Checkmarx Introduces Microsoft Visual Studio Team Services Plugin
November 17, 2016

Checkmarx announced a new Checkmarx plugin for the Microsoft Visual Studio Team Services platform.

The new Checkmarx Microsoft Visual Studio Team Services Plugin allows organizations with agile development practices to embed security into their software development lifecycle (SDLC) without the delays traditionally caused by application security testing.

The Checkmarx plug-in for Microsoft Visual Studio Team Services integrates into Visual Studio team’s SDLC, enabling early detection and remediation of crucial security flaws. This allows teams to efficiently fix flaws as part of the CI toolchain, without imposing delays on the DevOps or CI/CD deployment cycle.

Other benefits of using the Checkmarx Static Source Code Analysis include:

- Faster feedback loop - Checkmarx’s unique incremental scan capability means only new or modified code (that hasn't been scanned before) along with the related dependencies will be scanned. This means scan time is reduced from hours to minutes, perfect for organizations using CI/CD.

- Set your risk threshold and automate - Checkmarx allows users to easily set an organization’s security thresholds to an acceptable risk level. Users can then decide if they want to break builds based on whether scans met the thresholds or not.

- Saves precious remediation time: Checkmarx doesn’t leave a long list of vulnerabilities to remediate, but actually goes a step further and uses algorithms to correlate the different findings and identify the best fix locations which can eliminate multiple vulnerabilities with a single fix. This unique capability optimizes the remediation process and cuts down developer hours dedicated to remediation by up to 80 percent.

- Seamless integration: The Checkmarx plugin for Visual Studio Team Services platform is simple to install and configure. Visual Studio users can simply install CxSAST from the Visual Studio marketplace.

“Checkmarx equips CI/CD and DevOps teams with a seamless way to integrate security into their development practices and “push security left” so developers are empowered to deliver secure code without slowing down development” said Moshe Lerner, SVP, Product Strategy and Corporate Development at Checkmarx. “To ensure minimal impact on development cycles, it’s important to work with security testing solutions that can automate your security scans and integrate with your existing IDEs, source repository and build servers, which is what we’ve done with Visual Studio Team Services. We’re excited to be a part of such a vibrant and growing ecosystem.”

Shawn Nandi, Senior Director, Microsoft Corp. said, “Development teams are looking for ways to reduce security risks while also accelerating the DevOps cycle. Checkmarx’s integration with Visual Studio Team Services tackles this problem head-on by scanning your code as part of the pull request in the Continuous Integration flow.”

The Checkmarx Static Source Code Analysis (CxSAST) Microsoft Visual Studio Team Services Plugin has been launched in beta.

Share this

Industry News

September 21, 2023

Red Hat and Oracle announced the expansion of their alliance to offer customers a greater choice in deploying applications on Oracle Cloud Infrastructure (OCI). As part of the expanded collaboration, Red Hat OpenShift, the industry’s leading hybrid cloud application platform powered by Kubernetes for architecting, building, and deploying cloud-native applications, will be supported and certified to run on OCI.

September 21, 2023

Harness announced the availability of Gitness™, a freely available, fully open source Git platform that brings a new era of collaboration, speed, security, and intelligence to software development.

September 20, 2023

Oracle announced new application development capabilities to enable developers to rapidly build and deploy applications on Oracle Cloud Infrastructure (OCI).

September 20, 2023

Sonar announced zero-configuration, automatic analysis for programming languages C and C++ within SonarCloud.

September 20, 2023

DataStax announced a new JSON API for Astra DB – the database-as-a-service built on the open source Apache Cassandra® – delivering on one of the most highly requested user features, and providing a seamless experience for Javascript developers building AI applications.

September 19, 2023

Oracle announced the availability of Java 21.

September 19, 2023

Mirantis launched Lens AppIQ, available directly in Lens Desktop and as (Software as a Service) SaaS.

September 19, 2023

Buildkite announced the company has entered into a definitive agreement to acquire Packagecloud, a cloud-based software package management platform, in an all stock deal.

September 19, 2023

CrowdStrike has agreed to acquire Bionic, a provider of Application Security Posture Management (ASPM).

September 18, 2023

Perforce Software announces BlazeMeter's Test Data Pro, the latest addition to its continuous testing platform.

September 18, 2023

CloudBees announced a new cloud native DevSecOps platform that places platform engineers and developer experience front and center.

September 18, 2023

Akuity announced a new open source tool, Kargo, to implement change promotions across many application life cycle stages using GitOps principles.

September 14, 2023

CloudBees announced significant performance and scalability breakthroughs for Jenkins® with new updates to its CloudBees Continuous Integration (CI) software.