Checkmarx Simplifies Automation of Application Security Testing for Modern Development and DevOps Environments

New capabilities enable seamless implementation of AST automation from scanning to ticketing to improve ‘flow’ throughout DevOps pipelines

SAN FRANCISCO--(BUSINESS WIRE)--RSA Conference, Booth #1347--Checkmarx, the global leader in software security solutions for DevOps, today announced new enhancements to its market-leading Software Security Platform to empower more seamless implementation and automation of application security testing (AST) in modern development and DevOps environments.

Available now, Checkmarx ‘Flow’ (CxFlow) is an orchestration module for the Checkmarx Software Security Platform that tightly integrates with application release orchestration and agile planning tools. This results in improved operational ‘flow’ of secure software development and the delivery of more actionable vulnerability findings. CxFlow also drives faster adoption by reducing friction between development, DevOps, and DevSecOps, and enabling automated scanning earlier in the code management process by integrating directly into source control management systems or CI/CD tools. Notably, CxFlow is the only solution from an AST provider that offers end-to-end automation from scanning to ticketing.

According to Gartner, “security and risk management tasked with ensuring application and data security should integrate security and compliance testing seamlessly into DevSecOps, so developers never have to leave their continuous integration or continuous deployment toolchain environments.”¹

With CxFlow, Checkmarx further advances the automation capabilities of its Software Security Platform, enabling organizations to improve the security of their software without interrupting developer workflows. Additional CxFlow highlights include:

• End-to-end automation from scanning to ticketing: Leveraging Checkmarx’s unique ability to scan uncompiled code, CxFlow automates the steps required to bring an application into an organization's AST framework. This eliminates the need for time-consuming manual configuration and allows users to publish and update findings based on policy to a defect/backlog management system for application teams to track.
• Seamless integration with the modern development ecosystem: CxFlow effortlessly integrates with application release orchestration and agile planning tools such as GitHub, GitLab, BitBucket, Azure DevOps, and Jira, enabling fully automated scanning of applications and the delivery of consumable results within the DevOps environment.
• Centralized management: CxFlow offers a single location for the configuration and orchestration between the development tool set and the Checkmarx Software Security Platform to drive AST automation. With this, organizations can instantly onboard their development, security, and operations teams and simplify the governance of their security policies and DevSecOps processes.

“The main goal of any application security testing program is to reduce enterprise risk without hindering software release cycles, which is best achieved through thoughtful planning and implementation of security testing automation. However, this often remains an obstacle for today’s organizations,” said Nir Livni, VP of Products, Checkmarx. “With CxFlow, Checkmarx addresses these automation challenges with a best-in-class solution and methodology that supports the ‘you code it, you own it’ philosophy. This allows organizations to detect and remediate software vulnerabilities within fast-paced development environments.”

Availability
CxFlow has been implemented successfully with select Checkmarx customers and is generally available today.

Checkmarx will demonstrate CxFlow and the latest capabilities of its Software Security Platform during RSA Conference in San Francisco. Learn more here and find us at booth #1347.

For more information and to schedule a demo, contact us.

¹Gartner “12 Things to Get Right for Successful DevSecOps,” Neil MacDonald, Dale Gardner, 19 December 2019

About Checkmarx

Checkmarx is the global leader in software security solutions for modern enterprise software development. Checkmarx delivers the industry’s most comprehensive Software Security Platform that unifies with DevOps and provides static and interactive application security testing, software composition analysis, and developer AppSec awareness and training programs to reduce and remediate risk from software vulnerabilities. Checkmarx is trusted by 42 of the Fortune 100 companies and half of the Fortune 50, including leading organizations such as SAP, Samsung, and Salesforce.com. Learn more at www.checkmarx.com.