No. 13 of 28 ·Dynamic Application Security Testing Software

Checkmarx DAST

Web · Windows · Mac · Linux · Self-hosted · API

Freedom report

Two barsScore 5.2

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely4 of 6 device platforms
DocumentedPlans, terms and facts published

Checkmarx DAST is ranked #13 of 28 in dynamic application security testing software on Freedom251. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is no free plan.

Checkmarx DAST plans and pricing

All plans

Essentials Not published DAST is an add-on · custom quote based on modules, deployment model, and developer count · SaaS or self-hosted deployment checkmarx.com · 3 Oct 2026

Professional Not published Includes DAST · custom quote based on modules, deployment model, and developer count · SaaS or self-hosted deployment checkmarx.com · 3 Oct 2026

Compared on dynamic application security testing software

Authenticated scanning: Yes
API testing: Yes
Browser-based scanning: Yes
CI/CD integration: Yes
Deployment model: hybrid

Best Checkmarx DAST alternatives

See all 12

Two bars OWASP ZAP Free tier No. 1Free6.5 No signal Qualys External Attack Surface Management Paid plans No. 2—6.5 One bar Beagle Security Free tier No. 3$99/mo6.4 One bar Bright Security DAST Paid plans No. 4—5.7 One bar Burp Suite DAST Paid plans No. 5—5.6 One bar Veracode DAST Paid plans No. 6—5.6

The record

Purpose: Checkmarx DAST is a language-agnostic tool that tests live web applications and APIs by simulating real-world attacks.
CI/CD scanning: DAST can run automatically on every build in development and pre-production, with results surfaced in the pipeline.
Internal apps: Built-in tunnelling lets teams scan internal applications without firewall exceptions or network reconfiguration.
Authentication: DAST supports browser-recorded login flows, two-factor authentication, and instant verification for application coverage.
API coverage: DAST tests REST, SOAP, and gRPC endpoints in live environments and centralizes SAST and DAST API findings in one inventory.
Compliance: Findings can be mapped to the compliance frameworks they affect to help teams prioritize remediation for audit readiness.
Integrations: Checkmarx lists CI/CD integrations including Jenkins, TeamCity, GitHub Actions, Azure DevOps, Maven, Bitbucket Pipelines, CircleCI, GitLab CI, Bamboo, AWS CodeBuild, and SonarQube.
Deployment: Checkmarx One is offered as cloud SaaS and supports self-hosted and on-premises deployments, including for air-gapped environments.
Pricing limit: DAST is not sold as a standalone product and is available as an add-on within Checkmarx One Professional or higher.
Trial and demo: Checkmarx says it does not offer a self-serve free trial and offers personalized demos instead.
Security: Checkmarx says customer data is encrypted at rest using protocols such as AES-256 and that service communications use HTTPS, with data to and from S3 encrypted using TLS 1.2.
Compliance certifications: Checkmarx states that it is ISO/IEC 27001:2022 certified and undergoes an annual independent SOC 2 Type II audit.
Support: Premium Support includes 24/7 coverage and a two-hour response time for critical P1 issues; Standard Support lists six hours for P1 issues during working hours on business days.
Intended users: Checkmarx describes DAST as a tool for enterprise teams and positions it within the Checkmarx One application security platform.

Where it ranks on Freedom251

Best Dynamic Application Security Testing Software in 2026#13 of 28

Is Checkmarx DAST yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Checkmarx DAST

Sources

docs.checkmarx.com/en/34965-433898-checkmarx-dast.html· checked 3 Oct 2026
checkmarx.com/checkmarx-dast/· checked 3 Oct 2026
checkmarx.com/why-checkmarx/integrations/· checked 3 Oct 2026
checkmarx.com/pricing/· checked 3 Oct 2026
checkmarx.com/trust/· checked 3 Oct 2026
checkmarx.com/support/· checked 3 Oct 2026