Use cases
Inventory
Find every tool, owner, seat, and cost.
Savings
Catch waste, overlap, and renewals early.
Access
Onboard and offboard across your stack.
Context
Map how people, tools, spend, and agents connect.
For
Founders
Protect runway by seeing every tool and cost.
Engineering
Control AI usage, access, and provider spend.
Finance
Reconcile software spend and find waste.
Operations
Keep inventory, access, and renewals current.
Resources & company
Resources
Guides and practical software insights.
Manifesto
Why software operations need a new model.
Press
Company news and media resources.
Partners
Build and grow with ELI.
IntegrationsStacksTools
Talk to a humanDiscover my stack
IntegrationsStacksTools
Discover my stackTalk to a human

Company

  • Home
  • Manifesto
  • Talk to us
  • Partners

Help

  • Terms of service
  • Privacy policy
  • Docs

Product

  • Inventory
  • Savings
  • Access
  • Context

For teams

  • Founders
  • Engineering
  • Finance
  • Operations

Explore

  • Integrations
  • Tools
  • Stacks
  • Startup credits
  • Articles

Socials

  • LinkedIn
  • Instagram
  • TikTok
  • YouTube
Enterprise Layer Intelligence
Categories/Cybersecurity/Checkmarx
Checkmarx

Checkmarx

Founded by Emanuel Tzur in 2006

Scan code to find and fix security vulnerabilities

Pricing model

Demo

Rating

★ People love it

Time to value

Requires Expertise

You can use Checkmarx to scan source code, open-source dependencies, and container images for security flaws before releasing applications. It tests code directly in developer environments and code repositories to catch secrets, configuration mistakes, and known vulnerabilities early. The system reviews static code, tests dynamic runtime APIs, and inventories artificial intelligence models and components. Security teams can prioritize high-risk issues based on reachability and exploitability, while developers receive ready-to-merge fixes right inside their existing code review and continuous integration workflows.

What Checkmarx does

Scan pull requests for security vulnerabilitiesIdentify leaked passwords and tokens in repositoriesGenerate automated code fixes for reported security issuesTrack third-party dependency licenses and vulnerabilitiesRun dynamic security tests against live APIsAudit infrastructure as code scripts for misconfigurationsHybrid scanning engine combining rules with modern language modelsStatic application security testing for source codeSoftware composition analysis to identify vulnerable dependenciesAutomated secrets detection to block credentials before Git commitsDynamic security testing for running applications and APIsInfrastructure as code security checks across templatesAutomated merge-ready code fixes directly in pull requests

Pricing breakdown

Pricing model: Book a demo

Frequently asked

AnthropicAnthropic

Want a tailored answer?

See whether Checkmarx fits your stack.

Techbible weighs Checkmarx against what you already pay for, your team shape, and the work that's actually happening. Free to start.

Side by side

Compare Checkmarx

Search the catalog or pick a similar tool to compare pricing, features, and fit.

Or pick from similar tools

More in Cybersecurity

All tools →
OpenHack

OpenHack

Find, verify, and automatically patch security vulnerabilities

Sagittal.ai

Sagittal.ai

Automate security, compliance, and quality checks across development workflows

Abnormal AI

Abnormal AI

Stop phishing attacks, account takeovers, and social engineering across enterprise email and identity environments

ACAIA

ACAIA

Manage regulatory compliance rules and audit requirements across banking operations

Accountable HQ

Accountable HQ

Manage HIPAA compliance, complete risk assessments, train staff, and organize business associate agreements

Acronis

Acronis

Protect systems from cyber threats and automate routine data backups across corporate endpoints

ADAM Aerospace

ADAM Aerospace

Verify and secure critical mission data across defense and space operations

Addigy

Addigy

Manage, monitor, and secure Apple devices across multiple organizations in real time

Checkmarx, application security, SAST, DAST, SCA, static code analysis, security testing, API security, secrets detection, container security, ASPM, IaC security, vulnerability scanner, AppSec, code security