No. 56 of 65 ·Software Composition Analysis Software

Checkmarx API Security

Web · Self-hosted · API

Freedom report

One barScore 5.0

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

Checkmarx API Security is ranked #56 of 65 in software composition analysis software on Freedom251. It runs on API, Self-hosted, Web. There is no free plan.

Checkmarx API Security plans and pricing

All plans

Checkmarx One bundle Not published Pricing is based on developers, apps, and usage. Custom quote · Pricing based on developers, apps and usage checkmarx.com · 20 Sept 2026

Essentials Not published SAST · SCA · API Security · ASPM; additional modules available as add-ons checkmarx.com · 3 Oct 2026

Professional Not published Everything in Essentials · Malicious Package Protection · Repository Health · DAST · Container Security; additional modules available as add-ons checkmarx.com · 3 Oct 2026

Enterprise Not published Everything in Essentials and Professional · IaC Security · Secrets Detection · Codebashing; additional modules available as add-ons checkmarx.com · 3 Oct 2026

Start with SAST Not published SAST · API Security available as an add-on · Ideal for existing on-prem customers checkmarx.com · 3 Oct 2026

Compared on software composition analysis software

Free plan: No
API discovery: Yes
Runtime protection: No
API posture management: Yes
Sensitive data detection: Yes
Specification governance: Yes
Deployment model: cloud

Best Checkmarx API Security alternatives

See all 20

Two bars Snyk Open Source Free tier No. 1$25/mo6.7 Two bars Sonatype Nexus Repository Free tier No. 2$162.50/mo6.7 Two bars Accessibility Test Framework for Android Free tier No. 3Free6.6 Two bars Docker Desktop Free tier No. 4$9/mo6.6 Two bars Endor Labs Free tier No. 5Free6.6 Two bars Socket Free tier No. 6$25/mo6.6

The record

Purpose: Checkmarx API Security discovers APIs in application code and documentation, including undocumented shadow APIs and abandoned zombie APIs.
Inventory: It provides a global API inventory with detected vulnerabilities and supports prioritizing remediation by business risk.
Documentation scanning: It scans OpenAPI, Swagger, and Postman collections and compares documentation against the API inventory to identify discrepancies and undocumented APIs.
Change history: The API Change Log shows API history, including the commit and developer associated with a change that introduced a vulnerability.
DAST correlation: Checkmarx DAST findings can be correlated with SAST findings in a unified API inventory to identify issues confirmed during runtime testing.
Supported frameworks: The API Security scanner currently supports Java Spring, ASP.NET Web API, and Python Flask.
Integrations: Checkmarx lists integrations including GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, GitHub Actions, VS Code, JetBrains, Jira, Slack, and Microsoft Teams.
Security: Checkmarx says customer data is encrypted at rest using protocols such as AES-256, and service communications use HTTPS with TLS 1.2 for data to and from Amazon S3.
Compliance: Checkmarx says it undergoes an annual independent SOC 2 Type II audit and aligns its privacy program with GDPR requirements.
Support: The API Security product page says an AppSec expert will respond to inquiries within one business day.
Pricing: Checkmarx says pricing is custom quoted based on modules, deployment model, and number of developers in scope.
Trial: Checkmarx says it does not offer a self-serve free trial and offers a personalized demo instead.
Audience: Checkmarx describes Essentials as core application security for teams building their program, Professional as a scaling package, and Enterprise as coverage for organizations with demanding security requirements.
Founded: 2006

Where it ranks on Freedom251

Best Software Composition Analysis Software in 2026#56 of 65
Best Static Analysis Tools in 2026#35 of 39
Best API Security Software in 2026#23 of 28
Best Container Image Scanning Tools in 2026#23 of 28
Best DevSecOps Platforms in 2026#19 of 26
Best SAST Tools in 2026#22 of 26
Best Dependency Management Software in 2026#21 of 25
Best Static Application Security Testing Software in 2026#21 of 25
Best Application Security Posture Management Software in 2026#15 of 19
Best Interactive Application Security Testing Software in 2026#13 of 15

Is Checkmarx API Security yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Checkmarx API Security

Sources

checkmarx.com/product/api-security/· checked 3 Oct 2026
docs.checkmarx.com/en/34965-163897-api-security-scanner---· checked 3 Oct 2026
checkmarx.com/why-checkmarx/integrations/· checked 3 Oct 2026
checkmarx.com/trust/· checked 3 Oct 2026
checkmarx.com/pricing/· checked 3 Oct 2026
checkmarx.com/product/checkmarx-sca/· checked 28 Sept 2026
checkmarx.com/packaging/· checked 20 Sept 2026