Checkmarx API Security vs Trivy

Checkmarx API Security

5.9 #23 in Software Composition Analysis Software

About Checkmarx API Security

Trivy

7.1 #11 in Software Composition Analysis Software

About Trivy
Checkmarx API SecurityTrivy
Free planNoYes
Free trialNoNo
Paid from—Free
Open sourceNoNo
Platformsapi, self-hosted, WebLinux, macOS, self-hosted, Windows
Free planNoYes
Supported ecosystemsJava/Maven, JavaScript/TypeScript/NPM, .NET/NuGet, Python/PIP, PHP/Composer, Swift/iOS, Go, Ruby, C/C++/Conan, Unity, Perl/CPAN, Dart/PubRuby, Python, PHP, Node.js, .NET, Java, Go, Rust, C/C++, Elixir, Dart, Swift, Julia, and operating-system packages
SBOM generationYesYes
Reachability analysisYes—
Pull request scanningYes—
Deployment optionscloudself_hosted

Both are listed in Best Software Composition Analysis Software, Best Container Image Scanning Tools. On The Geeks Club, Trivy scores higher on our published basis.