Checkmarx is how the world’s largest enterprises can finally get ahead of application risk without slowing down development.
Worldwide
Joined December 2011
- Tweets16.8K
- Following2.9K
- Followers7.3K
- Likes7.3K
Pinned Tweet
Nearly half of all production code is now AI-generated.
Traditional scanning wasn't built for today's pace, growing codebases, or the increasing complexity of modern applications. Organizations need the consistency of deterministic scanning alongside the flexibility of AI-powered analysis.
Today, we're introducing Checkmarx Fusion, a new hybrid scanning architecture that combines Checkmarx's trusted AppSec engines and proprietary security context with frontier AI reasoning from Anthropic to deliver the industry's most complete vulnerability detection.
With Checkmarx Fusion, organizations can:
✔️ Detect vulnerabilities across every language, every codebase, and every stage of the SDLC
✔️ Improve detection by validating and enriching findings across multiple scanning methods
✔️ Scale with an enterprise architecture designed for performance, flexibility, and compliance
This isn't just another scanning engine. It's a hybrid approach to vulnerability detection designed for how software is built today.
Learn more about Checkmarx Fusion: checkmarx.com/press-releases…
Finding vulnerabilities is one thing. Getting them fixed is another. 🚀
With Checkmarx Triage & Remediation Assist, teams can cut through noisy findings, prioritize vulnerabilities based on attackability, and get review-ready fixes into developers' hands faster.
The result? Up to 95% faster mean time to remediate, fewer manual handoffs, and a clearer picture of what's actually been fixed.
Spend less time managing findings and more time eliminating real risk.
See how it works: checkmarx.com/product/triage…
When does a vulnerability backlog become a security risk of its own? 👀
Even organizations with mature AppSec programs are bringing in extra resources to clear growing backlogs. But what happens when the cleanup is over and new findings keep piling up?
In this month's edition of The Monthly Check-Up, we're exploring why one-time cleanup projects aren't enough, how AI is changing the equation, and what it really takes to keep the backlog from coming back.
Plus, we're sharing our Backlog Zero Playbook to help teams put that approach into practice.
Read the latest edition: linkedin.com/pulse/when-does…
A little recognition for making a big impact in AppSec. 🏆
Checkmarx One has been named the 2026 Editor's Choice for GenAI Agentic Application Security by @cyberdefensemag!
With developers and AI agents both writing code, organizations are facing new challenges in identifying vulnerabilities, managing risk, and getting issues fixed.
Checkmarx One brings it all together in one platform, helping teams prevent vulnerabilities earlier, detect real risks with greater accuracy, accelerate remediation, and maintain visibility across their applications.
And with innovations like Checkmarx Fusion combining frontier AI reasoning with proven scanning technology and connected to agents that expedite triage and remediation, we're making it easier for security teams to focus on what matters most to reduce risk.
A big thank you to Cyber Defense Magazine for the recognition! checkmarx.com/press-releases…
Before you merge AI-assisted code, check what's coming with it. 🔍
New dependencies, exposed secrets, and security flaws can slip through.
For #CybersecurityAwarenessMonth, we're sharing 5 security checks every developer should run before hitting merge. 👇
It's been a busy week for security teams, and our @CheckmarxZero researchers have been keeping up with it all. 🔎
From critical vulnerabilities in PHP and Node.js to compromised certificate authority keys, there's a lot to unpack. Here's what our team has been digging into:
🔹AI-powered attacks vs. reality: Are attackers really using AI to launch entirely new types of attacks? Our latest analysis looks at what Mandiant, Verizon, and Microsoft breach data actually shows.
🔗checkmarx.com/zero-post/fear…
Checkmarx retweeted
Blog: Detecting PHP2Shell and Other PHP Vulnerabilities with ZAP
PHP2Shell is the latest big “named” vulnerability. ZAP can now tell you if a site is running a vulnerable version of PHP, and it does so without sending a single extra request.
zaproxy.org/blog/2026-10-22-…
#php2shell
Hundreds of critical and high vulnerabilities closed. MTTR cut by 3x.
See how a global fintech used Checkmarx One to bring security directly into developers' workflows, improve risk visibility, and make remediation faster without slowing development.
Read the customer story: checkmarx.com/resources/the-…
The best conversations at a conference often start after the sessions end.
Heading to the FS-ISAC Americas Fall Summit in Austin? Join Checkmarx on Tuesday, October 27, for a small-group evening that picks up where the summit program leaves off: a guided tasting of premium tequila and mezcal, paired with candid conversation among fellow financial-services security leaders.
Exclusive peer exchange: bring what you’ve heard in the sessions and compare notes on what it means for your program.
Request your spot: luma.com/lbs0niue?utm_campai…
Backlog zero takes more than fixing vulnerabilities one-by-one.
Join us as we explore how teams can prevent risk earlier, prioritize what matters, and accelerate remediation with AI-powered AppSec.
Choose the session that works for your time zone:
🌎 Oct 29 | 8:30 AM PT / 11:30 AM ET - info.checkmarx.com/ams-backl…
🌍 Oct 28 | 2:30 PM CET - info.checkmarx.com/ams-backl…
🌏 Oct 29 | 3 PM SGT - info.checkmarx.com/ams-backl…
What role should MSPs play in securing AI-generated code?
Our VP of Americas Channels, Jonathan Kozimor, joined In The Channel to explore that question, from the growing demand for AppSec expertise to new opportunities for partners to deliver security as a managed service.
🎙️Catch the conversation: channelbuzz.ca/2026/10/as-ai…
Big congratulations to our new Director of Communications, Amanda Steinman! 🎉
Amanda was recently named a 2026 PRNEWS People of the Year honoree in the Nonprofit PR Innovators category for her work at ISC2, where she helped nearly double media coverage and supported 140%+ membership growth.
She's in great company among this year's honorees, and we're thrilled to have her on the Checkmarx team. Well deserved, Amanda! 👏
AppSec just got a new place to show up.
Checkmarx is now available in @AnthropicAI's Claude Marketplace in the United States, bringing application security intelligence directly into Claude-powered development workflows.
As developers build more with AI, security can be right there with them.
Read our announcement: checkmarx.com/press-releases…
Explore Checkmarx on the Claude Marketplace: claude.com/marketplace/agent…
More vulnerabilities found. Fewer “is this thing actually real?” conversations. We like that math.
Checkmarx Fusion combines deterministic analysis with frontier AI for broader coverage, fewer false positives, and findings your team can trust.
Watch Fusion do its thing. 👇
Want to see what Fusion can find in your code? Learn more or schedule a demo: checkmarx.com/platform/check…
