Checkmarx DAST
5.8#14 in dynamic application security testing softwareWebAPILinuxmacOS
VisitCheckmarx DAST vs OWASP ZAP
What both publish
| Fact | Checkmarx DAST | OWASP ZAP |
|---|---|---|
| Authentication | DAST supports browser-recorded login flows, two-factor authentication, and instant verification for application coverage. | Authentication features include browser-based, script-based, header-based and OAuth2 methods through the Authentication Helper add-on. |
| Deployment | Checkmarx One is offered as cloud SaaS and supports self-hosted and on-premises deployments, including for air-gapped environments. | ZAP publishes Docker images, including a bare image described as minimal and ideal for CI. |
| Founded | 2006 | 2010 |
| Purpose | Checkmarx DAST is a language-agnostic tool that tests live web applications and APIs by simulating real-world attacks. | ZAP is a web application scanner and proxy for security testing. |
Checkmarx DAST plans
- EssentialsPriced on request
- ProfessionalPriced on request
OWASP ZAP plans
- Free / open sourceFree
- ZAPFree
Pick Checkmarx DAST if…
Checkmarx DAST suits enterprise teams testing live web applications and APIs as part of an application security program. It supports CI/CD scanning and cloud, self-hosted, or on-premises deployment.
Pick OWASP ZAP if…
ZAP is intended for developers, testers new to security testing, and security testing specialists. Its automation and Docker options also suit teams incorporating scans into CI workflows.