leader
Enterprise pricing
Ramat Gan, Israel
Founded 2006
Self-hostable
Facts verified against checkmarx.com on
Recent changes
- Models updated: Anthropic
- Plans updated: Four tiers: Essentials (core AppSec coverage), Professional (advanced + AI-powered), Enterprise (complete coverage & full compliance), and Start with SAST (for existing on-prem customers). All plans require a custom quote.
Get alerts when Checkmarx changes
Free. We'll email you when pricing, the free tier, API access or open-source status changes.
No ratings yet
Checkmarx — Developer & Integration Documentation
API Access Checkmarx exposes an API, enabling teams to integrate security scanning programmatically into custom pipelines, dashboards, and automation workflows.
Supported Integrations
| Integration Type | Details |
|---|---|
| IDE | Plugin-based integration for in-editor vulnerability feedback |
| CI/CD | Pipeline-native scanning to gate builds on security findings |
| Git | Repository-level scanning triggered on code commits |
| PR Checks | Automated security feedback on pull requests before merge |
| MCP Server | Model Context Protocol support for AI-agent-aware security tooling |
Deployment Options
- Self-hosted: Checkmarx can be deployed on-premises or in a private cloud, suitable for organizations with strict data residency or air-gapped requirements
- Enterprise SaaS: Managed deployment available under enterprise agreements
AI Architecture
- AI capabilities are powered by Anthropic models
- Hybrid scanning architecture combines deterministic rules-based analysis with Anthropic-powered AI inference
- AI agents (Developer Assist, Triage & Remediation Assist) operate within developer and security workflows
- AI supply chain scanning covers AI-BOM generation, LLM component scanning, and MCP scanning
Pricing Tiers
- Essentials — Core AppSec coverage
- Professional — Advanced features + AI-powered capabilities
- Enterprise — Complete coverage and full compliance
- Start with SAST — Designed for existing on-premises customers migrating to the platform
- All tiers require a custom quote
Alternatives
See all alternatives Alternatives to Checkmarx
Is Checkmarx yours? Claim the listing & get the badge