Product Summary

Overview

Checkmarx is an application security testing platform designed to identify and remediate vulnerabilities throughout the software development lifecycle. The tool combines multiple security testing methodologies to provide comprehensive coverage of application security risks and compliance requirements.

Key Features

Security Testing Capabilities:

• SAST (Static Application Security Testing) - Analyzes source code to detect vulnerabilities before runtime
• DAST (Dynamic Application Security Testing) - Tests running applications to identify runtime vulnerabilities
• SCA (Software Composition Analysis) - Scans dependencies and open-source components for known vulnerabilities
• IaC (Infrastructure as Code) - Evaluates infrastructure configurations for security misconfigurations

Advanced Detection:

• AI-powered vulnerability detection for improved accuracy and reduced false positives
• VulnScan capabilities for comprehensive vulnerability identification

Compliance & Governance:

• Audit Logs for tracking security activities and changes
• Built-in compliance frameworks including:
  • GDPR compliance support
  • HIPAA compliance support
  • SOC 2 compliance support

AppSec Integration:

• Application Security (AppSec) testing integrated into development workflows

Use Cases

Checkmarx is suitable for organizations that need to:

• Identify security vulnerabilities early in the development process
• Maintain compliance with regulatory standards (GDPR, HIPAA, SOC 2)
• Assess both custom-developed and third-party code for security risks
• Evaluate infrastructure configurations for security issues