Checkmarx DAST

Spec sheet

Purpose

Checkmarx DAST is a language-agnostic tool that tests live web applications and APIs by simulating real-world attacks.Read 3 Oct 2026 · docs.checkmarx.com

Intended users

Checkmarx describes DAST as a tool for enterprise teams and positions it within the Checkmarx One application security platform.Read 3 Oct 2026 · checkmarx.com

Deployment

Checkmarx One is offered as cloud SaaS and supports self-hosted and on-premises deployments, including for air-gapped environments.Read 3 Oct 2026 · checkmarx.com

Integrations

Checkmarx lists CI/CD integrations including Jenkins, TeamCity, GitHub Actions, Azure DevOps, Maven, Bitbucket Pipelines, CircleCI, GitLab CI, Bamboo, AWS CodeBuild, and SonarQube.Read 3 Oct 2026 · checkmarx.com

Security

Checkmarx says customer data is encrypted at rest using protocols such as AES-256 and that service communications use HTTPS, with data to and from S3 encrypted using TLS 1.2.Read 3 Oct 2026 · checkmarx.com

Compliance

Findings can be mapped to the compliance frameworks they affect to help teams prioritize remediation for audit readiness.Read 3 Oct 2026 · checkmarx.com

Support

Premium Support includes 24/7 coverage and a two-hour response time for critical P1 issues; Standard Support lists six hours for P1 issues during working hours on business days.Read 3 Oct 2026 · checkmarx.com

Founded

2006Read 28 Sep 2026 · checkmarx.com

API coverage

DAST tests REST, SOAP, and gRPC endpoints in live environments and centralizes SAST and DAST API findings in one inventory.Read 3 Oct 2026 · checkmarx.com

Authentication

DAST supports browser-recorded login flows, two-factor authentication, and instant verification for application coverage.Read 3 Oct 2026 · checkmarx.com

CI/CD scanning

DAST can run automatically on every build in development and pre-production, with results surfaced in the pipeline.Read 3 Oct 2026 · checkmarx.com

Compliance certifications

Checkmarx states that it is ISO/IEC 27001:2022 certified and undergoes an annual independent SOC 2 Type II audit.Read 3 Oct 2026 · checkmarx.com

Internal apps

Built-in tunnelling lets teams scan internal applications without firewall exceptions or network reconfiguration.Read 3 Oct 2026 · checkmarx.com

Pricing limit

DAST is not sold as a standalone product and is available as an add-on within Checkmarx One Professional or higher.Read 3 Oct 2026 · checkmarx.com

Trial and demo

Checkmarx says it does not offer a self-serve free trial and offers personalized demos instead.Read 3 Oct 2026 · checkmarx.com

Plans and prices

Every Checkmarx DAST plan and price →

Where Specifiction places it

• Dynamic Application Security Testing Software#11 of 267.7