Checkmarx DAST

What Checkmarx DAST is

Checkmarx DAST tests live web applications and APIs by simulating real-world attacks. It is positioned for enterprise teams within the Checkmarx One application security platform and can run scans on each build in development and pre-production, surfacing findings in CI/CD pipelines. Built-in tunnelling supports scans of internal applications without firewall exceptions or network reconfiguration. For authenticated coverage, it supports browser-recorded login flows, two-factor authentication, and instant verification. It tests REST, SOAP, and gRPC endpoints, with SAST and DAST API findings centralized in one inventory. Findings can be mapped to relevant compliance frameworks to help teams prioritize remediation. Listed CI/CD integrations include Jenkins, GitHub Actions, Azure DevOps, GitLab CI, and AWS CodeBuild, among others. Checkmarx One is available as cloud SaaS and supports self-hosted and on-premises deployment, including air-gapped environments. DAST is not sold as a standalone product; it is an add-on within Checkmarx One Professional or higher. There is no self-serve free trial, and pricing is by custom quote. Checkmarx states that customer data is encrypted at rest and service communications use HTTPS. It lists ISO/IEC 27001:2022 certification and annual independent SOC 2 Type II audits.