What it does
Checkmarx One is described on the site as an application security platform for securing each stage of software development. It combines scanners for code security (SAST, secrets detection, IaC security, API security) with supply chain security (SCA, malicious package protection, container security, repository health) and DAST for running applications. AI features include a family of Assist agents: Developer Assist for prevention in the IDE, Triage Assist for ranking findings by how attackable they are, and Remediation Assist for merge-ready fixes. A Checkmarx MCP server gives agents access to the platform. Checkmarx Fusion is a hybrid scanning engine that pairs rules-based analysis with Anthropic's frontier AI. For AI-built software, the platform lists AI supply chain security: an AI inventory (AI-BOM), LLM scanning and DAST for AI, with MCP scanning marked coming soon. An ASPM layer brings findings together with policy management, analytics and reporting. Prices are not shown on the home page, which offers a demo request and links to a pricing and packages page.
Capabilities
- SAST, secrets detection, IaC and API security scanning
- Dependency, malicious package and container checks
- AI agents for in-IDE prevention, triage and remediation
- Checkmarx Fusion hybrid engine combining rules and AI
- AI-BOM, LLM scanning and DAST for AI
- MCP server for agent and platform access
When to use it
- Securing code across the IDE, pull requests and CI/CD in a large engineering organization
- Ranking and fixing a large backlog of security findings
- Inventorying models, MCP servers and other AI components in your software
- Governing security risk from AI-generated code
