Version 3.18

We are excited to announce a major update to Checkmarx One with our new Container Security solution. This update brings powerful features to enhance your container security efforts.

Key features and capabilities:

For comprehensive details, refer to our documentation portal.

Checkmarx One Cloud Insights provides actionable insights by correlating data across the SDLC and runtime environments. This integration allows developers to focus on the riskiest issues which matter the most to their business.

Combining Checkmarx One scanners with Cloud Insights' runtime data gives organizations visibility and control over their cloud-native applications. This approach enables security and development teams to identify and prioritize vulnerabilities based on runtime exposure, ensuring critical issues are promptly and effectively addressed.

For comprehensive details, refer to our documentation portal.

Enhance actionable insights with our vulnerabilities KPIs. Directly access vulnerabilities details view with one click, speeding up the remediation process, reducing exposure, and bridging the gap between AppSec and development teams.

Explore the new feature and enhance your security operations!

To streamline the support ticket creation process, Checkmarx One now leverages data directly accessible from the user and automate the population of such fields as region, time zone, tenant ID, tenant location, and more. This automation simplifies the ticket creation process, ensuring that essential information is included from the outset.

We have enhanced the results summary statistics on each project's Scan History page. When changing a result’s severity, it will update up to 50 of the latest scans for results with the same Similarity ID. This applies to other projects within the same application if results labels are shared.

Changes for the latest scan and the actual scan modified by the user are done in real-time, while updates for the rest of the scans occur in the background.

We have expanded support for managing integrations with self-hosted code repositories. This will allow for greater flexibility and efficiency in handling diverse codebases, improving productivity and streamlining development workflows.

The license page has been redesigned to provide a modern and user-friendly experience.

The tooltip for an application's criticality level has been updated for clarity. It now explains that the criticality level directly influences the application's overall risk score in Application Risk Management and helps determine the top 10 most critical applications within a tenant.

We now identify packages that are included in the Framework installation. We label these packages as Framework, and enable filtering the results to exclude these packages. This eliminates unnecessary noise, since these packages can't be remediated without updating the version of the overall framework.