Checkmarx API Security vs FossID Workbench

Checkmarx API Security

6.8 #10 in Software Composition Analysis Software

About Checkmarx API Security

FossID Workbench

5.1 #32 in Software Composition Analysis Software

About FossID Workbench
Checkmarx API SecurityFossID Workbench
Free planNoNo
Free trialNoNo
Paid from——
Open sourceNoNo
Platformsapi, self-hosted, WebWeb, Linux
Free planNo—
Supported ecosystemsJava/Maven, JavaScript/TypeScript/NPM, .NET/NuGet, Python/PIP, PHP/Composer, Swift/iOS, Go, Ruby, C/C++/Conan, Unity, Perl/CPAN, Dart/PubJavaScript (NPM, Bower, PNPM, Yarn), Java/Kotlin (Maven, Gradle, Ivy, Kotlin), Python (PIP, Pipenv, Poetry, Hatch), Rust/Cargo, Dart/Flutter, PHP/Composer, Ruby/Bundler, Go, C/C++/Conan, CocoaPods/Swift, Yocto, Soong, Elixir, Haskell, .NET, SBT
SBOM generationYesYes
Reachability analysisYes—
Pull request scanningYesYes
Deployment optionscloudhybrid

Both are listed in Best Software Composition Analysis Software, Best Dependency Management Software. On Inferse, Checkmarx API Security scores higher on our published basis.