Checkmarx DAST vs SecuDAST
Checkmarx DAST
checkmarx.com
SecuDAST
secunexa.comSide by side
| Figure | Checkmarx DAST | SecuDAST |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 0 |
| Spec score · Dynamic Application Security Testing Software | 7.7 (#11) | 7.1 (#18) |
| Deployment | Checkmarx One is offered as cloud SaaS and supports self-hosted and on-premises deployments, including for air-gapped environments. | The engine deploys inside the customer’s network without cloud scanning infrastructure or outbound scan traffic. |
| Integrations | Checkmarx lists CI/CD integrations including Jenkins, TeamCity, GitHub Actions, Azure DevOps, Maven, Bitbucket Pipelines, CircleCI, GitLab CI, Bamboo, AWS CodeBuild, and SonarQube. | SecuNexa names GitHub Actions, GitLab CI, Jenkins, Azure DevOps, and self-hosted runners as supported CI systems for engines that run as local binaries. |
| Intended users | Checkmarx describes DAST as a tool for enterprise teams and positions it within the Checkmarx One application security platform. | SecuNexa describes its focus as organizations with airgapped networks, regulated datacenters, or software that cannot be uploaded to a vendor cloud. |
| Purpose | Checkmarx DAST is a language-agnostic tool that tests live web applications and APIs by simulating real-world attacks. | SecuDAST performs dynamic security testing of running applications in staging, pre-production, and internal environments inside the customer’s network. |
| Security | Checkmarx says customer data is encrypted at rest using protocols such as AES-256 and that service communications use HTTPS, with data to and from S3 encrypted using TLS 1.2. | SecuNexa says its products do not phone home and engines run offline; vulnerability data is imported through signed offline bundles. |
| Support | Premium Support includes 24/7 coverage and a two-hour response time for critical P1 issues; Standard Support lists six hours for P1 issues during working hours on business days. | SecuNexa says customer documentation is provided during onboarding and replies to contact messages within one business day. |
Plans
In their own words
Checkmarx DAST
Checkmarx DAST has no write-up on Specifiction yet; its figures are above.
SecuDAST
SecuDAST is a self-hosted dynamic application security testing engine for running applications inside a customer’s network. It scans authenticated flows, APIs, single-page applications, and traditional form-based sites, including internal, staging, and pre-production targets reachable from that network. The engine runs beside applications without cloud scanning infrastructure or sending traffic outside the network. Scans start in safe mode, avoiding destructive payloads and rate-limiting probes; teams can enable more aggressive checks and exclude paths. Every finding includes the request and response that demonstrated it, and results flow to the SecuNexa dashboard with evidence and standard reports for pipelines and ticketing. Scoped, repeatable profiles support CI stages and nightly schedules, with named integrations for GitHub Actions, GitLab CI, Jenkins, Azure DevOps, and self-hosted runners. The dashboard offers seven project-scoped roles, immutable audit logging, local accounts, MFA, and optional LDAP or SSO. SecuNexa says engines run offline, do not phone home, and receive vulnerability data through signed offline bundles. Pricing is on request.