CxSAST

CxSAST is the static application security testing product from Checkmarx. It scans source code during development to find vulnerabilities, and helps teams decide which to fix first. It can be built into each stage of the software development life cycle, and the vendor says it supports PCI DSS compliance.

What CxSAST offers

• Static code analysis — reads application source code to detect security issues early.
• Development integration — fits into the steps developers already follow.
• Compliance support — assists organisations aiming for PCI DSS.

Who it works with

Checkmarx sells to software and security teams, and works with resellers, managed security providers and other partners.

Key facts

• Wider platform: Checkmarx One adds software composition analysis, supply chain security, API security, dynamic testing, infrastructure-as-code and container scanning
• Certification: SOC 2 Type II, as stated by the vendor