Side by side
Checkmarx SCA vs Sonatype SBOM Manager
Both stand on dependency management software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Paid Web
Checkmarx SCA brings open-source security, licensing, SBOM generation, and code-workflow scanning into a cloud module. Prospective customers must request a quote based on their development footprint.
Visit Checkmarx SCA Paid Web
Visit Sonatype SBOM Manager The facts
| Checkmarx SCA | Sonatype SBOM Manager | |
|---|---|---|
| Free plan | No | Not published |
| Open source | Not published | Not published |
| Runs on | Web | Web |
| Lowest paid plan | Free or on request | Not published |
| Plans published | 1 | None |
| Maker | Not published | Not published |
| Website | checkmarx.com | sonatype.com |
| On dependency management software | #23 of 27 | #27 of 27 |
Checkmarx SCA: what it does well
- Supports many programming ecosystems
- Generates software bills of materials
- Includes reachability analysis
- Scans pull requests
- Cloud deployment
What to know first
- No free plan
- Pricing requires a custom quote
- Pricing depends on developers, applications, and usage
Sonatype SBOM Manager: what it does well
Alternatives to Checkmarx SCA Alternatives to Sonatype SBOM Manager The whole list