Checkmarx Ltd. Due Diligence
Run due diligence on Checkmarx Ltd.: check compliance and get alerts when suppliers change.
Israel · checkmarx.com · 30 vendors
Checkmarx is a global leader in application security, offering a unified platform to help organizations secure their software from code to cloud. The company provides solutions for static and interactive application security testing, software composition analysis, and API security to identify and remediate vulnerabilities throughout the software development lifecycle.
Resilience scores
- Digital Sovereignty: 77
- Digital Resilience: 9
- Financial Resilience: 7
Technology vendors
- Anysphere, Inc. — Technology — United States
- Docker, Inc. — Technology — United States
- WP Engine, Inc. — Technology — United States
- and 27 more
Services catalogue
1 service in catalogue across 1 category; runs on 30 sub-vendors.
- Application security testing
Insights
Last updated 2026-07-29 · revision 8
30 direct vendors, 276 subvendors
Direct vendors by controlling owner country (sample)
- Canada: 1
- Israel: 1
- Sweden: 1
Subvendors by controlling owner country (sample)
- Sweden: 11
- Cyprus: 1
- Denmark: 3
Compliance
12 in-scope frameworks identified; showing 3.
NIS2 (source) — No public evidence
Evidence: https://checkmarx.com/, https://checkmarx.com/trust/, https://checkmarx.com/company/about-checkmarx/
Israeli Privacy Protection Law — No public evidence
Evidence: https://checkmarx.com/trust/, https://checkmarx.com/legal/privacy-policy/, https://checkmarx.com/company/about-checkmarx/
DORA (source) — No public evidence
Evidence: https://checkmarx.com/, https://checkmarx.com/financial-services/, https://checkmarx.com/trust/
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 7/10
Checkmarx is a well-established, PE-owned Israeli cybersecurity leader in application security testing with strong market position and a blue-chip customer base. It benefits from top-tier sponsorship by Hellman & Friedman, along with TPG, Insight Partners, and Salesforce Ventures on the cap table, which materially reduces near-term funding risk. Category leadership is evidenced by consistent Gartner Magic Quadrant Leader placement (2018-2025) for AST, Leader status in the inaugural 2026 Gartner MQ for Software Supply Chain Security, and Forrester Wave Leader for SAST (Q3 2025), all supporting pricing power. The Checkmarx One SaaS platform surpassed $150M+ ARR within three years of launch, indicating strong recurring revenue momentum, with blue-chip customers including Salesforce, Visa, Ford, Siemens, Capital One, Best Buy, Dell, and Adidas. FedRAMP Moderate authorization (2026) unlocks federal revenue. However, the 2020 take-private LBO likely loaded the company with substantial acquisition debt, and rising interest rates 2022-2024 would have pressured interest expense. Layoffs in 2023 and a shelved 2021 IPO reflect operating and exit challenges. Competition from Snyk, Veracode, GitHub Advanced Security, Wiz, and AI-native entrants creates margin pressure, and geopolitical risk from significant Israeli R&D operations adds volatility. Overall resilience is solid but not exceptional given the leveraged capital structure and lack of financial transparency.
Key strengths: Top-tier PE sponsor Hellman & Friedman with additional backing from TPG, Insight Partners, and Salesforce Ventures, Gartner MQ Leader for AST every year 2018-2025 and Leader in 2026 MQ for Software Supply Chain Security, Checkmarx One SaaS platform surpassed $150M+ ARR within three years of launch, Blue-chip customer base of 1,600-1,800+ enterprises including ~60% of Fortune 100 and ~40%+ of Fortune 500, Recurring subscription-heavy SaaS model improving revenue quality, FedRAMP Moderate authorization (2026) unlocking U.S. federal public sector, Global footprint across 70+ countries with 900+ employees
Risk factors: Intense competition from Snyk, Veracode, GitHub Advanced Security, Semgrep, Black Duck, Wiz, and Endor Labs, Leveraged capital structure from 2020 LBO with rising interest expense exposure, Shelved 2021 IPO with no publicly announced exit timeline; H&F 2020 vintage aging, Workforce reductions in 2023 amid broader cybersecurity slowdown, AI-driven disruption in AppSec from Copilot, Cursor, and AI-native security startups, Geopolitical risk from significant Israeli R&D presence (regional security, ILS/USD FX, reservist mobilization), Lack of public financial disclosure limits transparency
Revenue by geography
- Global (70+ countries, U.S. largest, EMEA second, APAC growing): 100%
Revenue by product/service
- Checkmarx One SaaS Platform (incl. CxSAST, CxSCA, CxIAST, Codebashing, AI SKUs): 100%
Workforce by country
- Total: 900
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.