Get a recommendation
Tell us your requirements and our advisors will help you compare and shortlist the best-fit options, free and unbiased.
A real human, fast
Someone on our team replies within one business day, no bots, no ticket queue.
Routed to the right team
Buying, selling, partnering, or investing, you reach the people who can actually help.
Independent & unbiased
No pushy sales. Just honest guidance grounded in the ecosystem.
Tailored to your context
Tell us what you need and we shape the next steps around it.
Who are you? Pick the option that fits best.
Static application security testing from Checkmarx
Updated
CxSAST is the Checkmarx static application security testing (SAST) product that analyzes source code for vulnerabilities during development, now offered as part of the Checkmarx One platform.
Checkmarx SAST is used by application security teams and developers at enterprises that must find and fix code vulnerabilities early in the software lifecycle. The vendor says 1,800+ enterprise customers and over 40% of the Fortune 500 use Checkmarx.
Checkmarx sells SAST by subscription through Checkmarx One. Specific prices are not published on the page reviewed, so contact sales or check the pricing page for a quote.
Alternatives to CxSAST include Snyk Code, SonarQube, Veracode and Fortify. Veracode and Fortify are enterprise application security suites, SonarQube is popular for code quality, and Snyk Code targets developers.
Pricing Model
SUBSCRIPTION
Starting Price
Contact vendor
Free Options
None
Other
Missing an integration?
API Types
SDK Availability
Verify SDK availability in vendor's documentation.
Developer Features
No reviews yet. Be the first to review CxSAST.
Have a question about CxSAST? Ask the community.
No questions yet. Be the first to ask about CxSAST.
Compliance Standards
SOC 2 Type II
EnterpriseISO 27001
EnterpriseGDPR Compliant
GlobalHIPAA
HealthcarePCI DSS
FinanceCCPA
PrivacyFedRAMP
GovernmentCSA STAR
CloudDeployment & Data
Data Residency Options
Verify with vendor for your specific region requirements.
Code quality and security analysis (static analysis)
Cloud security platform (CNAPP) for the entire cloud environment
Connectivity cloud: CDN, DDoS protection, security, and edge compute
Cloud-native endpoint protection and XDR (Falcon platform)
