Best Checkmarx SAST Alternatives in 2026
Updated
20 tools from static application security testing software ranked against Checkmarx SAST on the same published basis.
- 1Checkmarx SAST vs Skylos
- 2Checkmarx SAST vs Puma Scan
- 3Checkmarx SAST vs Snyk Open Source
- 4Checkmarx SAST vs Horusec
- 5Checkmarx SAST vs Semgrep Code
- 6Checkmarx SAST vs MobSF
- 7Checkmarx SAST vs Veracode DAST
- 8Checkmarx SAST vs PVS-Studio
- 9Checkmarx SAST vs Black Duck Coverity
- 10Checkmarx SAST vs Flawfinder
- 11Checkmarx SAST vs Mend SAST
- 12Checkmarx SAST vs OpenGrep
- 13Checkmarx SAST vs Bandit
- 14Checkmarx SAST vs gosec
- 15Checkmarx SAST vs Dawnscanner
- 16Checkmarx SAST vs Pysa
- 17Checkmarx SAST vs Checkmarx API Security
- 19Checkmarx SAST vs CodeSonar
- 20Checkmarx SAST vs Klocwork
- 21Checkmarx SAST vs NodeJsScan
Checkmarx SAST alternatives compared
| # | Tool | Score | Free plan | From | Runs on |
|---|---|---|---|---|---|
| 1 | Skylos | 8.0 | Free plan | Free | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 2 | Puma Scan | 7.8 | Free plan | $24.92/mo | Linux, Mac, self-hosted, Windows |
| 3 | Snyk Open Source | 7.6 | Free plan | $25/mo | API, Linux, Mac, Web, Windows |
| 4 | Horusec | 7.5 | Free plan | Free | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 5 | Semgrep Code | 7.5 | Free plan | $30/mo | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 6 | MobSF | 7.4 | Free plan | Free | Android, API, iOS, Linux, self-hosted, Web |
| 7 | Veracode DAST | 7.4 | No | — | API, Linux, Mac, Web, Windows |
| 8 | PVS-Studio | 7.2 | No | — | Linux, Mac, Windows |
| 9 | Black Duck Coverity | 7.0 | No | — | Linux, Mac, self-hosted, Web, Windows |
| 10 | Flawfinder | 7.0 | Free plan | Free | Linux, Mac, self-hosted, Windows |
| 11 | Mend SAST | 7.0 | No | $83.33/mo | Linux, Mac, self-hosted, Web, Windows |
| 12 | OpenGrep | 7.0 | Free plan | Free | Linux, Mac, Windows |
| 13 | Bandit | 6.8 | Free plan | Free | Linux, Mac, self-hosted |
| 14 | gosec | 6.8 | Free plan | Free | Linux, Mac, self-hosted |
| 15 | Dawnscanner | 6.7 | Free plan | Free | Linux, self-hosted |
| 16 | Pysa | 6.7 | No | — | Browser, Linux, Mac, Windows |
| 17 | Checkmarx API Security | 6.4 | No | — | API, self-hosted, Web |
| 19 | CodeSonar | 5.9 | No | — | Linux, self-hosted, Web, Windows |
| 20 | Klocwork | 5.9 | No | — | Linux, Web, Windows |
| 21 | NodeJsScan | 5.9 | No | — | Mac, Linux |
Make your tool an alternative to Checkmarx SAST
See the priceThe sponsored alternative slot on this page is labelled Sponsored.
Questions about Checkmarx SAST alternatives
What is the best alternative to Checkmarx SAST?
Skylos, number 1 in static application security testing software with a score of 8.0 out of 10. The others here: Puma Scan, Snyk Open Source, Horusec and 16 more.
What is the best free alternative to Checkmarx SAST?
Skylos is the best-ranked alternative with a free plan. 11 of the 20 alternatives here publish a free plan on their own pricing pages.
How are these alternatives ranked?
Ranked on what each maker publishes, the fullest spec sheet first: how deeply the product is documented, the platforms it runs on, a free tier or trial to test it, and its standing.