Checkmarx SCA

What Checkmarx SCA is

Checkmarx SCA is a cloud-deployed web module for open-source security, license compliance, and software bill of materials generation. It supports Java with Maven, JavaScript and TypeScript with NPM, .NET with NuGet, Python with PIP, PHP with Composer, Swift and iOS, Go, Ruby, C and C++ with Conan, Unity, Perl with CPAN, and Dart with Pub. Its listed capabilities include reachability analysis and pull request scanning. Checkmarx was founded in 2006 and is headquartered in Ramat Gan, Israel. The SCA module is offered through a custom quote, with pricing based on developers, applications, and usage; the pricing note says pricing is available on request. There is no free plan. The web format and broad ecosystem coverage make it suitable for teams managing dependencies across varied programming environments while addressing component security, licensing, and SBOM requirements.

Who it suits

It suits development organizations working with multiple supported language ecosystems. Teams seeking SCA, license compliance, SBOM generation, reachability analysis, and pull request scanning may consider it.

Limits

There is no free plan. The custom-quote plan is priced according to developers, applications, and usage.

Getting started

1. Open the Checkmarx SCA website
2. Request a custom quote
3. Provide developer, application, and usage details
4. Access the cloud-deployed web module
5. Connect projects from a supported ecosystem
6. Use reachability analysis and pull request scanning

Verdict

Checkmarx SCA brings open-source security, licensing, SBOM generation, and code-workflow scanning into a cloud module. Prospective customers must request a quote based on their development footprint.