Checkmarx API Security vs Veracode DAST
Checkmarx API Security
5.9 #23 in Software Composition Analysis Software
About Checkmarx API Security| Checkmarx API Security | Veracode DAST | |
|---|---|---|
| Free plan | No | No |
| Free trial | No | Yes |
| Paid from | — | — |
| Open source | No | No |
| Platforms | api, self-hosted, Web | api, Linux, macOS, Web, Windows |
| Free plan | No | — |
| Supported ecosystems | Java/Maven, JavaScript/TypeScript/NPM, .NET/NuGet, Python/PIP, PHP/Composer, Swift/iOS, Go, Ruby, C/C++/Conan, Unity, Perl/CPAN, Dart/Pub | C#/.NET (DLL, NuGet); C/C++ (Make); Go (Dep, Glide, go get, Go modules, GoDep, GoVendor, Trash); Java (Ant, Gradle, JARs, Maven); JavaScript (Bower, NPM, Yarn); Kotlin (Gradle, JARs, Maven); Objective-C (CocoaPods); PHP (Composer); Python (pip, Pipenv, Poetry); Ruby (Bundler); Scala (JARs, SBT); Swift (CocoaPods); TypeScript (Bower, NPM, Yarn) |
| SBOM generation | Yes | Yes |
| Reachability analysis | Yes | Yes |
| Pull request scanning | Yes | Yes |
| Deployment options | cloud | cloud |
Both are listed in Best Software Composition Analysis Software, Best Static Analysis Tools, Best DevSecOps Platforms, Best SAST Tools, Best Dependency Management Software, Best Static Application Security Testing Software, Best Interactive Application Security Testing Software. On The Geeks Club, Veracode DAST scores higher on our published basis.