Checkmarx: cybersecurity software

Checkmarx has adapted well to the DevSecOps model, offering a lighter weight scanner in the Checkmarx One platform, that integrates well into the larger stack. They don't have all the latest features of some newer companies, but they certainly get the job done for diverse enterprises. I would not suggest venturing off Checkmarx One though.

What Checkmarx is

Checkmarx has adapted well to the DevSecOps model, offering a lighter weight scanner in the Checkmarx One platform, that integrates well into the larger stack. They don't have all the latest features of some newer companies, but they certainly get the job done for diverse enterprises. I would not suggest venturing off Checkmarx One though. The vendor site is www.checkmarx.com. This profile is an entry in the oneNorma directory, not a vendor landing page.

What Checkmarx covers

Checkmarx is in the catalog for these capabilities. Categories: DAST, SCA, ASPM, SAST, Container Vulnerability, IaC, and Agentic Development Security. Catalog tags: Hands-on and Best for Enterprise.

How to evaluate Checkmarx in a security program

Use Checkmarx as a stack candidate, not as diligence evidence. The oneNorma score for Checkmarx is 6/10 (percentile 83). If the real gap is in DAST, SCA, ASPM, SAST, Container Vulnerability, IaC, and Agentic Development Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.checkmarx.com publishes. Contrast it with pentesting and Security Cloud & Compliance.

Classification

Categories

DASTSCAASPMSASTContainer VulnerabilityIaCAgentic Development Security

Tags

Hands-onBest for Enterprise

Capabilities by category

SAST

AutofixEnterpriseAI

DAST

Crawler

SCA

Static Function Level

ASPM

Scanning

Container Vulnerability

Scanner

IaC

Code Scanner

Agentic Development Security

AI SAST

Frequently asked questions

What is Checkmarx?

Checkmarx has adapted well to the DevSecOps model, offering a lighter weight scanner in the Checkmarx One platform, that integrates well into the larger stack. They don't have all the latest features of some newer companies, but they certainly get the job done for diverse enterprises. I would not suggest venturing off Checkmarx One though. Site: www.checkmarx.com.

Which categories does Checkmarx fall into?

Checkmarx appears in the oneNorma directory under DAST, SCA, ASPM, SAST, Container Vulnerability, IaC, and Agentic Development Security. Use those labels to compare it with other vendors for the same problem, not as an official ranking.

Does oneNorma resell or implement Checkmarx?

No. The Checkmarx profile (www.checkmarx.com) is for inventory and comparison. oneNorma delivers offensive and compliance evidence (pentesting, cloud compliance), not a vendor license.

Other cybersecurity vendors

More profiles from the vendor directory.