Checkmarx SCA
Checkmarx SCA is a cloud-deployed, web-based module for open-source security, license compliance, and software bill of materials generation.
What Checkmarx SCA is
Checkmarx SCA is a cloud-deployed, web-based module for open-source security, license compliance, and software bill of materials generation. It supports Java with Maven, JavaScript and TypeScript with NPM, .NET with NuGet, Python with PIP, PHP with Composer, Swift and iOS, Go, Ruby, C and C++ with Conan, Unity, Perl with CPAN, and Dart with Pub. The module includes reachability analysis and pull request scanning for development workflows. Checkmarx was founded in 2006 and is headquartered in Ramat Gan, Israel. The product is sold by custom quote, with pricing based on developers, applications, and usage; pricing is available on request. There is no free plan. Organizations can use it to examine open-source components across varied programming environments while addressing security, licensing, and SBOM requirements. Buyers should be prepared to discuss their development footprint when requesting a quote.
Good
- Supports many development ecosystems
- Generates software bills of materials
- Includes reachability analysis
- Provides pull request scanning
- Cloud deployment
Watch out
- No free plan
- Pricing available only by custom quote
- Cost depends on developers, applications, and usage
Who it suits
It suits organizations managing open-source dependencies across several programming ecosystems. Teams needing SBOM generation, license compliance, reachability analysis, or pull request scanning may consider it.
Verdict
Checkmarx SCA offers broad ecosystem coverage with security, licensing, SBOM, and scanning functions. Its custom pricing means buyers must request a quote based on their usage profile.
Plans and prices
From Checkmarx SCA's own pricing page, checked 22 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Custom quote | Priced on request | SCA module for open-source security, license compliance, and SBOM generation · Pricing based on developers, applications, and usage · Custom quote |
The facts
Each one read from Checkmarx SCA's own pages, with the date it was checked.
The company
- Founded
- 2006checked 4 Oct 2026
- Headquarters
- Ramat Gan, Israelchecked 4 Oct 2026
Alternatives to Checkmarx SCA
- 1
Renovate
Free planOpen sourceWebAPISelf-hosted7.8From $250 a year - 2
GitHub CodeQL
Free planWebExtensionLinuxmacOS7.5From $30 a month - 3
Endor Labs
Free planWebAPIExtensionLinux7.4Free plan - 4
Snyk Open Source
Free planWebAPILinuxmacOS7.3From $25 a month - 5
ActiveState Platform
Free planWebAPILinuxmacOS7.2Free plan - 6
Socket
Free planWebAPIExtensionLinux7.2From $25 a month