# Checkmarx API Security

Checkmarx API Security is an API Security product by Checkmarx. It runs in the cloud. Pricing is commercial (contact sales).

API security tool that discovers APIs in code and addresses vulnerabilities

Checked October 2026.

## What is Checkmarx API Security?

Checkmarx API Security is an application security tool that discovers and inventories APIs throughout the software development lifecycle. The product scans source code and documentation to identify all APIs, including shadow and zombie APIs that may not be documented or actively maintained.

The tool maintains a global API inventory that provides visibility into every API and detected vulnerabilities, allowing security teams to prioritize remediation based on business risk. It automatically scans API documentation and compares findings to the global inventory to identify data discrepancies and undocumented APIs.

The product includes an API change log that tracks the full history of API modifications, enabling teams to understand how risks were introduced over the API lifecycle. This historical tracking helps with forensic analysis and understanding the evolution of security posture.

Checkmarx API Security integrates with Checkmarx DAST to consolidate vulnerabilities discovered by both static and dynamic testing methods in a unified API inventory view. This integration provides a comprehensive view of API security issues across different testing methodologies.

The tool is part of the Checkmarx One platform and is designed to shift security left by identifying API issues earlier in the SDLC while also providing runtime visibility. It enables AppSec teams and developers to focus on critical issues by prioritizing vulnerabilities based on business value and risk context.

Tags: DAST

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security) · [API Security](https://cybersectools.com/categories/api-security)
- Vendor: [Checkmarx](https://cybersectools.com/companies/checkmarx)
- Deployment: Cloud
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Commercial (contact sales)
- Features: 10 listed
- Integrations: 37 listed
- Website: checkmarx.com

The full feature and integration lists are on the page for signed-in visitors.

## Where it ranks

Checkmarx API Security is not a pick on the current [Best API Security Solutions for Business](https://cybersectools.com/shortlists/best-api-security-solutions).

## Checkmarx API Security FAQ

### What is Checkmarx API Security?

Checkmarx API Security is a product by Checkmarx in the API Security category. It covers DAST.

### What is the pricing for Checkmarx API Security?

Checkmarx API Security is a commercial product. For pricing, visit https://checkmarx.com/product/api-security/ or contact Checkmarx.

### What are alternatives to Checkmarx API Security?

Alternatives to Checkmarx API Security listed on CybersecTools:

1. [Escape API Security](https://cybersectools.com/tools/escape-api-security) - API discovery, documentation, and security testing platform for APIs (Commercial)
2. [Indusface AppTrana - API Protection](https://cybersectools.com/tools/indusface-apptrana-api-protection) - Managed API security platform with discovery, DAST, WAF, and 24x7 SOC (Commercial)
3. [StackHawk API Discovery](https://cybersectools.com/tools/stackhawk-api-discovery) - API discovery tool that maps application attack surface from source code (Commercial)
4. [Edgescan API Security Testing](https://cybersectools.com/tools/edgescan-api-security-testing) - API discovery, vulnerability scanning, and penetration testing platform (Commercial)
5. [Pynt API Security Testing](https://cybersectools.com/tools/pynt-api-security-testing) - API security testing platform with LLM-powered context awareness and attack simulation (Commercial)

Compare all Checkmarx API Security alternatives at [https://cybersectools.com/alternatives/checkmarx-api-security](https://cybersectools.com/alternatives/checkmarx-api-security)

### What deployment and organization size does Checkmarx API Security fit?

Checkmarx API Security is available as a cloud service. It is listed for small businesses, mid-market companies and enterprises. Pricing is commercial. Ask Checkmarx for pricing and support terms.

## Compare Checkmarx API Security with similar solutions

- [Checkmarx API Security vs Escape API Security](https://cybersectools.com/compare/checkmarx-api-security-vs-escape-api-security)
- [Checkmarx API Security vs Indusface AppTrana - API Protection](https://cybersectools.com/compare/checkmarx-api-security-vs-indusface-apptrana-api-protection)
- [Checkmarx API Security vs StackHawk API Discovery](https://cybersectools.com/compare/checkmarx-api-security-vs-stackhawk-api-discovery)

All alternatives to Checkmarx API Security: [/alternatives/checkmarx-api-security](https://cybersectools.com/alternatives/checkmarx-api-security)

---

Source: https://cybersectools.com/tools/checkmarx-api-security

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Checkmarx API Security and Checkmarx: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md