Checkmarx simplifies AST automation for modern development and DevOps environments

Checkmarx, the global leader in software security solutions for DevOps, announced at the RSA Conference 2020 new enhancements to its market-leading Software Security Platform to empower more seamless implementation and automation of application security testing (AST) in modern development and DevOps environments.

Available now, Checkmarx ‘Flow’ (CxFlow) is an orchestration module for the Checkmarx Software Security Platform that tightly integrates with application release orchestration and agile planning tools. This results in improved operational ‘flow’ of secure software development and the delivery of more actionable vulnerability findings.

CxFlow also drives faster adoption by reducing friction between development, DevOps, and DevSecOps, and enabling automated scanning earlier in the code management process by integrating directly into source control management systems or CI/CD tools. Notably, CxFlow is the only solution from an AST provider that offers end-to-end automation from scanning to ticketing.

According to Gartner, “security and risk management tasked with ensuring application and data security should integrate security and compliance testing seamlessly into DevSecOps, so developers never have to leave their continuous integration or continuous deployment toolchain environments.”

With CxFlow, Checkmarx further advances the automation capabilities of its Software Security Platform, enabling organizations to improve the security of their software without interrupting developer workflows. Additional CxFlow highlights include:

• End-to-end automation from scanning to ticketing: Leveraging Checkmarx’s unique ability to scan uncompiled code, CxFlow automates the steps required to bring an application into an organization’s AST framework. This eliminates the need for time-consuming manual configuration and allows users to publish and update findings based on policy to a defect/backlog management system for application teams to track.
• Seamless integration with the modern development ecosystem: CxFlow effortlessly integrates with application release orchestration and agile planning tools such as GitHub, GitLab, BitBucket, Azure DevOps, and Jira, enabling fully automated scanning of applications and the delivery of consumable results within the DevOps environment.
• Centralized management: CxFlow offers a single location for the configuration and orchestration between the development tool set and the Checkmarx Software Security Platform to drive AST automation. With this, organizations can instantly onboard their development, security, and operations teams and simplify the governance of their security policies and DevSecOps processes.

“The main goal of any application security testing program is to reduce enterprise risk without hindering software release cycles, which is best achieved through thoughtful planning and implementation of security testing automation. However, this often remains an obstacle for today’s organizations,” said Nir Livni, VP of Products, Checkmarx.

“With CxFlow, Checkmarx addresses these automation challenges with a best-in-class solution and methodology that supports the ‘you code it, you own it’ philosophy. This allows organizations to detect and remediate software vulnerabilities within fast-paced development environments.”