Checkmarx One

Application security testing platform combining SAST, DAST, and software composition analysis.

Pricing: custom, seat, usage
Open source: No

Editorial review

Checkmarx One has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Tags(open-source;cloud-native): AppSec, SAST, SCA, DAST, ASPM, AI-generated code securityVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): SaaS, self-hostedVerified

Pricing · Licensing

Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): custom, seat, usageVerification pending

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Fusion SAST (hybrid scanning), SCA, API Security, ASPM, DAST for AI, Container SecurityVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending

Security · Privacy · Compliance

Security certifications(SOC 2 Type II;ISO 27001): SOC 2 Type II, ISO 27001, FedRAMPVerified

Audience · Use · Case

Best for(Neutral editorial summary): Enterprise application security with AI-powered scanning, triage, and remediation across code, supply chain, and runtimeVerification pending
Company-size fit(individual;SMB;mid-market;enterprise): enterpriseVerified
Primary use cases(build;monitor;automate): Code security, Supply chain security, AI supply chain security, Runtime protectionVerified

Vendor · Maintainer

Founded year(2012): 2006Verified
Headquarters country(US): United StatesVerified
Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

Also categorized in

Static Code Analysis Tools

User reviews

Review policy

No published reviews yet.