IT AI Index
Index › Vendors › Checkmarx SCA · September 2026 Edition
Checkmarx · 1 category · Ranked

Checkmarx SCA

27Judge labels
0First choices
5Negative labels
10 of 12Models named it
1Category
September 2026 Edition. Every number here is derived from the raw labels under vendor table vv2026-09.2, every buyer segment counted.
Best standing
0% in SCA for enterprise buyers
Rank 22 of 49 in the mid-market standing
0 of 12 models made it the first choice on the direct prompt; 0% of its 6 labels there were negative.
By buyer segmentRead the same way at every buyer size.
Small business48 of 50
0%6 labels
under the label threshold
Mid-market22 of 49
0%6 labels
under the label threshold
Enterprise11 of 49
0%15 labels
accepted challenger
In sca · each standing computed within its segment · bars are 0 to 100 · the accent bar is the product's own best reading

Standing by category

Every category where a model named Checkmarx SCA for a mid-market B2B company. Share is first choices across the direct, paraphrase, budget and scale prompts; rank is within every product named in that category.
CategoryFunctionShareRankNegative rateLabelsQuadrant
Software composition analysisDeveloper platform0%22 of 490%6under 10 labels · led by Trivy at 40%

Movement

This is the first edition on this tier, so no move can be computed for Checkmarx SCA yet. From the next edition this section shows, per buyer segment, whether its share moved by more than the measured noise floor.

By model

How each model treated Checkmarx SCA across every prompt where it was named for a mid-market B2B company. Twelve models, six prompts per category.
ModelFirst choiceAlternativeMentionNegativeLabels
Claude Haiku 4.500101
GPT-5.4 mini00000
Gemini 3.5 Flash00000
Perplexity Sonar00101
Grok 4.1 Fast00101
Mistral Small00101
DeepSeek V4 Flash00101
Llama 4 Maverick00000
Qwen 3.7 Flash00000
Kimi K200000
GLM 4.7 FlashX00000
MiniMax M2.501001

By framing

Which of the six questions produced the naming. By model says how often; this says asked what. The first-choice count on the right carries the marks of the models that produced it.
FramingLabels by classFirst choices
Direct6 labelsNone
Paraphrase0 labelsNone
Comparative13 labelsNone
Budget-constrained0 labelsNone
Scale-constrained4 labelsNone
Negative4 labelsNone
First choiceAlternativeMentionNegative27 labels in all, every segment counted; 0 of the 0 first choices count toward share, since the comparative and negative framings do not. The bar is one segment per label class, to scale within the framing.

What the models said for it

Verbatim evidence the judge attached to positive labels.

“Unified SAST+SCA with exploitability evidence” MiniMax M2.5 · SCA · comparative prompt · alternative

And against it

Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.

No model argued against it.

Named alongside

The products named in the same answers as Checkmarx SCA, over the 27 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and Checkmarx SCA was named but was not.
ProductSame answerTook the first choice insteadHead to head
Black Duck27 of 274Not in the top three
Snyk Open Source26 of 278Not in the top three
Mend.io26 of 272Not in the top three
Sonatype Lifecycle22 of 278Not in the top three
JFrog Xray18 of 270Not in the top three
Endor Labs17 of 273Not in the top three
FOSSA15 of 270Not in the top three
Semgrep Supply Chain8 of 271Not in the top three
OWASP Dependency-Check8 of 270Not in the top three
Cycode6 of 271Not in the top three
A head-to-head page exists where both products are in a category's top three. The other rows are the same fact without a page behind them, so they link to the product instead.

What carried it into the answer

The sites and pages cited by the answers that named Checkmarx SCA. A fact about retrieval, not a lever on the model.

Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 25 of the 27 answers that named Checkmarx SCA and are not a share of its labels.

Domains cited

endorlabs.com24
cycode.com15
guideflow.com12
ox.security12
expertinsights.com11
safeguard.sh11
sonatype.com11
mend.io9
raven.io9
aikido.dev8

122 of the 122 domain citations in answers naming Checkmarx SCA came from somebody else's page.

Pages cited

endorlabs.com/learn/best-sca-tools-05b7a23
endorlabs.com/learn/best-sca-tools17
cycode.com/blog/top-enterprise-sca-tools14
guideflow.com/blog/software-composition-analysis-tools12
ox.security/blog/software-composition-analysis-and-sca-tools12
expertinsights.com/application-security/the-top-software-composition-analysis-tools11
sonatype.com/compare/best-sca-tools10
raven.io/blog/best-software-composition-analysis-tools9

Pages are listed as the models cited them.

Is this your product?

Claim this page

Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Checkmarx SCA's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Checkmarx SCA, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.

It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at checkmarx.com is approved on the spot, any other address is reviewed by hand.

Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.

Subscribe to the pack