Checkmarx DAST

Plans and prices

Every plan, in full

On the record

API coverage

DAST tests REST, SOAP, and gRPC endpoints in live environments and centralizes SAST and DAST API findings in one inventory.checkmarx.com · read 3 Oct 2026

Authentication

DAST supports browser-recorded login flows, two-factor authentication, and instant verification for application coverage.checkmarx.com · read 3 Oct 2026

CI/CD scanning

DAST can run automatically on every build in development and pre-production, with results surfaced in the pipeline.checkmarx.com · read 3 Oct 2026

Compliance

Findings can be mapped to the compliance frameworks they affect to help teams prioritize remediation for audit readiness.checkmarx.com · read 3 Oct 2026

Compliance certifications

Checkmarx states that it is ISO/IEC 27001:2022 certified and undergoes an annual independent SOC 2 Type II audit.checkmarx.com · read 3 Oct 2026

Deployment

Checkmarx One is offered as cloud SaaS and supports self-hosted and on-premises deployments, including for air-gapped environments.checkmarx.com · read 3 Oct 2026

Integrations

Checkmarx lists CI/CD integrations including Jenkins, TeamCity, GitHub Actions, Azure DevOps, Maven, Bitbucket Pipelines, CircleCI, GitLab CI, Bamboo, AWS CodeBuild, and SonarQube.checkmarx.com · read 3 Oct 2026

Intended users

Checkmarx describes DAST as a tool for enterprise teams and positions it within the Checkmarx One application security platform.checkmarx.com · read 3 Oct 2026

Internal apps

Built-in tunnelling lets teams scan internal applications without firewall exceptions or network reconfiguration.checkmarx.com · read 3 Oct 2026

Pricing limit

DAST is not sold as a standalone product and is available as an add-on within Checkmarx One Professional or higher.checkmarx.com · read 3 Oct 2026

Purpose

Checkmarx DAST is a language-agnostic tool that tests live web applications and APIs by simulating real-world attacks.docs.checkmarx.com · read 3 Oct 2026

Security

Checkmarx says customer data is encrypted at rest using protocols such as AES-256 and that service communications use HTTPS, with data to and from S3 encrypted using TLS 1.2.checkmarx.com · read 3 Oct 2026

Support

Premium Support includes 24/7 coverage and a two-hour response time for critical P1 issues; Standard Support lists six hours for P1 issues during working hours on business days.checkmarx.com · read 3 Oct 2026

Trial and demo

Checkmarx says it does not offer a self-serve free trial and offers personalized demos instead.checkmarx.com · read 3 Oct 2026

Alternatives to Checkmarx DAST

OZ OWASP ZAPWindowsMac+4 BS Beagle SecurityWebAPI W w3afWebMac+3 W WapitiWindowsMac+2 AD Astra DAST ScannerWebAPI DA DASTA-AIWebAPI SH StackHawk HawkScanWebWindows+4 IW Indusface WASWeb

Every alternative, ranked