Checkmarx API Security

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Checkmarx API Security is ranked #10 of 64 in software composition analysis software on Inferse. It runs on API, Self-hosted, Web. There is no free plan.

Compared on software composition analysis software

Free plan: Nocheckmarx.com
API discovery: Yescheckmarx.com
Runtime protection: Nocheckmarx.com
API posture management: Yescheckmarx.com
Sensitive data detection: Yescheckmarx.com
Specification governance: Yescheckmarx.com
Deployment model: cloudcheckmarx.com

Facts

Purpose: Checkmarx API Security discovers APIs in application code and documentation, including undocumented shadow APIs and abandoned zombie APIs.checkmarx.com · 3 Oct 2026
Inventory: It provides a global API inventory with detected vulnerabilities and supports prioritizing remediation by business risk.checkmarx.com · 3 Oct 2026
Documentation scanning: It scans OpenAPI, Swagger, and Postman collections and compares documentation against the API inventory to identify discrepancies and undocumented APIs.checkmarx.com · 3 Oct 2026
Change history: The API Change Log shows API history, including the commit and developer associated with a change that introduced a vulnerability.checkmarx.com · 3 Oct 2026
DAST correlation: Checkmarx DAST findings can be correlated with SAST findings in a unified API inventory to identify issues confirmed during runtime testing.checkmarx.com · 3 Oct 2026
Supported frameworks: The API Security scanner currently supports Java Spring, ASP.NET Web API, and Python Flask.docs.checkmarx.com · 3 Oct 2026
Integrations: Checkmarx lists integrations including GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, GitHub Actions, VS Code, JetBrains, Jira, Slack, and Microsoft Teams.checkmarx.com · 3 Oct 2026
Security: Checkmarx says customer data is encrypted at rest using protocols such as AES-256, and service communications use HTTPS with TLS 1.2 for data to and from Amazon S3.checkmarx.com · 3 Oct 2026
Compliance: Checkmarx says it undergoes an annual independent SOC 2 Type II audit and aligns its privacy program with GDPR requirements.checkmarx.com · 3 Oct 2026
Support: The API Security product page says an AppSec expert will respond to inquiries within one business day.checkmarx.com · 3 Oct 2026
Pricing: Checkmarx says pricing is custom quoted based on modules, deployment model, and number of developers in scope.checkmarx.com · 3 Oct 2026
Trial: Checkmarx says it does not offer a self-serve free trial and offers a personalized demo instead.checkmarx.com · 3 Oct 2026
Audience: Checkmarx describes Essentials as core application security for teams building their program, Professional as a scaling package, and Enterprise as coverage for organizations with demanding security requirements.checkmarx.com · 3 Oct 2026