Checkmarx Developer Assist for SAST Accounts
Checkmarx offers the full Developer Assist experience to our SAST on-prem customers. SAST customers can purchase the Developer Assist add-on package to enable their developers to use the Developer Assist plugin in their IDEs.
Notice
This process maintains complete isolation of your source code. Nothing more than basic metadata is ever sent to the cloud for analysis. For more details see below.
Workflow for SAST Accounts
The workflow for SAST customers works as follows:
An admin from your organization is given credentials to log in to the Admin Console where they can manage your Developer Assist account.
The admin generates API keys for activating the Developer Assist plugin and distributes them to the relevant developers.
Notice
A single API key can be used by several developers or separate keys can be generated for each one. Either way, each unique user is counted as a separate "contributing developer" for license usage.
Developers install the Checkmarx plugin in their IDE of choice (VS Code, Windsurf, Cursor, Kiro, or JetBrains) and authenticate using their API Key.
Developers use Developer Assist to get real-time scan results and harness AI for remediating vulnerabilities that arise in their code.
The admin monitors adoption metrics and license usage in the Admin Console.