Checkmarx One
Checkmarx One: A broad source-code security platform for teams that need centralized AppSec workflows. Ranked #14 of 15 in Interactive Application Security Testing Software by our editors (7.2/10); pricing: Pricing on request; best for source-code security teams.
At a glance
- Editor score7.2 / 10
- PricingPricing on request
- Best forSource-code security teams
- Free planNo
- Founded2006
- Facts checked21 Sep 2026
Where it wins
- Broad SAST support across programming languages and frameworks
- Pull-request, CI/CD, CLI, and IDE scanning workflows
- Custom queries, centralized triage, and AI remediation guidance
Where it doesn't
- Pricing requires a custom quote based on developers, applications, and usage
- No permanent free Checkmarx One tier
- Less direct fit for IAST or runtime testing
Our verdict on Checkmarx One
Checkmarx One is a cloud-delivered application security platform for enterprise development and security teams. Its core capability in this category is static application security testing of source code across multiple programming languages and frameworks. Teams can scan repositories on pull requests or pushes, review findings centrally, apply policies, and use AI-assisted triage and remediation guidance. The platform also covers software composition analysis, infrastructure-as-code security, API security, secrets detection, container security, and dynamic testing.
Its ecosystem fit is a central strength for teams with established development workflows. Checkmarx One connects with GitHub, GitLab, Bitbucket, and Azure DevOps, while GitHub Actions, Jenkins, TeamCity, and Azure DevOps support CI/CD workflows. CLI-based pipeline scans extend that coverage, and IDE plugins are available for Visual Studio Code, Visual Studio, JetBrains, and Eclipse. Jira and Slack integrations support issue and team workflows. Custom SAST query editing and query overrides give security teams additional control over how code is assessed.
Pricing is handled through a custom quote based on developers, applications, and usage. The published offering includes a one-month free trial for Checkmarx Developer Assist, while Checkmarx One itself has no permanent free tier. That structure suits organizations evaluating a broader security program rather than teams seeking a self-serve entry point. Checkmarx One is a strong choice for source-code security teams that need repository, pipeline, IDE, triage, policy, and reporting capabilities in one platform. Buyers whose primary requirement is verified interactive application security testing or runtime testing should consider a product with a more direct focus in those areas.
Your product? Our editors can test Checkmarx One in depth and publish a review, labelled as paid · from $149/mo →
Checkmarx One pricing
Checkmarx One fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Runtime targets | Not verified |
| Deployment | Not verified |
| Authenticated testing | Not verified |
| API testing | Not verified |
| Instrumentation | Not verified |
| CI/CD integration | Yes |
| Language coverage | Not verified |
| Deployment | Cloud |
| Platforms | Web |
| Compliance & security | SOC 2, ISO 27001, GDPR |
| Support | Docs |
| Built for | Enterprise (editorial estimate) |
| Integrations | 17 integrations: GitHub, GitLab, Azure DevOps, Bitbucket, Jenkins, Maven … See all → |
| Pricing | Pricing on request (source) |
| Website | checkmarx.com |
| Facts checked | 21 Sep 2026 |
Checkmarx One integrations
Checkmarx One lists 17 integrations on its own site.
- GitHub
- GitLab
- Azure DevOps
- Bitbucket
- Jenkins
- Maven
- Bamboo
- TeamCity
- GitHub Actions
- Visual Studio Code
- Visual Studio
- JetBrains
- Eclipse
- Jira
- Slack
- Microsoft Teams
- GitHub Issues
See all Checkmarx One integrations →
Alternatives to Checkmarx One
- New Relic IASTFocused web IAST with exploit validation, remediation context, and CI/CD integration.9.3
- Datadog Runtime Code Analysis (IAST)Priced IAST for Datadog APM customers, with confirmed findings and code-level context.9.1
- HCL AppScanBroad AppSec coverage with IAST, free access, and integrations across development workflows.9.0
See all Checkmarx One alternatives →
Also Ranked In
Checkmarx One is ranked in 8 of our directories; the 6 strongest besides Interactive Application Security Testing Software.
Used Checkmarx One? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Checkmarx One for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Checkmarx One is listed in our Interactive Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/checkmarx-one/"><img src="https://www.itechguides.com/best/badge/checkmarx-one.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update