name: Checkmarx API Plans
specification: API Commons Plans
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/Plans
provider: Checkmarx
providerId: checkmarx
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: true
tags:
  - Application Security
  - DevSecOps
  - SAST
  - SCA
description: Checkmarx publishes named plan tiers for the Checkmarx One AppSec platform but does not
  list public prices; every plan routes to a "Get Custom Quote" sales engagement. Plans differ in scanner
  coverage (SAST, SCA, IaC, Container, API Security, Supply Chain) and program maturity rather than
  per-call API rates.
sources:
  - https://checkmarx.com/pricing/
  - https://checkmarx.com/product/checkmarx-one/
plans:
  - id: checkmarx-start-with-sast
    name: Start with SAST
    type: enterprise
    description: Entry path for existing on-premises Checkmarx SAST customers migrating to Checkmarx
      One. Custom-quoted.
    entries:
      - label: SAST tier
        name: start_with_sast
        type: subscription
        metric: contract
        limit: -1
        timeFrame: year
        geo: global
        unit: 1
        price: contact sales
        userMultiplied: false
    elements:
      - name: SAST scanning in Checkmarx One
      - name: Migration tooling from on-prem CxSAST
  - id: checkmarx-supply-chain
    name: Supply Chain
    type: enterprise
    description: Supply chain security coverage including SCA and malicious-package detection. Custom-quoted.
    entries:
      - label: Supply chain tier
        name: supply_chain
        type: subscription
        metric: contract
        limit: -1
        timeFrame: year
        geo: global
        unit: 1
        price: contact sales
        userMultiplied: false
    elements:
      - name: Software Composition Analysis (SCA)
      - name: Malicious package detection
      - name: License compliance
  - id: checkmarx-essentials
    name: Essentials
    type: enterprise
    description: Foundational AppSec program tier covering core scanners. Custom-quoted.
    entries:
      - label: Essentials tier
        name: essentials
        type: subscription
        metric: contract
        limit: -1
        timeFrame: year
        geo: global
        unit: 1
        price: contact sales
        userMultiplied: false
    elements:
      - name: SAST + SCA
      - name: Foundational reporting
  - id: checkmarx-professional
    name: Professional
    type: enterprise
    description: Expanded AppSec coverage adding additional scanner families. Custom-quoted.
    entries:
      - label: Professional tier
        name: professional
        type: subscription
        metric: contract
        limit: -1
        timeFrame: year
        geo: global
        unit: 1
        price: contact sales
        userMultiplied: false
    elements:
      - name: SAST, SCA, IaC, Container scanning
      - name: API Security
      - name: Standard support
  - id: checkmarx-enterprise
    name: Enterprise
    type: enterprise
    description: Comprehensive Checkmarx One coverage with full scanner suite, AI-assisted remediation,
      and enterprise support. Custom-quoted.
    entries:
      - label: Enterprise tier
        name: enterprise
        type: subscription
        metric: contract
        limit: -1
        timeFrame: year
        geo: global
        unit: 1
        price: contact sales
        userMultiplied: false
    elements:
      - name: Full scanner suite (SAST, SCA, IaC, Container, API, DAST, SCS)
      - name: AI-driven remediation guidance
      - name: Enterprise support and SSO/RBAC
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com
x-canonical:
  generated: '2026-10-08'
  vocabulary: all/0-working/economics/plans-canonical.yml
  models:
  - subscription
  units:
  - negotiated
  plans:
  - name: Start with SAST
    access: enterprise
    model: subscription
    model_how: derived
    units:
    - negotiated
    periods:
    - year
  - name: Supply Chain
    access: enterprise
    model: subscription
    model_how: derived
    units:
    - negotiated
    periods:
    - year
  - name: Essentials
    access: enterprise
    model: subscription
    model_how: derived
    units:
    - negotiated
    periods:
    - year
  - name: Professional
    access: enterprise
    model: subscription
    model_how: derived
    units:
    - negotiated
    periods:
    - year
  - name: Enterprise
    access: enterprise
    model: subscription
    model_how: derived
    units:
    - negotiated
    periods:
    - year