Context-aware Checkmarx Fusion features cross-component prioritisation of application vulnerabilities

Checkmarx, the global leader in developer-centric application security testing (AST) solutions, has announced the availability of Checkmarx Fusion, a context-aware correlation engine that provides a holistic view of application security scan results across all stages of the software lifecycle to correlate and prioritise vulnerabilities, thereby guiding remediation of the most critical issues first.

“Development teams test tens of millions of lines of code monthly. With the complexity of modern applications – which include source code, open source code, infrastructure-as-code (IaC), containers, and more – developers and their AppSec leaders have a critical need for visibility into how application components interact,” said Checkmarx Chief Product Officer Razi Sharir.

“Working closely with our customers worldwide, we know that developers and AppSec teams need a holistic view of the context and prioritisation of application vulnerabilities that are lacking in AST and ASOC (application security orchestration and correlation) solutions. Checkmarx Fusion unifies, prioritises, and streamlines AppSec vulnerability remediation thereby increasing developer efficiency and organisational agility.”

Teams can now “shift left”* and bring comprehensive AppSec testing and remediation into the development cycle from creation of the first line of code to the last, the company said. Unlike ASOC solutions, Checkmarx Fusion offers multi-engine-scan correlation and context-based risk prioritisation of scan results across engines. Checkmarx Fusion, which is part of the Checkmarx One AST platform, empowers developers and AppSec teams with:

Visibility: Provides threat modelling by mapping threats in a visual, intuitive graph containing all software elements, consumed cloud resources, and relationships between them. Checkmarx Fusion extrapolates potential vulnerabilities within two or more scans that might otherwise escape detection.

Correlation: Adds context to the silo scanners by combining and correlating results from static code scans and runtime scans, effectively eliminating false positives

Prioritisation: Focuses developers and AppSec teams on solving the most critical issues by prioritising vulnerabilities based on their real impact and risk.

Cloud-nativeness: Leverages cloud-native architecture including microservices, cloud resources, containers, and APIs while correlating insights from pre-deployment to runtime

Melinda-Carol Ballou, Research Director for IDC's Application Life-Cycle Management (ALM) programme**, “The breadth of capabilities in Checkmarx's portfolio, which spans SAST, SCA, IAST, and IaC security***, delivered in a unified platform is an advantage in the highly competitive DevSecOps market space. The platform's developer focus, along with DevOps toolchain integrations and contextualised training, can increase developer performance and lighten the load of security testing, permitting the rapid delivery of more secure applications.”

*Editor's note: 'Shifting left' refers to locating problems earlier in the process of software delivery.

**IDC, IDC MarketScape: Worldwide Application Security Testing, Code Analytics, and Software Composition Analysis 2022 Vendor Assessment, by Melinda-Carol Ballou, March 2022.

**SAST: static application security testing; SCA: software composition analysis; IAST: interactive application security testing.

Comments

Post a Comment

Popular posts from this blog

Fortinet enhances FortiRecon to align with CTEM framework

Fortinet, the global cybersecurity provider driving the convergence of networking and security, has turned the FortiRecon platform into a comprehensive solution aligned with the continuous threat exposure management (CTEM) framework. The latest release introduces expanded internal attack surface monitoring, adversary-centric dark web intelligence, and security orchestration, all in a unified platform. These enhancements help organisations proactively identify and prioritise real-world exposures, validate risks like an attacker would, and accelerate response. “CISOs and security teams are overwhelmed by growing attack surfaces and an endless stream of unprioritised alerts,” said Nirav Shah, Senior VP of Products and Solutions at Fortinet. “With the latest enhancements to FortiRecon , we’re giving organisations an attacker’s eye view of their internal and external exposures, backed by AI-powered threat intelligence from FortiGuard Labs, real-world validation, and automated response...
Read more

SentinelOne recognised as a 2025 Gartner Peer Insights Customers’ Choice for XDR

SentinelOne, a global provider of AI-powered security, has been named a Customers’ Choice in the 2025 Gartner Peer Insights ‘Voice of the Customer’ for Extended Detection and Response (XDR) report* – one of only two companies with this distinction. A hundred and forty-four users reviewed SentinelOne's Singularity Platform, and 97% said they would recommend the solution to respond to threats across endpoints with AI-powered security, while 97% rated the solution four stars or better.** “With the growing complexity of cyberthreats, organisations need more than siloed security—they need AI-powered, autonomous protection that delivers real-time detection and response across their entire attack surface. Customers have made it clear that SentinelOne’s XDR provides the intelligence, automation, and efficiency they need to stay ahead of threats and secure their environments with confidence,” said Ely Kahn, VP, Product Management, SentinelOne. Gartner defines extended detection and ...
Read more

AWS: AI adoption grows 20% in Singapore

Image
Amazon Web Services (AWS), an Amazon.com company, has found* that AI adoption continues to accelerate in Singapore. In the past year alone, 27,000 1 Singapore businesses adopted AI for the first time—equivalent to over three new adopters every hour. In sum, nearly 170,000 (48%) of businesses in Singapore have adopted AI 2 , up from approximately 143,000 (40%) a year ago. This represents a 20% year-over-year growth rate, AWS said. AI adoption is the strongest in the financial services industry (71%), followed by the technology sector ( software developers, data analytics firms, cloud service providers, and digital startups) at 70%, and healthcare at 63%. Among Singapore’s businesses that have adopted AI, 82% reported an increase in revenue, at an average increase of 19%, while 90% report significant productivity improvements. A large majority (85%) of those who have adopted AI say the technology is likely to increase their growth in the next year, and 89% expect an average of 17%...
Read more