Akto API Security Platform vs Checkmarx API Security
Akto API Security Platform
akto.ioCheckmarx API Security
checkmarx.comSide by side
| Figure | Akto API Security Platform | Checkmarx API Security |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 6 |
| Spec score · API Security Software | 8.0 (#8) | 8.3 (#6) |
| API discovery | The platform automatically discovers and catalogs APIs across infrastructure. | Source-code scanning automatically discovers API endpoints, including undocumented shadow APIs and abandoned zombie APIs. |
| Compliance | Akto's platform page displays GDPR, ISO, SOC 2, and HIPAA compliance badges. | The trust center states ISO/IEC 27001:2022 certification, annual independent SOC 2 Type II audits, GDPR alignment, and NIST SSDF alignment. |
| Deployment | Akto says it can be deployed in public cloud or on-premise environments. | Checkmarx pricing documentation says Checkmarx One is available as SaaS or self-hosted/on-premises, including air-gapped deployments. |
| Headquarters | San Francisco, California, United States | Ramat Gan, Israel |
| Integrations | Traffic sources include Kubernetes, API gateways, AWS and GCP services, GitHub, GitLab, Bitbucket, Burp Suite, Postman, and OpenAPI. | Checkmarx lists 41 integrations spanning SCM, CI/CD, IDEs, ticketing, registries, cloud, and infrastructure tools. |
| Pricing | The pricing page describes usage-based pricing and directs visitors to contact sales; it does not show a price for API Security. | Checkmarx says pricing is custom quoted based on modules, deployment model, and number of developers in scope. |
| Purpose | Akto helps security teams discover, test, and monitor APIs using real traffic and dynamic analysis. | Checkmarx API Security discovers APIs in application code and documentation, including undocumented shadow APIs and abandoned zombie APIs. |
| Support | Akto lists in-app Intercom, Discord community, and email as support channels. | The API Security product page says an AppSec expert will respond to inquiries within one business day. |
Plans
Checkmarx API Security
- Checkmarx One bundlePriced on request
- EnterprisePriced on request
- EssentialsPriced on request
- ProfessionalPriced on request
- Start with SASTPriced on request
- Start with Supply ChainPriced on request
In their own words
Akto API Security Platform
Akto API Security Platform has no write-up on Specifiction yet; its figures are above.
Checkmarx API Security
Checkmarx API Security discovers APIs in application source code and documentation, including undocumented shadow APIs and abandoned zombie APIs. It builds a global inventory showing vulnerabilities and supports remediation prioritization by business risk. The scanner supports Java Spring, ASP.NET Web API and Python Flask, and examines OpenAPI, Swagger and Postman collections for documentation mismatches. An API Change Log records history, including the commit and developer linked to a vulnerability-introducing change. Checkmarx DAST findings can be correlated with SAST findings in the same inventory to identify runtime-confirmed issues. Integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, GitHub Actions, VS Code, JetBrains, Jira, Slack and Microsoft Teams. Security statements cover AES-256 encryption at rest, HTTPS with TLS 1.2, annual SOC 2 Type II audits and GDPR-aligned privacy practices. Deployment is cloud or hybrid. Pricing is custom, based on modules, deployment model and developers in scope; no self-serve trial is offered.