Checkmarx

Checkmarx — Technical Overview

Checkmarx is an enterprise-grade, agentic application security platform powered by Anthropic's AI models. It delivers hybrid scanning that combines deterministic, rules-based analysis with AI-driven intelligence to maximize true-positive rates — achieving an 11% higher true-positive rate and a 2.5x higher F1 score than average SAST tools.

Core capabilities:

• Hybrid SAST engine — rules-based precision layered with Anthropic-powered AI for high-fidelity vulnerability detection across 800B+ lines of code analyzed monthly
• AI Security Agents — Developer Assist and Triage & Remediation Assist agents automate vulnerability triage, prioritization, and fix suggestions within developer workflows
• AI Supply Chain Security — AI Bill of Materials (AI-BOM), LLM scanning, and MCP scanning to secure AI-native application components
• ASPM (Application Security Posture Management) — unified risk intelligence aggregating findings across every attack surface into a single pane of glass
• MCP Server integration — native support for the Model Context Protocol, enabling AI-agent-aware security workflows

Deployment & integration:

• Self-hostable for on-prem or private cloud environments
• REST API available for programmatic access and pipeline automation
• Integrations: IDE plugins, CI/CD pipelines, Git repositories, PR (pull request) checks, and MCP Server
• Four pricing tiers (Essentials, Professional, Enterprise, Start with SAST); all require a custom quote