JFrog announced a new machine learning (ML) lifecycle integration between JFrog Artifactory and MLflow, an open source software platform originally developed by Databricks.
Checkmarx announced new enhancements to its Software Security Platform to empower more seamless implementation and automation of application security testing (AST) in modern development and DevOps environments.
Available now, Checkmarx Flow (CxFlow) is an orchestration module for the Checkmarx Software Security Platform that tightly integrates with application release orchestration and agile planning tools. This results in improved operational ‘flow’ of secure software development and the delivery of more actionable vulnerability findings.
CxFlow also drives faster adoption by reducing friction between development, DevOps, and DevSecOps, and enabling automated scanning earlier in the code management process by integrating directly into source control management systems or CI/CD tools.
With CxFlow, Checkmarx further advances the automation capabilities of its Software Security Platform, enabling organizations to improve the security of their software without interrupting developer workflows.
Additional CxFlow highlights include:
- End-to-end automation from scanning to ticketing: Leveraging Checkmarx’s unique ability to scan uncompiled code, CxFlow automates the steps required to bring an application into an organization's AST framework. This eliminates the need for time-consuming manual configuration and allows users to publish and update findings based on policy to a defect/backlog management system for application teams to track.
- Seamless integration with the modern development ecosystem: CxFlow effortlessly integrates with application release orchestration and agile planning tools such as GitHub, GitLab, BitBucket, Azure DevOps, and Jira, enabling fully automated scanning of applications and the delivery of consumable results within the DevOps environment.
- Centralized management: CxFlow offers a single location for the configuration and orchestration between the development tool set and the Checkmarx Software Security Platform to drive AST automation. With this, organizations can instantly onboard their development, security, and operations teams and simplify the governance of their security policies and DevSecOps processes.
“The main goal of any application security testing program is to reduce enterprise risk without hindering software release cycles, which is best achieved through thoughtful planning and implementation of security testing automation. However, this often remains an obstacle for today’s organizations,” said Nir Livni, VP of Products, Checkmarx. “With CxFlow, Checkmarx addresses these automation challenges with a best-in-class solution and methodology that supports the ‘you code it, you own it’ philosophy. This allows organizations to detect and remediate software vulnerabilities within fast-paced development environments.”
CxFlow has been implemented successfully with select Checkmarx customers and is generally available today.
Industry News
Copado announced the general availability of Test Copilot, the AI-powered test creation assistant.
SmartBear has added no-code test automation powered by GenAI to its Zephyr Scale, the solution that delivers scalable, performant test management inside Jira.
Opsera announced that two new patents have been issued for its Unified DevOps Platform, now totaling nine patents issued for the cloud-native DevOps Platform.
mabl announced the addition of mobile application testing to its platform.
Spectro Cloud announced the achievement of a new Amazon Web Services (AWS) Competency designation.
GitLab announced the general availability of GitLab Duo Chat.
SmartBear announced a new version of its API design and documentation tool, SwaggerHub, integrating Stoplight’s API open source tools.
Red Hat announced updates to Red Hat Trusted Software Supply Chain.
Tricentis announced the latest update to the company’s AI offerings with the launch of Tricentis Copilot, a suite of solutions leveraging generative AI to enhance productivity throughout the entire testing lifecycle.
CIQ launched fully supported, upstream stable kernels for Rocky Linux via the CIQ Enterprise Linux Platform, providing enhanced performance, hardware compatibility and security.
Redgate launched an enterprise version of its database monitoring tool, providing a range of new features to address the challenges of scale and complexity faced by larger organizations.
Snyk announced the expansion of its current partnership with Google Cloud to advance secure code generated by Google Cloud’s generative-AI-powered collaborator service, Gemini Code Assist.
Kong announced the commercial availability of Kong Konnect Dedicated Cloud Gateways on Amazon Web Services (AWS).
Pegasystems announced the general availability of Pega Infinity ’24.1™.