Checkmarx is how the world’s largest enterprises can finally get ahead of application risk without slowing down development.
Worldwide
- Tweets 16,759
- Following 2,872
- Followers 7,320
- Likes 7,348
Pinned Tweet
Nearly half of all production code is now AI-generated.
Traditional scanning wasn't built for today's pace, growing codebases, or the increasing complexity of modern applications. Organizations need the consistency of deterministic scanning alongside the flexibility of AI-powered analysis.
Today, we're introducing Checkmarx Fusion, a new hybrid scanning architecture that combines Checkmarx's trusted AppSec engines and proprietary security context with frontier AI reasoning from Anthropic to deliver the industry's most complete vulnerability detection.
With Checkmarx Fusion, organizations can:
✔️ Detect vulnerabilities across every language, every codebase, and every stage of the SDLC
✔️ Improve detection by validating and enriching findings across multiple scanning methods
✔️ Scale with an enterprise architecture designed for performance, flexibility, and compliance
This isn't just another scanning engine. It's a hybrid approach to vulnerability detection designed for how software is built today.
Learn more about Checkmarx Fusion: checkmarx.com/press-releases…
2
5
571
It's been a busy week for security teams, and our @CheckmarxZero researchers have been keeping up with it all. 🔎
From critical vulnerabilities in PHP and Node.js to compromised certificate authority keys, there's a lot to unpack. Here's what our team has been digging into:
1
159
🔹AI-powered attacks vs. reality: Are attackers really using AI to launch entirely new types of attacks? Our latest analysis looks at what Mandiant, Verizon, and Microsoft breach data actually shows.
🔗checkmarx.com/zero-post/fear…
1
43
Checkmarx retweeted
Blog: Detecting PHP2Shell and Other PHP Vulnerabilities with ZAP
PHP2Shell is the latest big “named” vulnerability. ZAP can now tell you if a site is running a vulnerable version of PHP, and it does so without sending a single extra request.
zaproxy.org/blog/2026-10-22-…
#php2shell
2
10
19
925
Hundreds of critical and high vulnerabilities closed. MTTR cut by 3x.
See how a global fintech used Checkmarx One to bring security directly into developers' workflows, improve risk visibility, and make remediation faster without slowing development.
Read the customer story: checkmarx.com/resources/the-…
92
The best conversations at a conference often start after the sessions end.
Heading to the FS-ISAC Americas Fall Summit in Austin? Join Checkmarx on Tuesday, October 27, for a small-group evening that picks up where the summit program leaves off: a guided tasting of premium tequila and mezcal, paired with candid conversation among fellow financial-services security leaders.
Exclusive peer exchange: bring what you’ve heard in the sessions and compare notes on what it means for your program.
Request your spot: luma.com/lbs0niue?utm_campai…
1
153
Backlog zero takes more than fixing vulnerabilities one-by-one.
Join us as we explore how teams can prevent risk earlier, prioritize what matters, and accelerate remediation with AI-powered AppSec.
Choose the session that works for your time zone:
🌎 Oct 29 | 8:30 AM PT / 11:30 AM ET - info.checkmarx.com/ams-backl…
🌍 Oct 28 | 2:30 PM CET - info.checkmarx.com/ams-backl…
🌏 Oct 29 | 3 PM SGT - info.checkmarx.com/ams-backl…
91
What role should MSPs play in securing AI-generated code?
Our VP of Americas Channels, Jonathan Kozimor, joined In The Channel to explore that question, from the growing demand for AppSec expertise to new opportunities for partners to deliver security as a managed service.
🎙️Catch the conversation: channelbuzz.ca/2026/10/as-ai…
92
Big congratulations to our new Director of Communications, Amanda Steinman! 🎉
Amanda was recently named a 2026 PRNEWS People of the Year honoree in the Nonprofit PR Innovators category for her work at ISC2, where she helped nearly double media coverage and supported 140%+ membership growth.
She's in great company among this year's honorees, and we're thrilled to have her on the Checkmarx team. Well deserved, Amanda! 👏
3
432
AppSec just got a new place to show up.
Checkmarx is now available in @AnthropicAI's Claude Marketplace in the United States, bringing application security intelligence directly into Claude-powered development workflows.
As developers build more with AI, security can be right there with them.
Read our announcement: checkmarx.com/press-releases…
Explore Checkmarx on the Claude Marketplace: claude.com/marketplace/agent…
4
141
More vulnerabilities found. Fewer “is this thing actually real?” conversations. We like that math.
Checkmarx Fusion combines deterministic analysis with frontier AI for broader coverage, fewer false positives, and findings your team can trust.
Watch Fusion do its thing. 👇
1
117
Want to see what Fusion can find in your code? Learn more or schedule a demo: checkmarx.com/platform/check…
42
How well do you know the state of cybersecurity in 2026? 👀
We're putting your knowledge to the test for Cybersecurity Awareness Month with a little myth-busting challenge.
Some of the findings from our 2026 Future of Application Security Report might surprise you, especially when it comes to how often organizations ship vulnerable code and just how much AI-generated code is making its way into production.
Think you know which statements are fact and which are fiction? Swipe through to find out.
1
146
Dig into the full report for more insights into what's really happening in AppSec: checkmarx.com/foa-report/?ut…
32
Two cities down, two more coming next week. ✈️
Checkmate: The Tour is heading across the Atlantic!
We're bringing security and engineering leaders together to talk about securing software in the frontier AI era, with expert perspectives, live demos, and candid conversations.
📍London | Oct 13
📍Paris | Oct 15
Catch the highlights from NYC and Boston, then join us for the next stops: partner-program.net/checkmat…
2
165
New newsletter alert. 👀 Welcome to Inside the AI-DLC.
AI is taking on more of the development lifecycle. AI-DLC is where developers get practical guidance for building secure software in an AI-driven world.
First up: We’re discussing OpenAI’s Dots, agent-generated fixes, and why a “fixed” vulnerability still needs security scanning, testing, and human review.
Read the first edition and subscribe to follow along: linkedin.com/pulse/can-dots-…
2
4
177