Opsera announced that two new patents have been issued for its Unified DevOps Platform, now totaling nine patents issued for the cloud-native DevOps Platform.
Checkmarx announced its new AI Query Builders and AI Guided Remediation to help development and AppSec teams more accurately discover and remediate application vulnerabilities.
The AI-driven features are available within the Checkmarx One™ Application Security Platform, a platform for reducing risk within today’s complex, cloud-native applications. This is the first in a series of planned AI-powered capabilities aimed at helping CISOs, AppSec teams and application developers deliver secure code faster.
AI Query Builder for SAST: One of the strengths of Checkmarx SAST is the flexibility to go wide or deep based on application criticality. Now, powered by AI Query Builder for SAST, developers and AppSec teams can use AI to write custom SAST queries (rules for scanning), fine-tune them, modify existing queries and add new use cases to increase their static coverage, all while reducing false positives by up to 90% and improving the fidelity of developers’ alerts.
AI Query Builder for IaC Security: This new query builder for Checkmarx IaC Security allows developers, cloud engineers and AppSec teams to add new IaC queries (rules) with no prior knowledge needed. Powered by GPT4, AI Query Builder generates queries based on the entry of simple, human-readable text describing the search target. This dramatically reduces query creation time by up to 65%. Queries are built by GPT without sharing any user files or data and can be executed alongside the built-in queries in IaC Security or KICS by Checkmarx (currently in use by over three million developers), making it the first AI query builder available for open source.
AI Guided Remediation:
Providing actionable remediation within integrated development environments (IDEs), AI Guided Remediation helps developers better understand IaC and API misconfigurations without additional resources. Now organizations can address issues in their IaC templates faster, reduce management overhead, boost developer adoption and deliver more secure applications faster.
“Checkmarx innovation is leveraging generative AI to disrupt and transform the way developers secure applications, bringing greater accuracy and guidance directly into the heart of their IDEs and processes,” said Sandeep Johri, CEO at Checkmarx. “We’re proud to push the industry forward with new AI-driven capabilities and to support CISOs and AppSec leaders to better support their development teams, making AppSec more effective and comprehensive as part of cloud and digital transformation.”
Purpose-built for cloud-native application development, Checkmarx One is highly scalable and integrates seamlessly with developers’ tools and IDEs of choice. The platform’s context-sensitive correlation engine, Checkmarx Fusion, along with API Security, Supply Chain Security, Supply Chain Threat Intelligence and comprehensive threat modeling are advanced capabilities in addition to SAST, SCA, DAST, and IaC Security to enable the industry’s most comprehensive and innovative application security approach.
“The voice of our enterprise customers directly influences our technology roadmap,” said Checkmarx Chief R&D Officer Kobi Tzruya. “Understanding their challenges along with the opportunities brought by complementary technologies keeps us focused on the AppSec solutions they’ll need 10 years from now while speeding time-to-delivery today. With these new capabilities in Checkmarx One, we’re accommodating the requirements of both security and development teams within one platform.”
Industry News
mabl announced the addition of mobile application testing to its platform.
Spectro Cloud announced the achievement of a new Amazon Web Services (AWS) Competency designation.
GitLab announced the general availability of GitLab Duo Chat.
SmartBear announced a new version of its API design and documentation tool, SwaggerHub, integrating Stoplight’s API open source tools.
Red Hat announced updates to Red Hat Trusted Software Supply Chain.
Tricentis announced the latest update to the company’s AI offerings with the launch of Tricentis Copilot, a suite of solutions leveraging generative AI to enhance productivity throughout the entire testing lifecycle.
CIQ launched fully supported, upstream stable kernels for Rocky Linux via the CIQ Enterprise Linux Platform, providing enhanced performance, hardware compatibility and security.
Redgate launched an enterprise version of its database monitoring tool, providing a range of new features to address the challenges of scale and complexity faced by larger organizations.
Snyk announced the expansion of its current partnership with Google Cloud to advance secure code generated by Google Cloud’s generative-AI-powered collaborator service, Gemini Code Assist.
Kong announced the commercial availability of Kong Konnect Dedicated Cloud Gateways on Amazon Web Services (AWS).
Pegasystems announced the general availability of Pega Infinity ’24.1™.
Sylabs announces the launch of a new certification focusing on the Singularity container platform.
OpenText™ announced Cloud Editions (CE) 24.2, including OpenText DevOps Cloud and OpenText™ DevOps Aviator.
Postman announced its acquisition of Orbit, the community growth platform for developer companies.