Checkmarx One Pricing & Packages

Two paths to the custom quote best tailored for Your needs.
Packages bundle capabilities by program maturity (Essentials → Professional → Enterprise) – best for building a complete AppSec foundation.
By Security Area groups capabilities around a specific area to secure — code, open source, or APIs and runtime – best for a focused need.
Either way, final coverage is tailored with a Checkmarx expert during your consultation.

Checkmarx One is priced per package and tailored to your environment, so there’s no one-size-fits-all list price. Your quote depends on the modules you need (SAST, SCA, DAST, API Security, and more), your deployment model (SaaS or self-hosted), and the number of developers in scope. Share a few details and we’ll send a custom quote – most within one business day.

Application security isn’t a fixed SKU – the right coverage for a 30-developer team looks very different from a global enterprise with strict compliance requirements. Custom quoting lets us match you to the exact modules you need instead of forcing you into an oversized plan. It’s usually the difference between paying for what you’ll use and paying for what you won’t.

Essentials establishes core application security – SAST, SCA, API Security, and ASPM visibility – for teams building their program. Professional adds DAST, IaC Security, and AI Security for deeper, multi-layer coverage as you scale. Enterprise delivers complete coverage with Supply Chain Security, Container Security, Runtime Protection, and executive reporting for the most demanding compliance needs. The comparison table above shows exactly what’s included in each.

That’s what the Custom Package builder is for. If your requirements fall between packages – or you need a specific mix of modules and deployment options – you can build a tailored package or talk to a Checkmarx expert who’ll map coverage to your environment;

we’ll help you get it right.

Yes. Packages are modular by design, so you can add scanner engines like DAST, Container Security, or Secrets Detection or Capabilities like AI or Software Supply Chain Security  as your program matures, and upgrade tiers when you’re ready to scale.

Your subscription is adjusted to reflect the change – no need to rebuild from scratch.

Both. Checkmarx One runs as a cloud-based SaaS platform, and we support self-hosted and on-premises deployment for teams with data residency, air-gapped, or regulatory requirements. Your deployment model is factored into your quote, so let us know what your environment requires.

Click “Get a Quote” on any package and share a few details – name, business email, and country. A Checkmarx expert reviews your needs and follows up, typically within one business day, with pricing and recommended coverage.

We don’t offer a self-serve free trial, but we do offer a personalized demo so you can see Checkmarx One against your real use cases rather than a generic sandbox. Request a demo and we’ll tailor the walkthrough to the modules and workflows that matter most to your team.