Checkmarx Container Security
Checkmarx Container Security: Policy-driven container scanning with registry, CI/CD and Kubernetes controls for larger teams. Ranked #4 of 30 in Container Image Scanning Tools by our editors (7.4/10); pricing: Pricing on request; best for large organizations needing policy-driven scanning.
At a glance
- Editor score7.4 / 10
- PricingPricing on request
- Best forLarge organizations needing policy-driven scanning
- Free planNo
- Kubernetes admissionYes
- Facts checked23 Sep 2026
Where it wins
- Scans Dockerfiles, image layers and packages from public or private registries
- Connects with major registries and CI/CD systems through CLI and integrations
- Adds triage, base-image guidance and Kubernetes admission-control policies
Where it doesn't
- Pricing uses custom quotes rather than a self-serve purchase flow
- There is no free plan or self-serve free trial
- The listed support channel is documentation
Our verdict on Checkmarx Container Security
Checkmarx Container Security is a container-scanning capability within the Checkmarx One application security platform. It is designed for mid-market and enterprise teams that need to inspect Dockerfiles, image layers and packages across development and deployment workflows. Scanning is available through the web application, CLI and API, with support for cloud and self-hosted deployment. Teams can scan images from public or private registries, apply custom security policies and filters, and review container-specific risk reports.
Its ecosystem coverage is a central strength. Registry integrations include Docker Hub, AWS ECR, Google Artifact Registry, Azure ACR, Harbor, JFrog Artifactory and Nexus. CI/CD support covers GitHub Actions, GitLab CI, Jenkins, Azure Pipelines and CircleCI, allowing image checks during build workflows. For Kubernetes environments, webhook-based admission control can block deployments according to policy, including on AWS EKS. Sysdig integration correlates pre-production findings with runtime usage data, helping teams prioritize issues that affect deployed workloads.
Pricing is contact-sales, with custom-quoted Checkmarx One packages rather than a self-serve plan, and there is no free plan or self-serve free trial. The product provides triage, remediation guidance and alternative base-image recommendations, while deployment options include cloud and self-hosted setups. Organizations seeking policy controls across registries, pipelines and Kubernetes should find the feature set aligned with governance-heavy programs. Smaller teams wanting an immediately purchasable scanner, a free starting tier or a narrower standalone workflow may prefer a simpler alternative.
Checkmarx Container Security pricing
Checkmarx Container Security fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Deployment model | Hybrid |
| Registry scanning | Yes |
| CI pipeline scanning | Yes |
| Kubernetes admission | Yes |
| SBOM generation | Not verified |
| Fix recommendations | Yes |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Compliance & security | SOC 2 |
| Support | Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 14 integrations: Docker Hub, AWS ECR, Google GCR/Artifact Registry, Azure ACR, Harbor, JFrog Artifactory … |
| Pricing | Pricing on request (source) |
| Website | checkmarx.com |
| Facts checked | 23 Sep 2026 |
Checkmarx Container Security integrations
Checkmarx Container Security lists 14 integrations on its own site.
- Docker Hub
- AWS ECR
- Google GCR/Artifact Registry
- Azure ACR
- Harbor
- JFrog Artifactory
- Nexus
- GitHub Actions
- GitLab CI
- Jenkins
- Azure Pipelines
- CircleCI
- Sysdig
- AWS EKS
Alternatives to Checkmarx Container Security
- Snyk ContainerBroad image and Kubernetes scanning, with a free tier and paid options for teams.9.3
- Docker ScoutDocker Scout combines image scanning, SBOMs, CVE monitoring and policy controls.8.3
- Qualys Container SecurityEnd-to-end container governance spanning discovery, scanning, Kubernetes, and runtime.7.7
See all Checkmarx Container Security alternatives →
Checkmarx Container Security vs the competition
- Checkmarx Container Security vs Snyk Container
- Checkmarx Container Security vs Docker Scout
- Checkmarx Container Security vs Qualys Container Security
- Checkmarx Container Security vs Harbor
- Checkmarx Container Security vs SUSE NeuVector
- Checkmarx Container Security vs Trend Vision One Container Security
Compare Checkmarx Container Security with any tool side by side →
Used Checkmarx Container Security? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Checkmarx Container Security for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Checkmarx Container Security is listed in our Container Image Scanning Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/checkmarx-container-security/"><img src="https://www.itechguides.com/best/badge/checkmarx-container-security.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. It never changes a score or a verdict. How we rank.
Last updated · How we research and update