Checkmarx
Checkmarx provides application security testing software that scans code for vulnerabilities.
- Categories
- Application security testing, Software supply chain and SBOM, API security, Cloud workload and container security
- Based in
- Tel Aviv, United States
- Founded
- 2006
- Ownership
- Owned by Hellman & Friedman since 2020
- Certifications
- SOC 2 Type II, ISO 27001, FedRAMP
About Checkmarx
Checkmarx provides an application security platform called Checkmarx One. It sells software that scans code, dependencies, containers, APIs and infrastructure for security issues. The platform also covers AI components, including models, agents and MCP servers. It is used by security teams and developers at large enterprises, including many Fortune 500 companies. The company says its tools are built into the places where developers already work, such as IDEs and CI/CD pipelines. Checkmarx One combines several scanning engines with AI agents. It aims to reduce noise by ranking findings based on whether they are reachable and exploitable. The platform offers automated fixes and governance features. Checkmarx also provides services to help organisations adopt and run its application security programme. It holds SOC 2 Type II, ISO 27001 and FedRAMP authorisations.
Products
- Checkmarx OneAn application security platform that unifies scanning, risk prioritisation and remediation across the software development lifecycle.
- Checkmarx FusionA hybrid scanning engine that combines rules-based analysis with AI to improve vulnerability detection.
- Checkmarx ASPMAn application security posture management tool that correlates findings from multiple scanners into a single risk view.
- Checkmarx SBOMA tool that automatically generates and maintains software bills of materials for compliance and supply chain visibility.
- Developer AssistA set of agents that provide security guidance and fixes inside the developer's IDE.
- Triage AssistAn agent that ranks vulnerabilities by attackability to help teams focus on the most important risks.
Ownership and deals
- Checkmarx acquired TromzoReport on Checkmarx buying Tromzo (opens in a new tab)
- Checkmarx acquired DusticoReport on Checkmarx buying Dustico (opens in a new tab)
- Hellman & Friedman acquired Checkmarx for $1.1bnReport on Hellman & Friedman buying Checkmarx (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.