Checkmarx has introduced self-healing application security, autonomous agents that detect, fix, and verify vulnerabilities as developers code.
“Security teams have spent a decade trying to keep pace with how fast code gets written, and AI just moved that goalpost again,” said Harshil Parikh, VP of Product Management at Checkmarx. “The only way to close that gap is to stop treating detection and remediation as separate steps handled by separate tools and let the system fix what it finds.”
Self-healing application security
Checkmarx’s Developer Assist now operates a continuous find-and-fix cycle directly within AI coding tools through hooks, enabling vulnerabilities to be caught and fixed as code is written with up to 70% less manual effort.
Once code reaches the backlog, Triage and Remediation agents autonomously prioritise what’s already in the codebase and generate merge-ready fixes, cutting manual triage and accelerating developer productivity.
“The goal is prevention – creating a continuous flow of clean code from the start and autonomous fixes before code reaches production,” said Jonathan Rende, chief product officer at Checkmarx. “With autonomous remediation, fixes are applied while developers are still writing code, before it’s ever checked in, and what’s in the pipeline gets prioritised and expedited without having to think about it.”
“Triage and Remediation Assist agents identified false positives and gave our developers the chance to review before merging; that’s exactly what we wanted,” said Femi Oyesanya, application security engineer at PatientPoint. “Our priority is to protect patient data, and this lets us do that without slowing developer productivity or driving up token costs.”
Developer Assist’s autonomous mode, along with Triage Assist and Remediation Assist, are generally available now with Checkmarx One.
