- Checkmarx Documentation
- Checkmarx DAST
- Business Flow Recorder
Business Flow Recorder
Define business flows for your environment by organizing your recordings into sequences. A Business Flow is built from one or more recordings - saved captures of a your navigation through your webapp, exported as .zst files. Recordings are created using the ZAP Recorder extension (download for Chrome or Firefox). You can upload single or multiple recordings, set their order, reuse recordings across flows, and edit or replace them as needed.
If you delete a recording, you will see how many sequences use it, and those sequences will skip that step. During scans, recordings run in the order you set. If a specific recording fails, any recordings that depend on it are skipped, and you receive a clear error with a screenshot so you can fix the issue. See here for using the CLI to set up sequences.
Recordings are a great way to automate repetitive scan setup steps across environments, so you don't have to reconfigure the same navigation flow for every scan.
Setting Up Your Recorded Business Flow
Ensure you have a .zst file then continue below.
On the Environments page, perform the following to setup your recorded business flow for your environment:
At the end of an environment row, select
> Recorded Business Flows. This opens the Business-flows Recordings page.
Upload the designated .zst file in the upload box.

Important
If you don't have a .zst file, click the How to use ZAP Recorder Extension link below the upload box and follow the instructions on using the ZAP Recorder Extension there.
Choose to upload more files, edit the existing uploaded files names and descriptions, or delete the file. Click Add Recording to proceed.

Drag the recording from the bank on the left-side panel into the designated area. This opens the sequence page.

Tip
Click +New on the top-right corner for a dropdown to create a new recording or sequence.

Drag to rearrange the order of the sequences and their recordings. Dragging a recording into a sequence box will add it to the sequence. Click the
on the corner of a sequence to open a dropdown to edit, duplicate, or delete it. Click Save when done.
Any sequences and their recordings are updated and viewable in the config file for the environment. Download and view the config file by clicking
at the end of the environment's row then Settings > General & Config Files > Configuration Files.
![]() |
