Checkmarx is how the world’s largest enterprises can finally get ahead of application risk without slowing down development.

Worldwide
Based in United States
The best conversations at a conference often start after the sessions end. Heading to the FS-ISAC Americas Fall Summit in Austin? Join Checkmarx on Tuesday, October 27, for a small-group evening that picks up where the summit program leaves off: a guided tasting of premium tequila and mezcal, paired with candid conversation among fellow financial-services security leaders. Exclusive peer exchange: bring what you’ve heard in the sessions and compare notes on what it means for your program. Request your spot: luma.com/lbs0niue?utm_campai…
1
158
What role should MSPs play in securing AI-generated code? Our VP of Americas Channels, Jonathan Kozimor, joined In The Channel to explore that question, from the growing demand for AppSec expertise to new opportunities for partners to deliver security as a managed service. 🎙️Catch the conversation: channelbuzz.ca/2026/10/as-ai…
93
Big congratulations to our new Director of Communications, Amanda Steinman! 🎉 Amanda was recently named a 2026 PRNEWS People of the Year honoree in the Nonprofit PR Innovators category for her work at ISC2, where she helped nearly double media coverage and supported 140%+ membership growth. She's in great company among this year's honorees, and we're thrilled to have her on the Checkmarx team. Well deserved, Amanda! 👏
3
433
AppSec just got a new place to show up. Checkmarx is now available in @AnthropicAI's Claude Marketplace in the United States, bringing application security intelligence directly into Claude-powered development workflows. As developers build more with AI, security can be right there with them. Read our announcement: checkmarx.com/press-releases… Explore Checkmarx on the Claude Marketplace: claude.com/marketplace/agent…
4
141
More vulnerabilities found. Fewer “is this thing actually real?” conversations. We like that math. Checkmarx Fusion combines deterministic analysis with frontier AI for broader coverage, fewer false positives, and findings your team can trust. Watch Fusion do its thing. 👇
1
117
How well do you know the state of cybersecurity in 2026? 👀 We're putting your knowledge to the test for Cybersecurity Awareness Month with a little myth-busting challenge. Some of the findings from our 2026 Future of Application Security Report might surprise you, especially when it comes to how often organizations ship vulnerable code and just how much AI-generated code is making its way into production. Think you know which statements are fact and which are fiction? Swipe through to find out.
1
146
Two cities down, two more coming next week. ✈️ Checkmate: The Tour is heading across the Atlantic! We're bringing security and engineering leaders together to talk about securing software in the frontier AI era, with expert perspectives, live demos, and candid conversations. 📍London | Oct 13 📍Paris | Oct 15 Catch the highlights from NYC and Boston, then join us for the next stops: partner-program.net/checkmat…
2
165
New newsletter alert. 👀 Welcome to Inside the AI-DLC. AI is taking on more of the development lifecycle. AI-DLC is where developers get practical guidance for building secure software in an AI-driven world. First up: We’re discussing OpenAI’s Dots, agent-generated fixes, and why a “fixed” vulnerability still needs security scanning, testing, and human review. Read the first edition and subscribe to follow along: linkedin.com/pulse/can-dots-…
2
4
177
.@CheckmarxZero researchers uncovered MALFEX, a long-running npm supply chain campaign tied to 8 malicious packages and 40K+ downloads. Some remained installable with no advisory, meaning advisory-only tools could miss them entirely. Anurag Chevendra and Pavan Gudimalla break down the campaign and what teams need to know: checkmarx.com/zero-post/malf…
1
173
New York set the bar high. Boston, you’re up next. 👀Checkmate: The Tour heads to Boston October 6 with Checkmarx, Amazon Bedrock, and Anthropic for a conversation on securing software in the frontier AI era. CISO Kayla Williams will be joining the panel to share her perspective, too. Then, we’re trading code for cuisine with a live fish breakdown, sashimi, dinner, and sake pairing with Chef David Bazirgan. 📅 October 6 | 5–8:30 PM Reserve your seat: partner-program.net/checkmat…
1
177
How sharp are your cybersecurity eyes? 👀 We’re kicking off Cybersecurity Awareness Month with a little challenge. Hidden in this word search are some familiar terms from the world of security. How many can you find without peeking at the answers? Drop the first word you spot in the comments. 👇
1
143
Developers are at the center of how software gets built, so they need to be at the center of the security conversation too. That’s a big part of what @TessaMero is focused on as our Director of Developer Advocacy, building stronger connections with the developer community, listening to what they actually need, and bringing those insights back into Checkmarx. Tessa recently sat down with @hackernoon to share her approach to DevRel, developer experience, community, and what she’s excited to build here. Get to know her and read the full conversation: hackernoon.com/is-dev-rel-ma…
3
2
337
AppSec is hitting the road, and we’re bringing AI with us. 🚌 Starting next week, we’re teaming up with Anthropic and Amazon Bedrock for Securing Code in the AI Era, an event series on securing software as AI changes how it’s built. Expert perspectives, live demos, and conversations with your peers. Find your city and request an invite: partner-program.net/checkmat…
1
177
Finding a vulnerability isn’t always what slows teams down. It’s everything that comes next. Is it reachable? Exploitable? What’s the right fix? Checkmarx Triage & Remediation Assist helps move findings through those decisions and toward a review-ready fix, with people still making the final call. Rebecca Spiegel takes us inside the workflow: checkmarx.com/inside-checkma…
1
118
The conversation around slowing down AI development has gotten a lot louder this week, and it’s raising some important questions about how the industry moves forward responsibly. There are real risks to consider, just as there are real benefits to continued AI development. How the industry, policymakers, and individual companies navigate that balance is a much bigger conversation than any one organization can answer. From our perspective, there’s also a more immediate reality. AI is already deeply embedded in how software is being built, and whatever happens next at the frontier, organizations still need to secure the code being generated today. Our CEO @sandeepjohri has been speaking with CNBC and NBC Las Vegas about the slowdown conversation, what responsible AI adoption can look like, and why security can’t wait for the broader debate to be resolved. CNBC: cnbc.com/2026/09/15/trump-op… NBC Las Vegas: news3lv.com/news/local/ai-ar…
1
2
1
176
Blocking the front door doesn’t help much when attackers find another way in. 👀 Our @CheckmarxZero team is tracking an npm campaign that skips install scripts entirely, triggering malicious code only when the package is used. The package reached nearly 2M weekly downloads and even uses an Ethereum smart contract for command and control. Bruno Dias breaks down what’s happening, the IOCs, and why runtime behavior matters: checkmarx.com/zero-post/npm-…
1
1
2
235
“0 critical” only tells you what your tools were able to find. As previously unseen risks surface and response windows shrink, AppSec needs to see more, prioritize what matters, and fix it faster. See how Checkmarx One brings comprehensive detection, risk-based prioritization + AI-powered remediation together: checkmarx.com/product/applic…
1
115
Shana Tova to everyone celebrating Rosh Hashanah. 🍎🍯 Wishing our colleagues, customers, partners, and communities around the world a sweet New Year filled with health, happiness, and peace.
141
AppSec has never had more data. Somehow, developers are still spending nearly half their time figuring out what to do with it. More findings aren’t the answer. Teams need the context to know which vulnerabilities are actually reachable, exploitable, and worth fixing first. On September 15, Checkmarx’s Emma Datny and Avi Hein join @TechstrongGroup’s @NetworkingNerd to unpack how code, cloud, and runtime context can cut through the overload, and how ASPM turns scattered security signals into a clearer view of real risk. 📅 September 15 ⏰ 11:00 AM ET webinars.techstronglearning.…
1
140
What happens when an AI agent has the right credentials, but makes the wrong call? In a recent interview on AIM Network’s Point Break, Nitin Kumar Dang, VP of APAC, Middle East & Africa at Checkmarx, discusses how AI is reshaping software development - and why application security must evolve alongside it. As organizations embrace AI-assisted and agentic development, securing software can no longer be an afterthought. Security needs to operate continuously, at the speed and scale at which software is now being created. Watch this soundbite from the conversation and catch the full interview: piped.video/watch?v=PLlHQw9B…
1
170
Today, we’re excited to announce another big step forward for Checkmarx, and for what’s possible in vulnerability detection. We’re joining @AnthropicAI’s Project Glasswing, giving us access to Claude Mythos 5 for defensive cybersecurity work. We’ll use Mythos to strengthen our vulnerability detection and explore risks that have gone undetected by conventional approaches. And just as importantly, what we learn won’t stay with us. As the work progresses, we’ll share findings and best practices with the broader security community, helping advance how the industry approaches application security workflows, triage, and disclosure. We’re excited to get to work. Learn more about Checkmarx and Project Glasswing: checkmarx.com/press-releases…
3
6
1,358
AppSec doesn’t exactly have a finding problem. It has a “what do we do with all of these findings?” problem. 🙃 Finding more only helps if teams can prioritize what matters and fix it fast enough. See how Checkmarx Fusion tackles that gap live, from high-fidelity detection and Attackability-based prioritization to a merge-ready fix for human approval. Pick your session: 📅 Sept 8 | 2 PM CET 📅 Sept 9 | 1:30 PM SGT 📅 Sept 10 | 1 PM EDT See what happens after the scan. 👇info.checkmarx.com/closing-t…
1
4
256
Could you actually list every AI model, agent, MCP server, and dataset being used across your organization? Regulators increasingly expect you to, but traditional AppSec tooling wasn’t built to see the growing AI supply chain. You can’t govern what you can’t inventory. Emma Datny breaks down how to close the visibility gap: checkmarx.com/blog/the-regul…
1
4
240
Too much noise or not enough visibility. Pick your poison. 🙃 For years, AppSec teams have had to choose between flooding teams with findings or filtering harder and risking missing what matters. AI makes that tradeoff even harder to live with. Our latest newsletter looks at why rules-based and AI-only scanning each leaves gaps, and how Checkmarx Fusion combines deterministic analysis + AI reasoning to get more signal without bringing the noise back. linkedin.com/pulse/flooded-n…
1
138
What does it actually look like to go from finding a vulnerability to fixing it at scale? On September 10, Frank Emery and Avi Hein will show you. Join us for a live demo of Checkmarx Fusion, and we’ll walk through the full journey from hybrid scanning and high-fidelity detection to agentic triage and a merge-ready fix for human approval. You’ll see how Fusion brings deterministic analysis and frontier AI reasoning together to find more of what matters without bringing the noise back. Within Checkmarx One, Triage & Remediation agents then help teams eliminate those findings at scale. 📅 September 10 ⏰ 1:00 PM EDT info.checkmarx.com/closing-t…
2
212
Boards have raised the bar for what a strong AppSec program needs to deliver. In this article for @Forbes, our CEO @SandeepJohri looks at how AI is changing the security equation for enterprise leaders. Software is built more quickly than ever, while models like Anthropic’s Mythos are exposing vulnerabilities traditional approaches have missed and giving organizations less time to respond. A comprehensive view of risk, clear prioritization of what matters most, and proof that vulnerabilities are actually getting fixed are urgent essentials. Read Sandeep’s full perspective in Forbes: forbes.com/sites/checkmarx/2…
1
170
AI-assisted development is already here. Slowing it down isn’t the answer. At Black Hat, @sandeepjohri sat down with Joan Goodchild to discuss why security needs to be built into this new development model from the start. That includes hybrid approaches like Checkmarx Fusion, bringing deterministic analysis + AI reasoning together. Move fast, absolutely. Just build security in from day one. 👇
3
188
Heading to Mind The Sec 2026? Make Checkmarx one of your first stops. Visit our booth #S37 to meet the experts behind the latest innovations in application security, experience live product demos, and explore how organizations are staying ahead of today's rapidly evolving threats. From securing AI-generated code and strengthening software supply chains to accelerating remediation and empowering developers, we'll show you what's possible when security keeps pace with innovation. We’ll see you in São Paulo, Brazil! 🇧🇷 guardsquare.com/events/mind-…
1
3
222
“We’ll fix it in the next release” is a sentence Solidity developers don’t really get to say. Once a smart contract goes on-chain, there’s no Patch Tuesday or easy do-over. @ek121268 breaks down how Checkmarx Fusion combines deterministic analysis + AI reasoning to help find vulnerabilities before deployment, because in Web3, “we’ll deal with it later” can get expensive, fast. Read more: checkmarx.com/blog/there-is-…
1
3
160
What happens in Vegas stays in Vegas… unless it has to do with Black Hat. Then, we’re debriefing. 👀 The takeaway from Rebecca Spiegel’s latest blog? Waiting for the next AI model isn’t the answer. As AI changes how software is built and attacked, AppSec has to change with it. Rebecca breaks down four imperatives for what comes next: checkmarx.com/blog/four-apps…
1
2
159
There’s a lot we can say about what we’re building at Checkmarx, but sometimes it’s better to hear it from the people we’re building alongside. We’re lucky to work with some incredible partners who share our commitment to helping organizations build and ship software more securely, without slowing down innovation. Here’s what a few of them had to say about working with Checkmarx. 👇
1
2
181
Deterministic analysis, meet AI reasoning. 🤝 Checkmarx Fusion brings the two together to uncover vulnerabilities traditional approaches can miss, achieving an F1 score of 0.74, nearly 4x the industry average, with 60–70% fewer false positives than standalone AI scanning. And it doesn't stop at detection. Findings flow into Checkmarx One for prioritization and remediation. Checkmarx Fusion is now available in Early Access. Learn more from Jonathan Rende: checkmarx.com/blog/what-is-c…
133
And just like that, Black Hat 2026 is a wrap. 👋 A few packed days of great conversations, new ideas, live demos, theater sessions, and plenty of time spent with the people shaping what’s next in application security. Thank you to everyone who stopped by Booth #4553, spent time with our team, and made this week one to remember. And of course, a huge shoutout to the Checkmarx team who brought the energy all week long. Until next year, Vegas!
1
2
280
Not all vulnerability detection is created equal. @Justin Ruth breaks down why F1 score is one of the best ways to measure detection quality and why it matters. If you're at Black Hat, stop by Booth #4553 to continue the conversation with our experts, catch a theater session, or see our latest innovations in action.
3
274
What exactly is Shadow AI, and why is it becoming such an important conversation in application security? In just 30 seconds, @DarrenPMeyer explains why it's a topic every security team should understand. If you're at Black Hat, stop by Booth #4553 to meet the team, join one of our theater sessions, and keep the conversation going.
2
155
Finding vulnerabilities is only valuable if teams can act on them. Checkmarx Fusion combines trusted AppSec engines, security context, and frontier AI reasoning to detect more real vulnerabilities with less noise. From there, Checkmarx One helps teams prioritize what matters and accelerate remediation. Learn more about Checkmarx Fusion and hybrid scanning: checkmarx.com/platform/check…
2
2
200
The booth is open. The team's warmed up. It's game time. We're kicking off our first full day at Black Hat with a full lineup of theater sessions, live demos, and great conversations. Whether you want to talk Checkmarx Fusion, AI Inventory, or where application security is headed next, we'll be at Booth #4553 all day. Come by and say hello! 👋
2
167
The cybersecurity conversation doesn't end when Black Hat does. If you're staying in Las Vegas for #DEFCON, stop by #AppSecVillage and connect with the @CheckmarxZero research team. 🎯 Take on our "AppSec Quiz Gauntlet: Spot the Vulnerability", test your secure code review skills, and see if you can spot what others miss. 📍AppSec Village 🗓️Aug. 7–9 appsecvillage.com/
3
233
There's no better way to bring a team together than by giving back. 💙 During our Q3 QBR in Chicago, the Checkmarx AMS Leadership Team assembled 120 snack bags for Chicago HOPES for Kids, helping provide children with nutritious snacks throughout the summer. We're proud of our team for giving back to the local community and grateful for the opportunity to make a meaningful impact.
160
Diversification isn't just smart investing; it's a smart application security strategy. As AI accelerates software development, relying on a single model to write, review, and secure code isn't enough. The strongest AppSec programs combine deterministic security with AI-powered reasoning to reduce risk, accelerate remediation, and build software with confidence. In his latest blog, @ek121268 explores why a hybrid approach is becoming essential in the age of AI: checkmarx.com/blog/investmen…
1
2
121
Nearly half of all production code is now AI-generated. Traditional scanning wasn't built for today's pace, growing codebases, or the increasing complexity of modern applications. Organizations need the consistency of deterministic scanning alongside the flexibility of AI-powered analysis. Today, we're introducing Checkmarx Fusion, a new hybrid scanning architecture that combines Checkmarx's trusted AppSec engines and proprietary security context with frontier AI reasoning from Anthropic to deliver the industry's most complete vulnerability detection. With Checkmarx Fusion, organizations can: ✔️ Detect vulnerabilities across every language, every codebase, and every stage of the SDLC ✔️ Improve detection by validating and enriching findings across multiple scanning methods ✔️ Scale with an enterprise architecture designed for performance, flexibility, and compliance This isn't just another scanning engine. It's a hybrid approach to vulnerability detection designed for how software is built today. Learn more about Checkmarx Fusion: checkmarx.com/press-releases…
2
5
571
Black Hat is almost here, and the Checkmarx team is gearing up for a full week of conversations, networking, and connecting with the cybersecurity community in Las Vegas. If you're heading to Vegas, don't wait until the expo floor opens to say hello. Here's where you can find us: 📍BSides Las Vegas | August 3–5 We're proud to be an All In Sponsor of BSides Las Vegas. Stop by to meet the team, exchange ideas with fellow security professionals, and join the conversations shaping the future of application security. Find more details here: bsideslv.org/ 🏎️Executive Networking at F1 Arcade | August 4 Join us for an exclusive evening of networking with fellow security leaders at F1 Arcade Las Vegas. Enjoy great conversations, food, drinks, and a little friendly competition. If you're interested, reach out to alison.huggins@checkmarx.com for more information. We'll see you in Las Vegas! 🎲
1
181
Security leaders have a balancing act ahead. How do you embrace AI without introducing new blind spots? How do you help developers ship faster without creating more risk? In this clip, Rossana Hagg and Meg Peddada from AWS, and Frank Emery discuss why the next generation of application security isn't just about adopting AI; it's about making AI, security, and developer productivity work together. Watch the clip below, then catch the full fireside chat to hear more about how organizations are rethinking AppSec for the AI era: checkmarx.com/aws-partner/#b…
1
119
75% of organizations knowingly ship vulnerable code. That's a risk no team can afford. Patient Point took a different approach. With Checkmarx Triage Assist and Remediation Assist, the team was able to: → Prioritize the vulnerabilities that mattered most → Filter out false positives → Generate AI-assisted, merge-ready remediation → Improve developer efficiency with competitive AI token costs AI is accelerating software development. It should accelerate remediation too. Read the full story: checkmarx.com/resources/on-p…
2
181
If you're heading to Black Hat, come spend a little time with us at the Checkmarx Theater in Booth #4553. We've put together a lineup of sessions focused on some of the biggest questions AppSec teams are facing right now: 🎤Two Fronts, One Risk: Securing Yesterday's Debt and Today's AI Code | Why AI has changed the security landscape, and what it takes to tackle both legacy risk and AI-generated code. 🎤Proof, Not Promises: How Checkmarx Drives Security Testing Accuracy With Better Data | A look at why measuring security testing accuracy matters, and how to separate real results from marketing claims. 🎤Getting To High Fidelity | How to cut through the noise, reduce false positives, and help developers focus on the vulnerabilities that actually matter. Whether you're interested in AI, application security, or just want to see what's new, we'd love to see you there. 📍 Booth #4553 🗓️ August 1–6 See the full agenda and book time with our team: checkmarx.com/black-hat/?utm…
1
118
Modern application security requires more than point solutions. We're proud to announce that Checkmarx One for Government has achieved FedRAMP® Moderate Certification and is now listed in the FedRAMP Marketplace. Federal agencies can now access a unified AppSec platform designed to reduce tool sprawl, prioritize the risks that matter most, and secure software development from code to cloud. checkmarx.com/press-releases…
2
150
A recent conversation between Rossana Hagg and Meg Peddada from AWS and Frank Emery explored a reality many security teams are navigating today: the application attack surface isn't just growing—it's becoming more dynamic. As AI, cloud-native architectures, and modern toolchains reshape development, identifying and addressing risk earlier becomes even more critical. Watch the clip below, then catch the full AWS + Checkmarx fireside chat here: checkmarx.com/aws-partner/#b…
2
112
The industry has spent the last two years measuring AI's ability to generate code. It's time to start measuring its ability to generate secure code. New research from Ilya Kabanov via The Weather Report evaluated today's leading AI coding models. The results highlight a growing disconnect: → AI models successfully completed 83–95% of coding tasks. → But only 24–36% of those solutions were both functional and secure. → Even with additional security interventions, the highest secure-and-functional success rate reached just 56%. As AI becomes a core part of software development, success can't be measured by functionality alone. The next generation of AI benchmarks should measure what organizations can safely deploy. Read the full report, Capability Without Security: Measuring the Functionality-Security Gap in AI-Generated Code: checkmarx.com/capability-wit…
1
2
4
126
🎲Who's heading to @BlackHatEvents this year? If Vegas is where people go to test their luck, we're bringing something predictable: high-fidelity application security. Stop by Booth #4553 to see how deterministic precision and AI-powered reasoning come together to help teams prevent risk, uncover what matters, and secure software in the AI era. 📍 Booth #4553 | Business Hall 📅 August 1–6 See you there: checkmarx.com/black-hat/?utm…
3
106
AppSec teams are under constant pressure to reduce risk without becoming a bottleneck for developers. On July 15 at 10 am EDT, we'll showcase Triage Assist and Remediation Assist, two new agentic experiences that help AppSec teams prioritize the highest risk to your organization by delivering your developers actionable, merge-ready fixes. Better findings mean more credibility for your AppSec team and more freedom for your developers to do what they do best: build. Join our free session and bring your questions. checkmarx.com/from-finding-t…
3
106
Shadow AI isn't a future problem; it's already finding its way into software supply chains. Join our practitioner panel on July 9 to discuss AI visibility, governance, AI-BOM, and practical steps to reduce risk. 📅 July 9 | 10:00 AM ET Save your spot: checkmarx.com/shadow-ai-in-t…
2
110
Finding more isn't the goal. Finding what actually matters is.
2
190
Supply chain attacks aren't just becoming more common; they're becoming more convincing. The @CheckmarxZero team's latest research uncovers Operation Navy Ghost, a supply chain attack in which attackers published trojanized forks of the popular pyrogram library to PyPI, giving them remote access to infected systems through Telegram itself. The campaign highlights just how sophisticated open source attacks have become: ➡️ Legitimate-looking package names and documentation ➡️ Hidden backdoors designed to evade detection ➡️ Telegram used for command-and-control and data exfiltration ➡️ A campaign that remained active for more than six months The good news? There are practical steps organizations can take to identify whether they've been affected and strengthen defenses against similar attacks. Read the full research, including IOCs, detection guidance, and defensive recommendations. checkmarx.com/zero-post/oper…
3
230
Software supply chains are no longer made up of just code, packages, and open-source libraries. Today, they're increasingly powered by AI models, agents, datasets, MCP servers, and other AI components that many organizations can't fully see or govern. That creates a new challenge for AppSec teams: you can't secure what you don't know exists. In this blog, Emma Datny explores why AI asset visibility is becoming a foundational part of modern application security, nd what organizations can do to close that gap. checkmarx.com/blog/youre-sec…
3
201
Today, we're introducing Checkmarx AI Inventory, bringing AI-BOM generation and governance to the software supply chain. 70% of teams expect AI components in production by the end of 2026. Yet 43% still lack formal governance over which AI components developers can use. As models, agents, MCP servers, skills, and other AI services become embedded across applications, organizations need visibility into what's running, control over what's allowed, and audit-ready documentation. Checkmarx AI Inventory delivers all three. Learn more: checkmarx.com/press-releases…
2
2
4
160
Excellence in software supply chain security has never mattered more. We're proud to announce that Checkmarx has been named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security. As organizations increasingly rely on open-source software, third-party components, containers, and AI-powered development tools, software supply chain security has become a critical part of modern application security. We believe this recognition reflects our commitment to helping organizations secure their software and AI supply chains through a unified platform that delivers visibility, context, and actionable risk prioritization directly within developer workflows. Thank you to our customers, partners, and teams around the world who continue to push us forward every day. Dive deeper into the report here: checkmarx.com/checkmarx-name…
3
3
146
Everyone wants a definitive playbook for AI security, but the problem is that technology is evolving faster than the playbooks. @ek121268 recently shared his perspective with @ReversingLabs on why uncertainty remains one of the defining characteristics of AI security, and why the organizations that succeed won't be the ones chasing certainty, but the ones continuously testing assumptions and adapting as the landscape evolves: reversinglabs.com/blog/agent…
2
4
123
We're excited to welcome our 2026 Summer Interns to Checkmarx: 👏 Bilal Tulek 👏 Swetha Shivapooja 👏 Yona Karp We can't wait to see what they'll accomplish this summer. Welcome to the team! 🚀
1
102
Everyone's building AI agents; far fewer are thinking about how they'll operate them. The demo is the easy part. Production is where things get complicated: → Context engineering → Evaluation → Governance → Access controls → Prompt injection defenses → Reliability at scale In this new guide, Harshil Parikh explores the engineering iceberg beneath every AI security agent, and why operating one is often much harder than building one. checkmarx.com/blog/building-…
2
1
5
106
For years, AppSec has focused on protecting applications. Now there's a new question: How do you protect the agents building, reviewing, and remediating them? That's one of the conversations we'll be tackling at Agentic AppSec Unleashed 2026 on June 16th. Grab your spot for free: checkmarx.ai/?utm_source=x&u…
1
53
AI-generated code was only the beginning. Now AI is showing up across the whole workflow: writing, reviewing, remediating, and occasionally creating a very impressive Spider-Man pointing situation. The opportunity is huge. So is the need for guardrails. Modern AppSec has to govern how software gets built, not just scan what shows up at the end.
1
76
Live from the @Gartner Security & Risk Management Summit! Come stop by Booth #1030 to meet the Checkmarx team and talk all things AppSec, AI-generated code, risk prioritization, and remediation. And don't miss @ek121268's theater session later today: 🎤When Code Secures Itself: The Rise of Agentic AI in Application Security 📅Today at PM 📍Theater 3 See you out there.
3
2
178
Who is joining the Agentic AppSec Summit this year? We’re thrilled to welcome more industry leaders to unpack what happens when AI accelerates both software development and exploitation, and what security teams need to do about it. You’ll hear from experts like: → Michael Schrank, Former Group CISO, Adidas → Joseph Wilson, CSG → Laurent Donnay, Deutsche Telekom → Anand Singh, Symmetry Systems → Femi Oyesanya, PatientPoint 🚀Get ready for a packed day of exciting conversations, practical insights, and a glimpse at where AppSec is headed next on June 16 at 10:00 am EST. Register for free. checkmarx.ai/?utm_source=x&u…
1
2
91