Checkmarx

Checkmarx is a privately held company with dual headquarters in Ramat Gan, Israel, and a US presence including offices in Paramus, New Jersey. It maintains a significant global commercial footprint with dedicated offices in London, Paris, Singapore, Mumbai, Pune, and Braga, Portugal, to support regional sales, support, and partnerships according to its corporate website.

Checkmarx One combines its core SAST engine with SCA, secrets detection, IaC scanning, and an Application Security Posture Management (ASPM) layer. The ASPM correlates findings across these engines to surface what is exploitable, prioritizing risk. This unified data model feeds its 'Assist' AI agents, which provide remediation guidance directly in the developer's IDE, aiming to reduce the tool sprawl common in enterprise AppSec programs.

Alongside its software-as-a-service platform, Checkmarx operates a services arm. Its website details offerings such as 'Premium Support,' 'Premium Services,' maturity assessments, and program onboarding. The company states these services provide human expertise for program design, policy setup, and remediation coaching, making it a combined product and services organization for application security.

Checkmarx has positioned itself around the use of agentic AI in security and the risks of AI-generated code. It markets 'AI-Generated Code Analysis' and 'AI Supply Chain Governance' as part of its platform. The firm also publishes research, such as 'The Velocity Trap,' analyzing the security and speed balance in the Generative AI era, and directly addresses securing development using AI coding tools in its marketing materials.

In 2025, Checkmarx was positioned as a Leader in the Gartner Magic Quadrant for Application Security Testing. It was also named in the IDC MarketScape for ASPM and the Forrester Wave for SAST in the same year, as promoted on its site. These placements reflect recognition of its unified platform approach and market traction among large enterprise buyers.