Tech riderRev. 3 Oct 2026

Checkmarx API Security

Ch 206.3of 65 Software Composition Analysis Software

1Runs onAPI, self-hosted, Web
2CostsNot stated by the maker
3API discoveryYes
4Runtime protectionNo
5API posture managementYes
6Sensitive data detectionYes
7Specification governanceYes
8Deployment modelcloud

7 lines stated Written from the maker's own pages: checkmarx.com

Visit site Alternatives

Overview

Checkmarx API Security is ranked #20 of 65 in software composition analysis software on Specifiction. It runs on API, Self-hosted, Web. There is no free plan.

Checkmarx API Security plans and pricing

All plans

Checkmarx One bundle Not published Pricing is based on developers, apps, and usage. Custom quote · Pricing based on developers, apps and usage checkmarx.com · 20 Sept 2026

Essentials Not published SAST · SCA · API Security · ASPM; additional modules available as add-ons checkmarx.com · 3 Oct 2026

Professional Not published Everything in Essentials · Malicious Package Protection · Repository Health · DAST · Container Security; additional modules available as add-ons checkmarx.com · 3 Oct 2026

Enterprise Not published Everything in Essentials and Professional · IaC Security · Secrets Detection · Codebashing; additional modules available as add-ons checkmarx.com · 3 Oct 2026

Start with SAST Not published SAST · API Security available as an add-on · Ideal for existing on-prem customers checkmarx.com · 3 Oct 2026

Compared on software composition analysis software

Free plan: Nocheckmarx.com
API discovery: Yescheckmarx.com
Runtime protection: Nocheckmarx.com
API posture management: Yescheckmarx.com
Sensitive data detection: Yescheckmarx.com
Specification governance: Yescheckmarx.com
Deployment model: cloudcheckmarx.com

Facts

Purpose: Checkmarx API Security discovers APIs in application code and documentation, including undocumented shadow APIs and abandoned zombie APIs.checkmarx.com · 3 Oct 2026
Inventory: It provides a global API inventory with detected vulnerabilities and supports prioritizing remediation by business risk.checkmarx.com · 3 Oct 2026
Documentation scanning: It scans OpenAPI, Swagger, and Postman collections and compares documentation against the API inventory to identify discrepancies and undocumented APIs.checkmarx.com · 3 Oct 2026
Change history: The API Change Log shows API history, including the commit and developer associated with a change that introduced a vulnerability.checkmarx.com · 3 Oct 2026
DAST correlation: Checkmarx DAST findings can be correlated with SAST findings in a unified API inventory to identify issues confirmed during runtime testing.checkmarx.com · 3 Oct 2026
Supported frameworks: The API Security scanner currently supports Java Spring, ASP.NET Web API, and Python Flask.docs.checkmarx.com · 3 Oct 2026
Integrations: Checkmarx lists integrations including GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, GitHub Actions, VS Code, JetBrains, Jira, Slack, and Microsoft Teams.checkmarx.com · 3 Oct 2026
Security: Checkmarx says customer data is encrypted at rest using protocols such as AES-256, and service communications use HTTPS with TLS 1.2 for data to and from Amazon S3.checkmarx.com · 3 Oct 2026
Compliance: Checkmarx says it undergoes an annual independent SOC 2 Type II audit and aligns its privacy program with GDPR requirements.checkmarx.com · 3 Oct 2026
Support: The API Security product page says an AppSec expert will respond to inquiries within one business day.checkmarx.com · 3 Oct 2026
Pricing: Checkmarx says pricing is custom quoted based on modules, deployment model, and number of developers in scope.checkmarx.com · 3 Oct 2026
Trial: Checkmarx says it does not offer a self-serve free trial and offers a personalized demo instead.checkmarx.com · 3 Oct 2026
Audience: Checkmarx describes Essentials as core application security for teams building their program, Professional as a scaling package, and Enterprise as coverage for organizations with demanding security requirements.checkmarx.com · 3 Oct 2026