Checkmarx Container Security review
Policy-driven container scanning with registry, CI/CD and Kubernetes controls for larger teams.
Reviewed by iTechGuides Editors · Editorial team · Updated Nov 2026
Checkmarx Container Security is a container-scanning capability within the Checkmarx One application security platform. It is designed for mid-market and enterprise teams that need to inspect Dockerfiles, image layers and packages across development and deployment workflows. Scanning is available through the web application, CLI and API, with support for cloud and self-hosted deployment. Teams can scan images from public or private registries, apply custom security policies and filters, and review container-specific risk reports.
Its ecosystem coverage is a central strength. Registry integrations include Docker Hub, AWS ECR, Google Artifact Registry, Azure ACR, Harbor, JFrog Artifactory and Nexus. CI/CD support covers GitHub Actions, GitLab CI, Jenkins, Azure Pipelines and CircleCI, allowing image checks during build workflows. For Kubernetes environments, webhook-based admission control can block deployments according to policy, including on AWS EKS. Sysdig integration correlates pre-production findings with runtime usage data, helping teams prioritize issues that affect deployed workloads.
Pricing is contact-sales, with custom-quoted Checkmarx One packages rather than a self-serve plan, and there is no free plan or self-serve free trial. The product provides triage, remediation guidance and alternative base-image recommendations, while deployment options include cloud and self-hosted setups. Organizations seeking policy controls across registries, pipelines and Kubernetes should find the feature set aligned with governance-heavy programs. Smaller teams wanting an immediately purchasable scanner, a free starting tier or a narrower standalone workflow may prefer a simpler alternative.
Questions about Checkmarx Container Security
What does Checkmarx Container Security run on? Web. It runs in the cloud and self-hosted.
What does Checkmarx Container Security integrate with? 14 integrations, including Docker Hub, AWS ECR, Google GCR/Artifact Registry, Azure ACR and Harbor.
Who is Checkmarx Container Security built for? Mid-market companies and enterprises (our editorial estimate).
Checkmarx Container Security pros and cons
- Where it wins
- Scans Dockerfiles, image layers and packages from public or private registries
- Connects with major registries and CI/CD systems through CLI and integrations
- Adds triage, base-image guidance and Kubernetes admission-control policies
- Where it doesn't
- Pricing uses custom quotes rather than a self-serve purchase flow
- There is no free plan or self-serve free trial
- The listed support channel is documentation
Checkmarx Container Security fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update