Checkmarx

Checkmarx is how the world’s largest enterprises can finally get ahead of application risk without slowing down development.

[Checkmarx @Checkmarx]

🚀Record-breaking growth. Industry recognition. Game-changing innovation.

Checkmarx One surpassed $150M ARR in less than 3 years, now securing the software of 865+ of the world’s largest enterprises.

[Checkmarx @Checkmarx]

Measuring security testing accuracy requires more than a benchmark or a single metric. It requires realistic applications, rigorous validation, and a process you can repeat over and over again as the technology evolves.

@DarrenPMeyer and Antonio Pires from the @CheckmarxZero team share how our research team approaches that challenge and why good data is essential for separating genuine improvements from industry hype. https://t.co/5U7IHUk8Fa

[Checkmarx Zero @CheckmarxZero]

AI doesn't replace established security testing tools, but it can augment them — if you're thoughtful about how you do so. We've been in the lab for months working on generating real data on various approaches that improve overall accuracy (not just reducing FPs, but reducing FNs / increasing coverage too).

There's exciting news coming soon, but meanwhile we thought it might be nice to share how we built our research system to make sure we're making data-driven decisions about results quality. There are already too many vendors building hype and then trying to cherry-pick data to justify it, we don't want to be that.

So we figured out a way to assess scan accuracy that's highly repeatable, reflects real-world applications, and introduces as little error as possible while still being affordable to run. And with that process in place, we're seeing dramatic AI + SAST accuracy improvements in the lab, some of which will be coming to our product soon!

Learn about our approach and what we're seeing in the data: https://t.co/XDZLCamGSF

[Checkmarx @Checkmarx]

For years, AppSec has focused on protecting applications.

Now there's a new question: How do you protect the agents building, reviewing, and remediating them?

That's one of the conversations we'll be tackling at Agentic AppSec Unleashed 2026 on June 16th.

Grab your spot for free: https://t.co/0hKuKn0qib

[Checkmarx @Checkmarx]

For years, vulnerability management has been built around the idea that teams have time to find, prioritize, and fix issues.

But what happens when that timeline keeps getting shorter?

In this month's newsletter, we explore one of the biggest takeaways from our latest Future of Application Security report:

→ 75% of organizations knowingly ship vulnerable code
→ Only 9% fix 90% or more of vulnerabilities within 90 days
→ 81% experienced two or more breaches in the past year

The challenge isn't finding vulnerabilities. It's closing the gap between identifying them and actually fixing them.

Read more: https://t.co/kH7Oy9CkrD

[Checkmarx @Checkmarx]

🚨AI is changing software development faster than security teams can adapt.

The 2026 Future of Application Security Report is here, and our research found that:

⚠️ 95% of CISOs faced pressure to delay or suppress security issues
⚠️ 75% of organizations knowingly ship vulnerable code
⚠️ AI-generated code is widening the gap between dev speed and security readiness

The problem isn't awareness. It's execution.

As AI accelerates development, security teams need more than visibility. They need a way to prioritize what matters, govern AI responsibly, and remediate risk at the speed software is built.

Download the full report here: https://t.co/tgq8Wr1YAQ

[Checkmarx @Checkmarx]

AI-generated code was only the beginning.

Now AI is showing up across the whole workflow: writing, reviewing, remediating, and occasionally creating a very impressive Spider-Man pointing situation.

The opportunity is huge. So is the need for guardrails.

Modern AppSec has to govern how software gets built, not just scan what shows up at the end.

[Checkmarx @Checkmarx]

Security teams aren’t just defending applications anymore.

They’re defending AI-generated code, autonomous workflows, exploding attack surfaces, and release cycles moving at machine speed.

That’s why Agentic AppSec Unleashed ‘26 is bringing together leaders across AppSec, AI, engineering, and security to talk about what happens next, and how teams avoid falling permanently behind.

🚀June 16 | Free Virtual Event
Register today:

https://t.co/0hKuKn0qib

[Checkmarx @Checkmarx]

Live from the @Gartner Security & Risk Management Summit!

Come stop by Booth #1030 to meet the Checkmarx team and talk all things AppSec, AI-generated code, risk prioritization, and remediation.

And don't miss @ek121268's theater session later today:

🎤When Code Secures Itself: The Rise of Agentic AI in Application Security
📅Today at PM
📍Theater 3

See you out there.

[Checkmarx @Checkmarx]

Vulnerability management isn't just about finding issues. It's about getting the right issues to the right people with enough context to take action.

That's one of the themes explored in this recent @ReversingLabs article featuring insights from security leaders across the industry.

@ek121268 shared his perspective on the growing gap between findings and actionability, and what it takes to help teams focus on the issues that matter most.

Read more 👇https://t.co/BAtMtbHxvT

[Checkmarx @Checkmarx]

Who is joining the Agentic AppSec Summit this year?

We’re thrilled to welcome more industry leaders to unpack what happens when AI accelerates both software development and exploitation, and what security teams need to do about it.

You’ll hear from experts like:

→ Michael Schrank, Former Group CISO, Adidas
→ Joseph Wilson, CSG
→ Laurent Donnay, Deutsche Telekom
→ Anand Singh, Symmetry Systems
→ Femi Oyesanya, PatientPoint

🚀Get ready for a packed day of exciting conversations, practical insights, and a glimpse at where AppSec is headed next on June 16 at 10:00 am EST.

Register for free. https://t.co/0hKuKn0Y7J

[Checkmarx @Checkmarx]

The May edition of The Monthly Check Up is here!

AI is speeding up software development and shrinking the window between vulnerability disclosure and exploitation right along with it.

This month we’re covering:
→ Why traditional remediation timelines are breaking down
→ Where AI-powered defense still falls short
→ What modern AppSec programs need to adapt

Read it here: https://t.co/jfJCJvArAa

[Checkmarx @Checkmarx]

National Harbor, we’re coming for you! 👋

The @Gartner_inc Security & Risk Management Summit is almost here, and Checkmarx is bringing the AI AppSec conversation to Booth #1030.

Stop by to see how teams can secure AI-generated code, prioritize the risks that matter, and deliver fixes developers can use in the moment.

@ek121268 will also be taking the stage for a live theater session on agentic AI and what it means for the future of AppSec.

See you there: https://t.co/NlGzT8au19

[Checkmarx @Checkmarx]

The AppSec backlog isn’t just future work anymore.

In the AI era, every unresolved vulnerability is a potential attack surface, and attackers now have tools that can weaponize flaws faster than ever.

Security teams need to fight on two fronts:

→ Remediate yesterday’s debt
→ Prevent today’s AI-generated risks from entering the codebase

In his latest blog, @ek121268 explains why the old severity-based approach is no longer enough.

Read more: https://t.co/QVmEkOhziZ

[Checkmarx @Checkmarx]

The Agentic AppSec Summit lineup is here 💥

On June 16 at 10:00am EST, we’re bringing together leaders across AI, security, DevSecOps, and engineering to explore AgentSecOps, AI-generated code risk, runtime security, AI supply chain visibility, and remediation at AI speed.

You’ll hear from:

→ @andrewzigler, LinearB / DevInterrupted
→ @BSadogursk88555, Tessl
→ @CarolineWMWong, Axari / The AI Cyber Security Handbook
→ Praneetha Goli, Capital One

Register by June 8 to unlock four early-access sessions: https://t.co/0hKuKn0qib

[Checkmarx @Checkmarx]

Speed is great… until it starts shipping risk too.

On June 1, we’re heading to @Gartner_inc Security & Risk Management Summit to talk AI coding, agentic AppSec, and how teams can secure AI-generated code without slowing everything down.

Plus, catch @EranKinsbruner’s live theater session:
“When Code Secures Itself: The Rise of Agentic AI in Application Security”

June 1 | 6:05–6:25 PM | Theater 3 https://t.co/NlGzT8au19
Come find us at Booth #1030 👋

[Checkmarx @Checkmarx]

Finding vulnerabilities isn’t the problem. Fixing them is.

Merito saw teams drowning in findings as dev speed increased. With Checkmarx, they cut through the noise and focused on what matters.

Faster fixes. Fewer repeats. More confidence.

Read the full story here: https://t.co/syI9HWBmyY

[Checkmarx @Checkmarx]

Vibe coding may feel like momentum… until the security hangover hits 😵‍💫

AI coding tools are helping teams ship faster, but faster code introduces risk faster, too.

As AI-generated code enters the codebase at scale, new gaps are emerging around accountability, policy, and automation. We unpack what @Gartner reveals in our latest blog: https://t.co/AyEEAdUzsG

[Checkmarx @Checkmarx]

The countdown is on.

Register by June 8 for the Agentic AppSec Summit and get early access to four sessions ahead of the full virtual event on June 16.

It’s a chance to start exploring the ideas, challenges, and strategies that will define the next chapter of AppSec, before the summit even begins.

Save your spot: https://t.co/zm6Z2hcOQW