CHECKMARX

CHECKMARX makes Checkmarx One, a platform that helps security and engineering teams find and fix weaknesses in software before it ships. The company is based in Israel and pitches its tools at organisations whose developers increasingly rely on AI assistants to write code.

What CHECKMARX does

• Checkmarx One platform: application security testing that pairs rules-based scanning with AI-driven analysis in one place.
• Checkmarx Fusion: a hybrid scanning engine that combines rules-based precision with frontier AI models to improve detection.
• AI-powered agents: agentic tools that govern risk from code through to runtime as AI speeds up development.
• Supply chain protection: checks that stop malicious open-source packages before they enter a codebase.
• AI asset visibility: tracking of AI models, assets and MCP servers used inside an organisation's software.

Who it works with

Checkmarx says more than 40 per cent of the Fortune 500 use its platform. It also targets teams preparing for rules such as NIS2 and DORA, with the CRA arriving in 2027.

Key facts

• Based in: Israel
• Scale: more than 800 billion lines of code analysed each month, by its own count
• Certification: SOC 2 Type II
• Analyst recognition: a Leader in Gartner's 2026 Magic Quadrant covering software supply chain security, and a Forrester Wave Leader