# Checkmarx SCA: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 15 judge labels across 1 category by 9 of 14 models. Page: https://www.gane.ai/index/it/vendors/checkmarx-sca

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Software composition analysis](https://www.gane.ai/index/it/developer/software-composition-analysis/index.md) | 0% | 19 | 13% | 15 |

## What the models said for it

- "Enterprise Security & Compliance Suites: *Checkmarx, Veracode, Mend.io (formerly WhiteSource), Sonatype Nexus*" (Gemini 3.5 Flash, SCA)
- "Choose Mend.io or Checkmarx if you suffer from alert fatigue" (Gemini 3.5 Flash, SCA)
- "Checkmarx SCA (known for comprehensive coverage)" (Claude Haiku 4.5, SCA)

## And against it

- "similar enterprise platforms (e.g., older WhiteSource/Mend.io versions, Checkmarx in some setups)" (Grok 4.20, SCA)
- "Limitations: Less specialized than dedicated SCA tools" (Kimi K2, SCA)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 2 | 0 | 0 | 2 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 2 | 1 | 3 |
| Mistral Small | 0 | 0 | 1 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 0 | 2 | 0 | 2 |
| Llama 4 Maverick | 0 | 0 | 1 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 1 | 1 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 2 | 0 | 2 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 2 | 0 | 2 |

## Sources returned with these answers

The sites and pages cited by the answers that named Checkmarx SCA, from 45 of the 50 answers that named it (only the models that return a source list).

### Domains cited

- sonatype.com: 27
- res.cloudinary.com: 25
- mend.io: 22
- checkmarx.com: 20 (its own site)
- g2.com: 19
- forrester.com: 18
- linuxfoundation.org: 15
- safeguard.sh: 15
- raven.io: 14
- blackduck.com: 13

### Pages cited

- https://res.cloudinary.com/snyk/image/upload/v1731508416/website-pdfs/The-Forrester-Wave-Software-Composition-Analysis-Software-Q4-2024.pdf: 25
- https://sonatype.com/compare/best-sca-tools: 25
- https://mend.io/blog/best-software-composition-analysis-sca-tools-top-solutions: 19
- https://linuxfoundation.org/hubfs/Reports/An-Open-Guide-To-Evaluating-Software-Composition-Analysis-Tools_V2.pdf: 15
- https://forrester.com/report/the-software-composition-analysis-software-landscape-q2-2024/RES181024: 14
- https://raven.io/blog/best-software-composition-analysis-tools: 14
- https://sonatype.com/compare: 13
- https://seemplicity.ai/faqs/what-are-the-top-10-sca-tools: 12

## In its own words

What Checkmarx SCA's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: User Guide (https://docs.checkmarx.com/en/34965-19112-checkmarx-sca---user-guide.html)

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.