Regarding the pricing of the solution, Checkmarx SAST came to us as a package that covers Codebashing, SCA scanning, and the SAST product. When comparing it with GitHub security and other solutions we tested, it was a really fair price for us. On a scale of one to ten, I rate Checkmarx SAST a seven.
Key Account Manager at a tech services company with 11-50 employees
Reseller
Top 20
Sep 5, 2025
Some customers are using Checkmarx SAST, but their information is confidential and cannot be shared. As a sales professional rather than an engineer, I can provide feedback about working with the Checkmarx SAST team regarding client collaboration, POC, POC support, and scheduling of meetings, but cannot provide technical feedback. The reviewer gave Checkmarx SAST a rating of 9 out of 10.
Find out what your peers are saying about Checkmarx, Qualys, SonarSource Sàrl and others in Static Application Security Testing (SAST). Updated: January 2026.
SAST is a method designed to detect security vulnerabilities within an application's source code. By analyzing the code structure, SAST identifies potential flaws early in the development cycle, promoting secure coding practices and reducing the risk of security issues in production.
Unlike dynamic testing that examines an application during runtime, SAST operates on static code analysis. This early detection capability is crucial as it enables developers to address vulnerabilities before...
Regarding the pricing of the solution, Checkmarx SAST came to us as a package that covers Codebashing, SCA scanning, and the SAST product. When comparing it with GitHub security and other solutions we tested, it was a really fair price for us. On a scale of one to ten, I rate Checkmarx SAST a seven.
Some customers are using Checkmarx SAST, but their information is confidential and cannot be shared. As a sales professional rather than an engineer, I can provide feedback about working with the Checkmarx SAST team regarding client collaboration, POC, POC support, and scheduling of meetings, but cannot provide technical feedback. The reviewer gave Checkmarx SAST a rating of 9 out of 10.
I really like Checkmarx. I would rate it eight or nine out of ten. We did find an issue, however, it was fixed quickly by the vendor, which is good.
I'd rate the solution ten out of ten.