Side by side
Checkmarx One vs Invicti
Both stand on vulnerability scanner software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Paid Web
Visit Checkmarx One Paid APISelf-hostedWeb
Choose Invicti if your team needs application and API security testing with risk prioritization, remediation context, and connections to development tools. Look elsewhere if you need a free plan or published pricing for the main platform packages.
Visit InvictiThe facts
| Checkmarx One | Invicti | |
|---|---|---|
| Free plan | No | No |
| Open source | Not published | Not published |
| Runs on | Web | API, Self-hosted, Web |
| Lowest paid plan | Not published | Agentic Pentest: $500, paid once |
| Plans published | None | 4 |
| Maker | Not published | Not published |
| Website | checkmarx.com | invicti.com |
| On vulnerability scanner software | #22 of 29 | #18 of 29 |
Checkmarx One: what it does well
Invicti: what it does well
- Testing covers DAST, SAST, SCA, IaC, secrets, and containers.
- Tests REST, SOAP, and GraphQL APIs.
- Ranks findings using runtime, exploitability, business impact, and threat intelligence.
- Integrates with more than 110 tools.
- Lists reports for HIPAA, PCI DSS, and OWASP Top 10.
What to know first
- There is no free plan.
- Pricing is on request for most plans.
- Deployment choices vary by package.
Alternatives to Checkmarx One Alternatives to Invicti The whole list

