Checkmarx API Security vs JFrog Xray

Checkmarx API Security

6.8 #12 in Software Composition Analysis Software

About Checkmarx API Security

JFrog Xray

5.0 #54 in Software Composition Analysis Software

About JFrog Xray
Checkmarx API SecurityJFrog Xray
Free planNoNo
Free trialNoNo
Paid from——
Open sourceNoNo
Platformsapi, self-hosted, WebWeb
Free planNoNo
Supported ecosystemsJava/Maven, JavaScript/TypeScript/NPM, .NET/NuGet, Python/PIP, PHP/Composer, Swift/iOS, Go, Ruby, C/C++/Conan, Unity, Perl/CPAN, Dart/PubGo, PHP, Java/Maven, Java/Gradle, Java/Ivy, Scala/SBT, JavaScript/npm, Bower, pnpm, Yarn, .NET/NuGet, Python/PyPI, Conda, RubyGems, CocoaPods, Conan, Rust/Cargo, R/CRAN, Swift/SwiftPM, Dart/Flutter/pub, Docker, OCI, Helm, Terraform State
SBOM generationYesYes
Reachability analysisYesYes
Pull request scanningYesYes
Deployment optionscloud—
Monitored projects—30 projects

Both are listed in Best Software Composition Analysis Software, Best Dependency Management Software. On Inferse, Checkmarx API Security scores higher on our published basis.