Checkmarx API Security vs DataDome API Protection
Checkmarx API Security
checkmarx.com
DataDome API Protection
datadome.coSide by side
| Figure | Checkmarx API Security | DataDome API Protection |
|---|---|---|
| Price from | — | $3,830/mo |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 6 | 4 |
| Spec score · API Security Software | 8.3 (#6) | 7.8 (#12) |
| Founded | 2006 | 2015 |
| Headquarters | Ramat Gan, Israel | New York, Paris, and Singapore |
| Integrations | Checkmarx lists 41 integrations spanning SCM, CI/CD, IDEs, ticketing, registries, cloud, and infrastructure tools. | The product page names AWS API Gateway, Kong, Apigee, and Nginx, and says it integrates with CDNs and cloud infrastructure through lightweight connectors. |
| Purpose | Checkmarx API Security discovers APIs in application code and documentation, including undocumented shadow APIs and abandoned zombie APIs. | DataDome API Protection monitors API traffic in real time to detect and block automated threats, fraud, and unauthorized access. |
| Support | The API Security product page says an AppSec expert will respond to inquiries within one business day. | The Premium plan lists 24/7 support with a dedicated Slack channel, while the Enterprise plan includes access to Premium SOC services. |
Plans
Checkmarx API Security
- Checkmarx One bundlePriced on request
- EnterprisePriced on request
- EssentialsPriced on request
- ProfessionalPriced on request
- Start with SASTPriced on request
- Start with Supply ChainPriced on request
DataDome API Protection
- Essentials$3,830 a month
- Advanced$8,670 a month
- Premium$10,160 a month
- Enterprise$13,270 a month
In their own words
Checkmarx API Security
Checkmarx API Security discovers APIs in application source code and documentation, including undocumented shadow APIs and abandoned zombie APIs. It builds a global inventory showing vulnerabilities and supports remediation prioritization by business risk. The scanner supports Java Spring, ASP.NET Web API and Python Flask, and examines OpenAPI, Swagger and Postman collections for documentation mismatches. An API Change Log records history, including the commit and developer linked to a vulnerability-introducing change. Checkmarx DAST findings can be correlated with SAST findings in the same inventory to identify runtime-confirmed issues. Integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, GitHub Actions, VS Code, JetBrains, Jira, Slack and Microsoft Teams. Security statements cover AES-256 encryption at rest, HTTPS with TLS 1.2, annual SOC 2 Type II audits and GDPR-aligned privacy practices. Deployment is cloud or hybrid. Pricing is custom, based on modules, deployment model and developers in scope; no self-serve trial is offered.
DataDome API Protection
DataDome API Protection has no write-up on Specifiction yet; its figures are above.