Best Checkmarx DAST Alternatives in 2026
Updated
20 apps from dynamic application security testing software ranked against Checkmarx DAST on the same published basis.
- 1Checkmarx DAST vs OWASP ZAP
- 2Checkmarx DAST vs Qualys External Attack Surface Management
- 3Checkmarx DAST vs Beagle Security
- 4Checkmarx DAST vs Detectify Surface Monitoring
- 5Checkmarx DAST vs Bright Security DAST
- 6Checkmarx DAST vs Burp Suite DAST
- 7Checkmarx DAST vs Veracode DAST
- 8Checkmarx DAST vs OpenText Fortify DAST
- 9Checkmarx DAST vs Safeguard DAST
- 10Checkmarx DAST vs Tenable One Attack Surface Management
- 11Checkmarx DAST vs Wapiti
- 13Checkmarx DAST vs FortiDAST
- 14Checkmarx DAST vs Holm Security Cloud Security
- 15Checkmarx DAST vs Rapid7 Surface Command
- 16Checkmarx DAST vs StackHawk HawkScan
- 17Checkmarx DAST vs w3af
- 18Checkmarx DAST vs SecuDAST
- 19Checkmarx DAST vs Astra DAST Scanner
- 20Checkmarx DAST vs Indusface WAS
- 21Checkmarx DAST vs Invicti
Checkmarx DAST alternatives compared
| # | App | Score | Free plan | From | Runs on |
|---|---|---|---|---|---|
| 1 | OWASP ZAP | 6.5 | Free plan | Free | API, Linux, Mac, self-hosted, Windows |
| 2 | Qualys External Attack Surface Management | 6.5 | No | — | API, Linux, Web |
| 3 | Beagle Security | 6.4 | Free plan | $99/mo | API, Web |
| 4 | Detectify Surface Monitoring | 6.4 | Free plan | €208.33/mo | API, Web |
| 5 | Bright Security DAST | 5.7 | No | — | API, Linux, Mac, self-hosted, Web, Windows |
| 6 | Burp Suite DAST | 5.6 | No | — | API, Linux, self-hosted, Web, Windows |
| 7 | Veracode DAST | 5.6 | No | — | API, Linux, Mac, Web, Windows |
| 8 | OpenText Fortify DAST | 5.3 | No | — | Linux, Web |
| 9 | Safeguard DAST | 5.3 | No | — | self-hosted, Web |
| 10 | Tenable One Attack Surface Management | 5.3 | No | — | Linux, Mac, Web, Windows |
| 11 | Wapiti | 5.3 | No | — | Windows, Mac, Linux |
| 13 | FortiDAST | 5.2 | No | — | Web |
| 14 | Holm Security Cloud Security | 5.2 | No | — | Web |
| 15 | Rapid7 Surface Command | 5.2 | No | — | API, Linux, Mac, Web, Windows |
| 16 | StackHawk HawkScan | 5.2 | No | $10/mo | API, Linux, Mac, self-hosted, Web, Windows |
| 17 | w3af | 5.2 | No | — | Linux, Mac |
| 18 | SecuDAST | 5.1 | No | — | — |
| 19 | Astra DAST Scanner | 5.0 | No | $58.25/mo | API, Web |
| 20 | Indusface WAS | 5.0 | No | $49.92/mo | Web |
| 21 | Invicti | 5.0 | No | — | API, self-hosted, Web |
Make your app an alternative to Checkmarx DAST
See the priceThe sponsored alternative slot on this page is labelled Sponsored.
Questions about Checkmarx DAST alternatives
What is the best alternative to Checkmarx DAST?
OWASP ZAP, number 1 in dynamic application security testing software with a score of 6.5 out of 10. The others here: Qualys External Attack Surface Management, Beagle Security, Detectify Surface Monitoring and 16 more.
What is the best free alternative to Checkmarx DAST?
OWASP ZAP is the best-ranked alternative with a free plan. 3 of the 20 alternatives here publish a free plan on their own pricing pages.
How are these alternatives ranked?
Ranked free-and-open first: a usable free tier and open-source code, then the platforms it runs on and its documentation.





























