Best Checkmarx SAST Alternatives in 2026
Updated
20 apps from static application security testing software ranked against Checkmarx SAST on the same published basis.
- 1Checkmarx SAST vs Semgrep Code
- 2Checkmarx SAST vs GitHub CodeQL
- 3Checkmarx SAST vs Horusec
- 4Checkmarx SAST vs Black Duck Coverity
- 5Checkmarx SAST vs OpenGrep
- 6Checkmarx SAST vs PVS-Studio
- 7Checkmarx SAST vs CodeSonar
- 8Checkmarx SAST vs Klocwork
- 9Checkmarx SAST vs Skylos
- 10Checkmarx SAST vs Mend SAST
- 12Checkmarx SAST vs Flawfinder
- 13Checkmarx SAST vs Puma Scan
- 14Checkmarx SAST vs Bearer
- 15Checkmarx SAST vs Bandit
- 16Checkmarx SAST vs Microsoft DevSkim
- 17Checkmarx SAST vs gosec
- 18Checkmarx SAST vs MobSF
- 19Checkmarx SAST vs Pysa
- 20Checkmarx SAST vs HCL AppScan Source
- 21Checkmarx SAST vs Dawnscanner
Checkmarx SAST alternatives compared
| # | App | Score | Free plan | From | Runs on |
|---|---|---|---|---|---|
| 1 | Semgrep Code | 8.2 | Free plan | $30/mo | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 2 | GitHub CodeQL | 8.1 | Free plan | $30/mo | Browser, Linux, Mac, self-hosted, Web, Windows |
| 3 | Horusec | 7.7 | Free plan | Free | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 4 | Black Duck Coverity | 7.4 | No | — | Linux, Mac, self-hosted, Web, Windows |
| 5 | OpenGrep | 7.4 | Free plan | Free | Linux, Mac, Windows |
| 6 | PVS-Studio | 6.9 | No | — | Linux, Mac, Windows |
| 7 | CodeSonar | 6.7 | No | — | Web, Windows, Linux |
| 8 | Klocwork | 6.6 | No | — | Linux, Web, Windows |
| 9 | Skylos | 6.6 | Free plan | Free | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 10 | Mend SAST | 6.4 | No | $83.33/mo | Linux, Mac, self-hosted, Web, Windows |
| 12 | Flawfinder | 6.3 | Free plan | Free | Linux, Mac, self-hosted, Windows |
| 13 | Puma Scan | 6.2 | Free plan | $24.92/mo | Linux, Mac, self-hosted, Windows |
| 14 | Bearer | 5.9 | No | — | Mac, Linux |
| 15 | Bandit | 5.9 | Free plan | Free | Linux, Mac, self-hosted |
| 16 | Microsoft DevSkim | 5.8 | No | — | — |
| 17 | gosec | 5.5 | No | — | Linux, Mac |
| 18 | MobSF | 5.5 | Free plan | Free | Android, API, iOS, Linux, self-hosted, Web |
| 19 | Pysa | 5.5 | No | — | Browser, Linux, Mac, Windows |
| 20 | HCL AppScan Source | 5.3 | No | — | Windows, Linux |
| 21 | Dawnscanner | 5.0 | No | — | — |
Make your app an alternative to Checkmarx SAST
See the priceThe sponsored alternative slot on this page is labelled Sponsored.
Questions about Checkmarx SAST alternatives
What is the best alternative to Checkmarx SAST?
Semgrep Code, number 1 in static application security testing software with a score of 8.2 out of 10. The others here: GitHub CodeQL, Horusec, Black Duck Coverity and 16 more.
What is the best free alternative to Checkmarx SAST?
Semgrep Code is the best-ranked alternative with a free plan. 9 of the 20 alternatives here publish a free plan on their own pricing pages.
How are these alternatives ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation.