Tools · application security testing · Alternatives

Checkmarx alternatives_

As of 4 November 2026, 24 application security testing are named by companies instead of Checkmarx: Burp Suite by 760 companies, Snyk by 372, OWASP ZAP by 312.

As of 4 November 2026 · refreshed daily · counts move as websites, DNS and career sites are re-read.

Checkmarx, companies in postings
244
Most used alternative
Burp Suite · 760
Fastest hiring, 90 days
Burp Suite
Alternatives ranked
24
Catalogue
T-1.0.1-prov
01 — Ranked by evidence

application security testing companies choose instead of Checkmarx

Companies naming each tool in their own postings, and postings in the last 90 days. Bars are relative to the category leader.

#AlternativeCompaniescompaniesvs Checkmarxpostings, 90 dCompare
1
Burp SuitePortSwigger
760311%1,363Checkmarx vs Burp Suite →
2
SnykSnyk
372152%845Checkmarx vs Snyk →
3
OWASP ZAPOWASP Foundation
312128%510Checkmarx vs OWASP ZAP →
4
TrivyAqua Security
253104%474Checkmarx vs Trivy →
5
FortifyOpenText
23395%747Checkmarx vs Fortify →
6
VeracodeVeracode
14861%469Checkmarx vs Veracode →
7
14258%266Checkmarx vs GitHub Advanced Security →
8
SemgrepSemgrep
12250%232soon
9
CheckovPalo Alto Networks
10242%187soon
10
CoveritySynopsys
9539%311soon
11
Black DuckBlack Duck Software
9137%308soon
12
8635%128soon
13
CodeQLGitHub
7430%134soon
14
cosignSigstore
7029%117soon
15
SigstoreLinux Foundation
6426%229soon
16
SonatypeSonatype
5824%120soon
17
CycloneDXOWASP Foundation
5121%131soon
18
HCL AppScanHCL
4619%82soon
19
WebInspectOpenText
4518%80soon
20
GrypeAnchore
4016%98soon
21
SPDXLinux Foundation
3916%102soon
22
SyftAnchore
3314%76soon
23
Aikido SecurityAikido
3012%53soon
24
GitGuardianGitGuardian
125%46soon
3,522 companies name a application security testing in their postings.

Filter on any of them, or on Checkmarx users who also name an alternative, and open the person who owns the stack.

Free plan: 1,000 records, no card. The first 20 are above; e-mails are verified at the mail server when you open them.

Cite this

Quote the sentence with the date and the link. The numbers change daily; the link always shows the current ones.

24 application security testing are named by companies instead of Checkmarx: Burp Suite by 760 companies, Snyk by 372, OWASP ZAP by 312, measured from their own job postings. (Breaknorm, 4 November 2026, https://breaknorm.co/tools/checkmarx/alternatives)
How we know

Read from the source, not self-reported

Every number on this page can be traced to a page we crawled or a posting we read. Full methodology →

  • RankingCompanies whose own postings name the tool as the team's system, from the Breaknorm technology catalogue T-1.0.1-prov. Editions are folded into their parent product.
  • 90-day postingsOpen postings first seen or posted in the last 90 days that name the tool.
  • Not includedRatings, prices, feature claims, sponsored positions.
FAQ

Checkmarx alternatives: questions

What is the most used alternative to Checkmarx?

Burp Suite: 760 companies name it in their own job postings, against 244 for Checkmarx.

How is this list ranked?

By the number of companies whose own postings name the tool as the team's system (Breaknorm technology catalogue T-1.0.1-prov), then by postings in the last 90 days. No ratings, no vendor input, no sponsored positions.

Does this say which is better?

No. It says who uses what, by company size, industry and country, so you can see which tools companies like yours choose. For features and prices, read the vendors.

Can I get the companies on any of these?

Yes: click the tool, see the first 20 companies, and sign up for the full list with verified e-mails. Counting is free.

Companies and people

Get these companies your way

The same data as a search, over MCP and the API, as bulk files, or pushed to you as it changes.

Every company on Checkmarx
or on what replaces it

Connect the MCP server, filter on any tool, and get 1,000 records free.

  1. 01Sign up, no card
  2. 02Connect Claude, ChatGPT or an API key
  3. 03Ask for your market, 1,000 records free