Version 3.47 | November 2, 2025

The Legacy API endpoint /api/presets (SAST Queries Audit Presets) will be deprecated on December 31, 2025.

Please transition to the new API endpoint /api/preset-manager (Preset Manager), which provides improved functionality and enhanced management of SAST presets.

The Analytics page has been enhanced to incorporate data from DAST, allowing you to view your organization's security posture across all environments.

By combining DAST insights with other analytics, you can identify, assess, and prioritize risks more effectively.

Advanced filtering and customization help you focus on high-risk findings or compliance-sensitive areas for sharper, actionable analysis.

The new Regenerate feature lets users quickly restore disconnected CxLinks without changing the link alias. Instead of manually recreating links and updating projects, users can regenerate the connection in one step.

The CxLink Client Metadata feature improves observability and simplifies troubleshooting for customers and support teams. Tenant and Link client information - such as client type, version, and URL - is now visible in the UI through tooltips when hovering over the status column.

This enhancement helps customers quickly identify and resolve connection issues, reduces dependency on support for diagnosis, and provides clearer insight into link configuration for more reliable connection management.

The Drill Down from Fix Vulnerabilities feature adds interactivity to the Vulnerabilities charts, allowing users to click directly from the dashboard to view detailed fixable vulnerabilities aligned with the selected KPI.

Users can refine results with Severity and State filters, group vulnerabilities dynamically by KPI (e.g., Severity or Status), and view essential details such as Application, Project, Branch, Scanner, Time to Fix, and Date of Fix. Data updates instantly without page reloads and can be exported to CSV, preserving all applied filters.

This enhancement provides a faster, more intuitive way to explore and act on vulnerabilities, improving visibility and accelerating remediation. The first release focuses on the “Vulnerabilities by Severity” KPI.

The Filter by Group enhancement adds a new filtering option to the Analytics page, allowing users to refine data by Group directly from the More Filters list.

Tags and Groups are now consolidated into a single filtering level, providing a unified experience. The Tag filter has also been updated to match the same checkbox + select component, ensuring consistent and intuitive UI/UX across all filter options.

This update streamlines data exploration and improves usability for users managing multiple groups or tag-based configurations.

The Checkmarx One SAST Importer now supports migrating custom states and corresponding custom permissions from on-premises Checkmarx SAST to Checkmarx One.

During the migration process, all custom states and their associated permissions are automatically extracted from Checkmarx SAST and ingested into Checkmarx One per tenant, ensuring full feature parity between the two environments.

We added a new “status” policy condition for the SCA scanner. This enables setting status (New or Recurrent) as a condition in a complex SCA scanner policy. For example, you can now create a policy that is triggered by new SCA vulnerabilities, but filters out dev and test dependencies.

Added a bulk action for changing the state (Monitored, Muted, Snoozed) and adding comments for multiple packages at once. This is done by selecting the checkbox next to each of the relevant packages and then making the change.

The Global Inventory screen has been redesigned to deliver a faster, more intuitive experience aligned with the Checkmarx One design system. Key enhancements include:

These updates provide a clearer, more efficient view of your organization’s inventory and risks.

We have dramatically revamped how licenses are represented in SCA scan reports. This change applies to SCA Scan Reports generated via the web application (UI) or Export Service (REST) APIs.The following are some of the key improvements: