Checkmarx, Wiz enhance partnership for app security

Checkmarx has announced a new extended partnership with Wiz, introducing a novel integration that is set to enhance the industry-standard static application security testing (SAST) within the Wiz Cloud Security Platform.

The new partnership announcements marks the first instance of combining these two technologies, aiming to offer improved application security and cloud protection for enterprises.

The collaboration builds on the early successes of the partnership between Checkmarx and Wiz. Initially, the integration focused on enriching application security findings with cloud insights regarding network exposure. This enabled more precise prioritisation of remediation efforts and better-tuned risk scores. Checkmarx has now expanded its efforts by providing SAST scan results at the repository level to the Wiz platform, with plans to extend this to other security engines in the future. This initiative supports a comprehensive security approach that spans the entire spectrum from code to cloud and back.

"We truly believe that code to cloud is a reality and not just a vision," said Ori Bendet, Vice President of Product Management at Checkmarx.

"By utilising a bi-directional integration, we close the gaps on both sides, providing the missing context for application security and development teams as well as the missing actionability for cloud and operations teams," Bendet said. "This will revolutionise how teams approach both application and cloud security."

The integration of Checkmarx SAST, part of Checkmarx One, with the Wiz platform aligns with Wiz's "Shift Left, Shield Right" strategy. This strategy aims to embed application security insights directly into cloud security operations, thereby fostering a more coherent and actionable security posture across the entire software lifecycle. Adding SAST data allows mutual customers to correlate Checkmarx's application security findings with Wiz's cloud security insights. This combined information helps organisations understand and prioritise issues posing significant risks to critical assets, such as sensitive data, thereby enhancing overall cloud security.

Oron Noah, Head of Product Extensibility and Partnerships at Wiz, commented, "This partnership exemplifies our commitment to equipping developers and security teams with comprehensive solutions to streamline vulnerability detection and mitigation from code to cloud.

"Together with Checkmarx, we are helping organisations safeguard their cloud infrastructure and applications with a unified and prioritised view into the cloud vulnerabilities that have the largest impact on their business," Noah said.

The enriched integration between Checkmarx and Wiz reflects a proactive approach to modern enterprise security needs, addressing the evolving challenges of securing dynamic cloud and software assets.