Checkmarx Introduces Microsoft Visual Studio Team Services Plugin
November 17, 2016

Checkmarx announced a new Checkmarx plugin for the Microsoft Visual Studio Team Services platform.

The new Checkmarx Microsoft Visual Studio Team Services Plugin allows organizations with agile development practices to embed security into their software development lifecycle (SDLC) without the delays traditionally caused by application security testing.

The Checkmarx plug-in for Microsoft Visual Studio Team Services integrates into Visual Studio team’s SDLC, enabling early detection and remediation of crucial security flaws. This allows teams to efficiently fix flaws as part of the CI toolchain, without imposing delays on the DevOps or CI/CD deployment cycle.

Other benefits of using the Checkmarx Static Source Code Analysis include:

- Faster feedback loop - Checkmarx’s unique incremental scan capability means only new or modified code (that hasn't been scanned before) along with the related dependencies will be scanned. This means scan time is reduced from hours to minutes, perfect for organizations using CI/CD.

- Set your risk threshold and automate - Checkmarx allows users to easily set an organization’s security thresholds to an acceptable risk level. Users can then decide if they want to break builds based on whether scans met the thresholds or not.

- Saves precious remediation time: Checkmarx doesn’t leave a long list of vulnerabilities to remediate, but actually goes a step further and uses algorithms to correlate the different findings and identify the best fix locations which can eliminate multiple vulnerabilities with a single fix. This unique capability optimizes the remediation process and cuts down developer hours dedicated to remediation by up to 80 percent.

- Seamless integration: The Checkmarx plugin for Visual Studio Team Services platform is simple to install and configure. Visual Studio users can simply install CxSAST from the Visual Studio marketplace.

“Checkmarx equips CI/CD and DevOps teams with a seamless way to integrate security into their development practices and “push security left” so developers are empowered to deliver secure code without slowing down development” said Moshe Lerner, SVP, Product Strategy and Corporate Development at Checkmarx. “To ensure minimal impact on development cycles, it’s important to work with security testing solutions that can automate your security scans and integrate with your existing IDEs, source repository and build servers, which is what we’ve done with Visual Studio Team Services. We’re excited to be a part of such a vibrant and growing ecosystem.”

Shawn Nandi, Senior Director, Microsoft Corp. said, “Development teams are looking for ways to reduce security risks while also accelerating the DevOps cycle. Checkmarx’s integration with Visual Studio Team Services tackles this problem head-on by scanning your code as part of the pull request in the Continuous Integration flow.”

The Checkmarx Static Source Code Analysis (CxSAST) Microsoft Visual Studio Team Services Plugin has been launched in beta.

Share this

Industry News

October 21, 2021

Splunk announced the latest enhancements to the Splunk observability portfolio including advanced product innovations for Splunk Application Performance Monitoring (APM), Splunk Real User Monitoring (RUM), Splunk Synthetic Monitoring, Splunk Log Observer, Splunk Infrastructure Monitoring and Splunk IT Service Intelligence.

October 21, 2021

Platform9 announced a number of new enterprise features that greatly eliminate operational complexities in managing multi-cluster and multicloud Kubernetes deployments, available in the new release, Platform9 5.4 Release.

October 21, 2021

Graylog is announcing Graylog Security.

Designed to overcome legacy Security Information & Event Management (SIEM) challenges, Graylog’s scalable, flexible cybersecurity platform makes security analysts’ jobs easier and faster. With SIEM, Anomaly Detection, and User Entity Behavior Analytics (UEBA) capabilities, Graylog’s security solution will provide security teams with even greater confidence, productivity, and expertise to mitigate risks caused by Insider Threats, credential-based attacks, and other cyber threats.

October 21, 2021

Prodly announced a Series A investment of $10 million led by Leta Capital.

October 20, 2021

SonarSource added over 5,000 customers in the last 12 months, reaching the 15,000 commercial customers milestone in record time.

October 20, 2021

Actian announced the general availability of its newly released DataConnect 12 integration platform, demonstrating a continued focus on ease of use for complex data integration and data quality.

October 20, 2021

Salt Security announced new capabilities in its next-generation Salt Security API Protection Platform to secure GraphQL APIs.

October 20, 2021

vFunction announces the availability of the vFunction Application Transformation Engine and the expanded vFunction Modernization Platform, with new, advanced capabilities that enable enterprises to automatically assess, analyze, and manage the full modernization and migration process from start to finish.

October 20, 2021

Mage raised a $6.3 million seed round led by Gradient Ventures.

October 19, 2021

Couchbase announced its Couchbase Capella hosted Database-as-a-Service (DBaaS) offering on Amazon Web Services (AWS).

October 19, 2021

Checkmarx announced the launch of the Checkmarx Application Security Platform to help CISOs, AppSec teams, and developers address the growing and dynamic security challenges they face.

October 19, 2021

Tasktop announced Affinity Modeling for model-based integration in Tasktop Hub, helping Agile and DevOps software delivery teams reduce time to market and develop software faster.

October 19, 2021

Morpheus Data is continuing released version 5.3.3 targeted at enterprises trying to manage a complex mix of VMware, Kubernetes, and Public Cloud services.

October 19, 2021

Okta announced the availability of Okta Workflows as a standalone offering for all customers.

October 18, 2021

Red Hat announced a series of updates in its portfolio of developer tools and programs aimed at delivering greater productivity, security and scale for developers building applications on Red Hat OpenShift.