Checkmarx API Security vs Onam Security API Security
Checkmarx API Security
checkmarx.com
Onam Security API Security
onamsecurity.comSide by side
| Figure | Checkmarx API Security | Onam Security API Security |
|---|---|---|
| Price from | — | $22/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 6 | 3 |
| Spec score · API Security Software | 8.3 (#6) | 8.8 (#4) |
| API discovery | Source-code scanning automatically discovers API endpoints, including undocumented shadow APIs and abandoned zombie APIs. | API Security discovers API surfaces across clouds, including gateways, load-balanced endpoints, function URLs, and ingress routes. |
| Deployment | Checkmarx pricing documentation says Checkmarx One is available as SaaS or self-hosted/on-premises, including air-gapped deployments. | The service is SaaS by default; Enterprise offers an on-premises deployment option. |
| Founded | 2006 | LinkedIn lists the company as founded in 2018. |
| Integrations | Checkmarx lists 41 integrations spanning SCM, CI/CD, IDEs, ticketing, registries, cloud, and infrastructure tools. | Documented integrations include Jira, ServiceNow, Azure DevOps, Linear, GitHub Issues, Slack, Microsoft Teams, PagerDuty, OpsGenie, Splunk, Azure Sentinel, AWS Security Hub and generic webhooks. |
| Rating on Capterra | 3.9 out of 5 from 7 reviews | 0.0 out of 5 from 0 reviews |
| Support | The API Security product page says an AppSec expert will respond to inquiries within one business day. | The Free plan includes community support, Pro includes email support with a stated response time under 24 hours, and Enterprise includes priority support under 4 hours. |
| What it does | Checkmarx API Security inventories APIs from source code and documentation and correlates API risks with runtime testing in Checkmarx One. | Onam is an agentless CNAPP that connects to cloud accounts with read-only credentials, inventories resources, evaluates thousands of rules and correlates posture, identity, data, network and runtime findings on one graph. |
Plans
Checkmarx API Security
- Checkmarx One bundlePriced on request
- EnterprisePriced on request
- EssentialsPriced on request
- ProfessionalPriced on request
- Start with SASTPriced on request
- Start with Supply ChainPriced on request
Onam Security API Security
- FreeFree
- Pro$22 a month
- EnterprisePrice not published
In their own words
Checkmarx API Security
Checkmarx API Security discovers APIs in application source code and documentation, including undocumented shadow APIs and abandoned zombie APIs. It builds a global inventory showing vulnerabilities and supports remediation prioritization by business risk. The scanner supports Java Spring, ASP.NET Web API and Python Flask, and examines OpenAPI, Swagger and Postman collections for documentation mismatches. An API Change Log records history, including the commit and developer linked to a vulnerability-introducing change. Checkmarx DAST findings can be correlated with SAST findings in the same inventory to identify runtime-confirmed issues. Integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, GitHub Actions, VS Code, JetBrains, Jira, Slack and Microsoft Teams. Security statements cover AES-256 encryption at rest, HTTPS with TLS 1.2, annual SOC 2 Type II audits and GDPR-aligned privacy practices. Deployment is cloud or hybrid. Pricing is custom, based on modules, deployment model and developers in scope; no self-serve trial is offered.
Onam Security API Security
Onam Security API Security has no write-up on Specifiction yet; its figures are above.