Checkmarx API Security vs Haltdos
Checkmarx API Security
checkmarx.comHaltdos
haltdos.comSide by side
| Figure | Checkmarx API Security | Haltdos |
|---|---|---|
| Price from | — | $30/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 6 | 2 |
| Spec score · API Security Software | 8.3 (#6) | 8.0 (#9) |
| Compliance | The trust center states ISO/IEC 27001:2022 certification, annual independent SOC 2 Type II audits, GDPR alignment, and NIST SSDF alignment. | Enterprise WAF lists incident logging, analytics and dashboards, SIEM integration, and PCI compliance reporting. |
| Deployment | Checkmarx pricing documentation says Checkmarx One is available as SaaS or self-hosted/on-premises, including air-gapped deployments. | Haltdos describes deployment as SaaS, virtual, hardware, or MSSP, and says solutions can be deployed on-premise or on public or private cloud. |
| Integrations | Checkmarx lists 41 integrations spanning SCM, CI/CD, IDEs, ticketing, registries, cloud, and infrastructure tools. | Haltdos supports integrations including SIEM, syslog, SNMP, email via SMTP, SMS gateways, Active Directory/SAML, and antivirus or sandboxing via ICAP. |
| Support | The API Security product page says an AppSec expert will respond to inquiries within one business day. | The plan comparison lists Community support as email with no ETA, Professional support as 8x5 email within 7 days, and Enterprise support as 24x7 email and toll-free phone. |
Plans
Checkmarx API Security
- Checkmarx One bundlePriced on request
- EnterprisePriced on request
- EssentialsPriced on request
- ProfessionalPriced on request
- Start with SASTPriced on request
- Start with Supply ChainPriced on request
In their own words
Checkmarx API Security
Checkmarx API Security discovers APIs in application source code and documentation, including undocumented shadow APIs and abandoned zombie APIs. It builds a global inventory showing vulnerabilities and supports remediation prioritization by business risk. The scanner supports Java Spring, ASP.NET Web API and Python Flask, and examines OpenAPI, Swagger and Postman collections for documentation mismatches. An API Change Log records history, including the commit and developer linked to a vulnerability-introducing change. Checkmarx DAST findings can be correlated with SAST findings in the same inventory to identify runtime-confirmed issues. Integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, GitHub Actions, VS Code, JetBrains, Jira, Slack and Microsoft Teams. Security statements cover AES-256 encryption at rest, HTTPS with TLS 1.2, annual SOC 2 Type II audits and GDPR-aligned privacy practices. Deployment is cloud or hybrid. Pricing is custom, based on modules, deployment model and developers in scope; no self-serve trial is offered.
Haltdos
Haltdos provides security and delivery solutions for web applications and APIs across on-premise, cloud, and hybrid environments. Its Enterprise WAF protects websites and APIs against OWASP Top 10 attacks, known vulnerabilities, and zero-day vulnerabilities. It includes more than 4,000 signatures, machine-learning-based zero-day protection, file-upload antivirus scanning and sandboxing, and DDoS protection from Layer 3 to Layer 7. An API gateway provides authentication, rate limiting, transformation, and observability. Bot controls include detection and mitigation, device fingerprinting, mobile SDK protection, JavaScript and CAPTCHA challenges, and deception technology. Enterprise WAF also lists incident logging, analytics and dashboards, SIEM integration, and PCI compliance reporting. Deployment options include SaaS, virtual, hardware, and MSSP, with on-premise and public- or private-cloud deployment. Community WAF runs on a VM, Docker, or hardware and requires at least 2 GB RAM, 60 GB disk space, and 2 vCPU cores. Community WAF is free for one website and one security profile. Professional WAF costs $30 a month, billed at the end of each monthly billing period based on requests processed; the first 100K requests are free.