Checkmarx DAST

6.1easy start · #10 of 28
in Dynamic Application Security Testing Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on api, Linux, Mac, self-hosted, Web, Windows.

Checkmarx DAST is ranked #10 of 28 in dynamic application security testing software on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is no free plan.

Checkmarx DAST plans and pricing

All plans

Essentials Not published DAST is an add-on · custom quote based on modules, deployment model, and developer count · SaaS or self-hosted deployment checkmarx.com · 3 Oct 2026

Professional Not published Includes DAST · custom quote based on modules, deployment model, and developer count · SaaS or self-hosted deployment checkmarx.com · 3 Oct 2026

Compared on dynamic application security testing software

Authenticated scanning: Yes
API testing: Yes
Browser-based scanning: Yes
CI/CD integration: Yes
Deployment model: hybrid

Best Checkmarx DAST alternatives

See all 12

Qualys External Attack Surface Management 0 of 4 in the starter kit Lesson 17.7 Beagle Security 0 of 4 in the starter kit Lesson 27.6 Burp Suite DAST 0 of 4 in the starter kit Lesson 37.2 Veracode DAST 0 of 4 in the starter kit Lesson 47.2 Rapid7 Surface Command 0 of 4 in the starter kit Lesson 57.0 OWASP ZAP 0 of 4 in the starter kit Lesson 66.9

The record

Purpose: Checkmarx DAST is a language-agnostic tool that tests live web applications and APIs by simulating real-world attacks.
CI/CD scanning: DAST can run automatically on every build in development and pre-production, with results surfaced in the pipeline.
Internal apps: Built-in tunnelling lets teams scan internal applications without firewall exceptions or network reconfiguration.
Authentication: DAST supports browser-recorded login flows, two-factor authentication, and instant verification for application coverage.
API coverage: DAST tests REST, SOAP, and gRPC endpoints in live environments and centralizes SAST and DAST API findings in one inventory.
Compliance: Findings can be mapped to the compliance frameworks they affect to help teams prioritize remediation for audit readiness.
Integrations: Checkmarx lists CI/CD integrations including Jenkins, TeamCity, GitHub Actions, Azure DevOps, Maven, Bitbucket Pipelines, CircleCI, GitLab CI, Bamboo, AWS CodeBuild, and SonarQube.
Deployment: Checkmarx One is offered as cloud SaaS and supports self-hosted and on-premises deployments, including for air-gapped environments.
Pricing limit: DAST is not sold as a standalone product and is available as an add-on within Checkmarx One Professional or higher.
Trial and demo: Checkmarx says it does not offer a self-serve free trial and offers personalized demos instead.
Security: Checkmarx says customer data is encrypted at rest using protocols such as AES-256 and that service communications use HTTPS, with data to and from S3 encrypted using TLS 1.2.
Compliance certifications: Checkmarx states that it is ISO/IEC 27001:2022 certified and undergoes an annual independent SOC 2 Type II audit.
Support: Premium Support includes 24/7 coverage and a two-hour response time for critical P1 issues; Standard Support lists six hours for P1 issues during working hours on business days.
Intended users: Checkmarx describes DAST as a tool for enterprise teams and positions it within the Checkmarx One application security platform.

Where it ranks on The Geeks Club

Best Dynamic Application Security Testing Software in 2026#10 of 28

Is Checkmarx DAST yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Checkmarx DAST

Sources

docs.checkmarx.com/en/34965-433898-checkmarx-dast.html· checked 3 Oct 2026
checkmarx.com/checkmarx-dast/· checked 3 Oct 2026
checkmarx.com/why-checkmarx/integrations/· checked 3 Oct 2026
checkmarx.com/pricing/· checked 3 Oct 2026
checkmarx.com/trust/· checked 3 Oct 2026
checkmarx.com/support/· checked 3 Oct 2026