Checkmarx is how the world’s largest enterprises can finally get ahead of application risk without slowing down development.

Worldwide
Joined December 2011
Checkmarx retweeted
Blog: Detecting PHP2Shell and Other PHP Vulnerabilities with ZAP PHP2Shell is the latest big “named” vulnerability. ZAP can now tell you if a site is running a vulnerable version of PHP, and it does so without sending a single extra request. zaproxy.org/blog/2026-10-22-… #php2shell
2
10
1
19
874
Checkmarx retweeted
Concepts Every Developer Should Know: CI/CD Pipelines. A CI/CD pipeline is an automated workflow that manages the building, testing, and release of code through continuous integration (CI) and continuous delivery or deployment (CD). It integrates the various stages of the software development lifecycle (SDLC) into a seamless, repeatable process. These stages include source code management, automated testing, artifact creation, deployment orchestration, and automated security scanning. The goal is simple: catch issues as early as possible, when they're cheaper and easier to fix. But that only works if developers trust the feedback the pipeline provides. If security scanners generate too many false positives, developers begin treating security checks like any other noisy build failure. As more security feedback moves directly into CI/CD, the quality of that feedback becomes just as important as the coverage. That's why scanner fidelity matters. Checkmarx's latest announcement introduces a Hybrid scanning approach that combines AI-driven analysis with traditional deterministic rules to improve the quality of security findings before they reach developers. If you want to understand how security feedback is evolving inside modern CI/CD pipelines, it's worth a read. Learn more here → lucode.co/hybrid-sast-articl… What else would you add? —— ♻️ Repost to help others learn and grow. 🙏 Thanks to @Checkmarx for sponsoring this post. ➕ Follow me ( Nikki Siapno ) + turn on notifications.
5
39
2
187
34,405
Checkmarx retweeted
Nearly half of all production code is now generated by AI. Checkmarx surveyed 2,350 engineers, and the results are concerning: Companies that rely more on AI-generated code ship vulnerabilities at 3.4x the rate of those companies that use AI less for the code. The more AI-generated code you create, the higher the rate of vulnerable code you deploy and the more breaches you suffer. This is not looking good. Here is the funny part: • 96% of devs use tools to flag security problems • 99.6% of them say those tools work And yet only 9% of these companies fix more than 90% of the bugs they find within three months. We have the tools, but we aren't using them. The report gets even better: • 75% of teams say they ship code they know is broken • 30% do it because they know nobody will find out • 95% of security chiefs have been pressured to bury/delay findings People seem to be choosing to look away. There are a ton of other findings, but the bottom line is clear: Security in AI-generated code has become a huge problem. Here is the link to the full report: fandf.co/3S5X60m Thanks to the @Checkmarx team for sharing their report and collaborating with me on this post.
8
8
3
25
6,683
Excited to see the @Checkmarx booth gamifying attendee interactions and those blinky pin badges being part of the experience.
1
1
4
162
Couldn't imagine @AppSec_Village without them, @Checkmarx is back as a Gold Sponsor for 2026! Been doing important work in AppSec for a long time, and we're glad to have them back. Thank you for the continued support! Find out more: checkmarx.com/
1
1
73
Checkmarx retweeted
From Web2 to Web3 → How Enterprise AppSec Is Evolving As enterprises adopt Web3, application security must evolve to address new architectures and threat models. CredShields and @Checkmarx share insights on how AppSec teams can prepare for a hybrid Web2–Web3 future. 🎙️ Speaker: Steve Boone, Director of Product Marketing, Checkmarx Watch the full discussion. youtube.com/watch?v=0fLDe8mo…
19
39
54
2,231
Yay...
Big news from Checkmarx! 🚀 We’re excited to share that we’ve acquired @TromzoSecurity - an AI-native AppSec innovator built to help developers ship faster and safer through intelligent triage and automation. This accelerates a new era of Agentic Application Security, where AI doesn’t just speed up coding, it continuously understands your changes, reasons about risk, and automates what used to slow you down.
1
2
128
"Wait, VSCode extensions can be malicious?" Yep! Two of our @CheckmarxZero team researchers who are focused on this issue walk you through how malicious extensions abuse developer trust, what to watch for, and how we get them taken down. checkmarx.com/zero-post/how-… This work is possible because @Checkmarx is investing in security the software supply chain beyond just open-source libraries and frameworks; developer tools and CI components matter too. #VSCode #MaliciousExtensions #SupplyChainSecurity #Brandjacking #AppSec #OpenSourceSecurity #VisualStudioCode #DevSecOps #SoftwareSecurity #ExtensionSecurity #CheckmarxZero #ThreatResearch #Cybersecurity #DeveloperTools #MarketplaceSecurity
3
1
6
261
This partnership is about to redefine how enterprises think about Web3 security. Proud to see @CredShields join forces with @Checkmarx one of the world’s leading AppSec giants trusted by 1,800+ enterprises. Bringing decentralized security, AI-powered audits, and smart contract protection directly into mainstream AppSec. Huge milestone for us. Announcement 👇 xitter.cf/CredShields/status/199…
1
6
237
Checkmarx retweeted
Couldn’t be prouder of the incredible sponsors backing @AppSec_Village at @defcon 33! Gold: @Checkmarx @FiniteStateInc @smallsteplabs @SymbioticSecAI Silver: @AikidoSecurity @dryrunsec @EndorLabs Bronze: @appknox @char_49 Your support means the world — see you in Vegas!💥
2
3
9
552
Checkmarx retweeted
We received a record-breaking number of CFP submissions for @AppSec_Village at @defcon 33. The review team is fully caffeinated and deep in it, aiming to wrap by the end of the weekend. Thanks for hanging in there. It’ll be worth the wait! #cfp #cfs #defcon #defcon33
2
5
428
Checkmarx retweeted
Secure your GitHub pipeline with Checkmarx + Mobb 🔐 Automatically detect & fix vulnerabilities — without leaving your workflow. 🎥 Watch the 7-min demo: shorturl.at/sa4mq #DevSecOps #GitHub #Checkmarx #AppSec
1
2
110
Most teams have improved DevEx but haven’t reached full DevSecOps maturity. The 2025 DevSecOps Evolution report from @Checkmarx reveals why many organizations are still in transition and what it takes to move forward. Read more: 👉 buff.ly/RDsbRq8 #DevSecOps #Checkmarx
3
2
492