Checkmarx API Security vs Traceable API Security Platform
Checkmarx API Security
checkmarx.comTraceable API Security Platform
traceable.aiSide by side
| Figure | Checkmarx API Security | Traceable API Security Platform |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 6 | 1 |
| Spec score · API Security Software | 8.3 (#6) | 7.1 (#20) |
| API discovery | Source-code scanning automatically discovers API endpoints, including undocumented shadow APIs and abandoned zombie APIs. | It continuously discovers and inventories internal, private, public, rogue, shadow, partner, and third-party APIs. |
| Deployment | Checkmarx pricing documentation says Checkmarx One is available as SaaS or self-hosted/on-premises, including air-gapped deployments. | Deployment options listed are self-managed on-premises or cloud, cloud on AWS, GCP, Azure or a customer datacenter, and SaaS. |
| Headquarters | Ramat Gan, Israel | Traceable’s 2024 platform overview lists its address as San Francisco, California. |
| Integrations | Checkmarx lists 41 integrations spanning SCM, CI/CD, IDEs, ticketing, registries, cloud, and infrastructure tools. | Listed integrations include Azure DevOps, GitHub Actions, GitLab, Harness STO, Jenkins, Snyk, Splunk, Syslog, AWS, Akamai, Imperva, Fortinet, F5, Azure, Cloudflare, Google Cloud Armor, Wiz, Jira, and ServiceNow. |
| Pricing | Checkmarx says pricing is custom quoted based on modules, deployment model, and number of developers in scope. | The product page directs visitors to request a demo and does not state a price. |
| Purpose | Checkmarx API Security discovers APIs in application code and documentation, including undocumented shadow APIs and abandoned zombie APIs. | The platform provides application and API security across security posture management, threat protection, and threat management throughout the SDLC. |
| Support | The API Security product page says an AppSec expert will respond to inquiries within one business day. | The product site links to Customer Success and Support and to Customer Support. |
Plans
Checkmarx API Security
- Checkmarx One bundlePriced on request
- EnterprisePriced on request
- EssentialsPriced on request
- ProfessionalPriced on request
- Start with SASTPriced on request
- Start with Supply ChainPriced on request
Traceable API Security Platform
- Traceable API Security PlatformPriced on request
In their own words
Checkmarx API Security
Checkmarx API Security discovers APIs in application source code and documentation, including undocumented shadow APIs and abandoned zombie APIs. It builds a global inventory showing vulnerabilities and supports remediation prioritization by business risk. The scanner supports Java Spring, ASP.NET Web API and Python Flask, and examines OpenAPI, Swagger and Postman collections for documentation mismatches. An API Change Log records history, including the commit and developer linked to a vulnerability-introducing change. Checkmarx DAST findings can be correlated with SAST findings in the same inventory to identify runtime-confirmed issues. Integrations include GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, GitHub Actions, VS Code, JetBrains, Jira, Slack and Microsoft Teams. Security statements cover AES-256 encryption at rest, HTTPS with TLS 1.2, annual SOC 2 Type II audits and GDPR-aligned privacy practices. Deployment is cloud or hybrid. Pricing is custom, based on modules, deployment model and developers in scope; no self-serve trial is offered.
Traceable API Security Platform
Traceable API Security Platform has no write-up on Specifiction yet; its figures are above.