Checkmarx One DAST vs InQL: side-by-side comparison (2026)
Checkmarx One DAST is a commercial dynamic application security testing solution by Checkmarx. InQL is a free dynamic application security testing solution. Features, integrations, deployment and the company behind each one, side by side.
Our take
What our shortlists say about the one we picked.
- Checkmarx One DAST
Best for: AppSec teams already using Checkmarx One
It is on this list because it is built for hard logins, from two-factor to single sign-on, and because it joins what code scans and live scans find about your APIs. It fits mid-sized and large AppSec teams already on Checkmarx One. If you do not run other Checkmarx scanners, the shared inventory and scores matter less, so judge it on its scanning alone.
From Best DAST Solutions for Business, Fall 2026
Reviewed by Nika (Nikoloz) Kokhreidze.
KnocknocSponsored
Hi Citrix. Hide VPNs. Hide Windows on a LAN. Knocknoc solves this. Just in time identity linked allow-listing. DIY, on-premise or SaaS. Prevent attacks fast.
VisitEnterprise DAST solution for runtime app and API security testing
InQL is a Burp Suite extension for advanced GraphQL testing and vulnerability detection
Side-by-side comparison
Feature
Checkmarx One DAST
InQL
Pricing model
Commercial
Free
Category
Dynamic Application Security Testing
Dynamic Application Security Testing
Deployment and fit
Deployment type
Cloud
On-Premises
Company size fit
Mid-Market, Enterprise
Startup, SMB, Mid-Market, Enterprise
Open source
GitHub stars
–
1,671
Last commit
–
Apr 2025
Company
Company
Checkmarx
–
Use cases and capabilities
CI/CD
Yes
No
DAST
Yes
No
Web Security
Yes
No
GraphQL
No
Yes
Core features
10 features listed
No features listed
Integrations
35 integrations listed
No integrations listed
Need help choosing?
See more solutions in this category, or build a security stack from your picks.
