Checkmarx One

CheckmarxSAST (Static Application Security Testing)

CheckmarxSAST combines high-speed scanning with low false positives, making it efficient and reliable. The platform identifies the most relevant vulnerabilities and risks in mission-critical applications through adaptive vulnerability scanning. It also helps developers find the optimal place to fix code, allowing for simultaneous remediation of multiple vulnerabilities. The solution uses generative AI to create and customize queries, enhancing the accuracy of security scans.

Software Composition Analysis (SCA)

Checkmarx offers a comprehensive solution for CISOs, AppSec teams, and developers that scans open-source libraries and third-party components. This helps identify and manage security and license risks in open-source application components and libraries’ vulnerabilities to provide actionable remediation insights. Furthermore, it ensures app components comply with licensing requirements, helping organizations avoid legal issues.

CxCodebashing

Checkmarx provides just-in-time developer training, helping them understand and fix security vulnerabilities as they code. Gamified, interactive lessons and challenges simulate real-world security issues, enhancing developers’ security skills. This tool works with CheckmarxSAST to provide contextual training based on identified vulnerabilities.

Dynamic Application Security Testing (DAST)

Checkmarx evaluates applications while running, providing current results and detecting vulnerabilities that may arise due to recent changes or updates. It covers a wide range of web applications and API frameworks, enabling effective assessment of various application parts.

Cloud-Native Application Security

Checkmarx secures applications from the first line of code to deployment in the cloud, providing comprehensive protection through the SDLC. It identifies and prioritizes risks in custom code, open-source components, and cloud configurations. The solution also eliminates shadow and zombie APIs, mitigating API-specific risks. Furthermore, it identifies and eliminates exposed secrets to minimize security risks.

AI Security

Checkmarx uses AI to suggest remediation steps for identified vulnerabilities, reducing the time to identify and fix security flaws. Its AI query builder helps write queries, tailoring AppSec solutions to specific applications. ChatGPT and GitHub Copilot integrations automatically scan the source code to identify malicious packages.

DevSecOps

The solution embeds security into every stage of the SDLC, from code to cloud, ensuring continuous security throughout the development process. It automates security scans with SAST, SCA, DAST, and IaC Security, identifying risks without slowing development. The platform fosters collaboration between AppSec, development, and DevOps teams.

AppSec Posture Management

Checkmarx provides aggregated scores for each application and ranks them by risk, helping prioritize remediation efforts. It correlates data from various AppSec tools, including non-Checkmarx solutions, for comprehensive security insights. A unified dashboard offers an overview of security data, enabling better insight into the true business impact of vulnerabilities.