LICENSEWARE
Contribute
Publisher

Checkmarx

Checkmarx sells Checkmarx One as packages priced on Contributing Developers (committers to scanned private repositories in the last 90 days), with a pooled limit of 15 million lines of code per licence per 90 days and Credits for AI Actions; its older on-premises products are licensed per Named User, Project, Scanned Unit, Application and Node Locked server under published License Types pages and the Checkmarx Terms of Service.

Start Here

Overview articleCheckmarx licensingCheckmarx sells Checkmarx One as packages priced on Contributing Developers (committers to scanned private repositories in the last 90 days), with a pooled limit of 15 million lines of code per licence per 90 days and Credits for AI Actions; its older on-premises products are licensed per Named User, Project, Scanned Unit, Application and Node Locked server under published License Types pages and the Checkmarx Terms of Service.Cited · Edited 2026-10-07 · 14 references

Guides

Checkmarx One Contributing Developer licensingCited · Edited 2026-10-07Checkmarx SAST and legacy product licensingCited · Edited 2026-10-07Checkmarx Terms of ServiceCited · Edited 2026-10-07

Licensing Data

From the Checkmarx catalog: how usage is counted, the rules that apply, the programs licences are bought through and the SKUs. Backed by 45 verbatim excerpts from 18 Checkmarx documents.

Products

All 7 Products

Application Security Software 4

Checkmarx IAST (CxIAST), Checkmarx One, Checkmarx SAST (CxSAST), Codebashing

Software Supply Chain Security Solutions 2

Checkmarx SCA (CxSCA), Checkmarx SCS Threat API

DevSecOps Software 1

Checkmarx One Assist

Product History

All acquisitions
  1. Checkmarx acquired DusticoAnnounced 2021-08-05 · Closed 2021

    Checkmarx acquired Dustico, a SaaS service that detects malicious code and backdoors in open-source packages through behavioural analysis.

    Licensing impact
    • Checkmarx announced on 2021-08-05 that it had acquired Dustico and would combine its application security testing with Dustico's behavioural analysis of open-source packages.[1]
    Sources and full product history
Esc