Checkmarx DAST

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Checkmarx DAST is ranked #8 of 26 in dynamic application security testing software on Inferse. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is no free plan.

Compared on dynamic application security testing software

Authenticated scanning: Yescheckmarx.com
API testing: Yescheckmarx.com
Browser-based scanning: Yescheckmarx.com
CI/CD integration: Yescheckmarx.com
Deployment model: hybridcheckmarx.com

Facts

Purpose: Checkmarx DAST is a language-agnostic tool that tests live web applications and APIs by simulating real-world attacks.docs.checkmarx.com · 3 Oct 2026
CI/CD scanning: DAST can run automatically on every build in development and pre-production, with results surfaced in the pipeline.checkmarx.com · 3 Oct 2026
Internal apps: Built-in tunnelling lets teams scan internal applications without firewall exceptions or network reconfiguration.checkmarx.com · 3 Oct 2026
Authentication: DAST supports browser-recorded login flows, two-factor authentication, and instant verification for application coverage.checkmarx.com · 3 Oct 2026
API coverage: DAST tests REST, SOAP, and gRPC endpoints in live environments and centralizes SAST and DAST API findings in one inventory.checkmarx.com · 3 Oct 2026
Compliance: Findings can be mapped to the compliance frameworks they affect to help teams prioritize remediation for audit readiness.checkmarx.com · 3 Oct 2026
Integrations: Checkmarx lists CI/CD integrations including Jenkins, TeamCity, GitHub Actions, Azure DevOps, Maven, Bitbucket Pipelines, CircleCI, GitLab CI, Bamboo, AWS CodeBuild, and SonarQube.checkmarx.com · 3 Oct 2026
Deployment: Checkmarx One is offered as cloud SaaS and supports self-hosted and on-premises deployments, including for air-gapped environments.checkmarx.com · 3 Oct 2026
Pricing limit: DAST is not sold as a standalone product and is available as an add-on within Checkmarx One Professional or higher.checkmarx.com · 3 Oct 2026
Trial and demo: Checkmarx says it does not offer a self-serve free trial and offers personalized demos instead.checkmarx.com · 3 Oct 2026
Security: Checkmarx says customer data is encrypted at rest using protocols such as AES-256 and that service communications use HTTPS, with data to and from S3 encrypted using TLS 1.2.checkmarx.com · 3 Oct 2026
Compliance certifications: Checkmarx states that it is ISO/IEC 27001:2022 certified and undergoes an annual independent SOC 2 Type II audit.checkmarx.com · 3 Oct 2026
Support: Premium Support includes 24/7 coverage and a two-hour response time for critical P1 issues; Standard Support lists six hours for P1 issues during working hours on business days.checkmarx.com · 3 Oct 2026
Intended users: Checkmarx describes DAST as a tool for enterprise teams and positions it within the Checkmarx One application security platform.checkmarx.com · 3 Oct 2026