Skip to main content

Checkmarx One Introduces Hybrid SAST Engine With Finding Analysis Engine

4th article in the last 90 days, one of 6 articles referencing Checkmarx.com. Previous coverage: Checkmarx and Carahsoft Partner to Deliver Prevention-First Approach to Application Security for Government Agencies (Jun 2026).

Companies mentioned

Best suited for

Seniority
EVP / SVP / VP / AVP
Job function
Cybersecurity / Information Security
Persona
Security Operations Leader
Buyer role
Decision Maker / Budget Holder
Decision stage
Which to buy
Adoption curve
Early Adopters
Technology maturity
Market Correction
Industry
Information Technology / Software & Services / IT Services / Data Processing & Outsourced Services

Our classification, not the publisher's statement. Best suited for, not only for.

Checkmarx said it added a new hybrid static application security testing (SAST) scanning engine to the Checkmarx One platform to improve scanning fidelity while reducing false positives. The company linked the change to challenges teams face when scanning at volume and when code includes AI-generated or emerging languages.

The update describes a scenario where rules-based analysis and AI models each leave gaps on their own. Checkmarx said deterministic scanning provides precision for languages it covers, while AI extends coverage to languages outside fixed rules. It added that scanning at volume can surface findings faster than teams can act, creating noise that affects how vulnerabilities get addressed.

Checkmarx said the hybrid engine combines three layers: a deterministic rules-based foundation refined over two decades of AppSec, a purpose-tuned LLM engine that extends detection to any language including AI-generated code and emerging languages, and a Finding Analysis Engine (FAE) that confirms true positives and suppresses false ones before a finding reaches a developer.

In head-to-head testing across seven real production codebases, Checkmarx said the hybrid engine achieved an F1 score of 0.64 and reduced false positives by 60%. “No single approach – rules-based or AI – tells the whole story on its own,” said Sandeep Johri, CEO of Checkmarx. “At today's volumes, that noise is what slows teams down and drives up cost.” “AI has handed developers an unprecedented productivity boost,” said Jonathan Rende, Chief Product Officer at Checkmarx. “What teams need isn't just more findings, it’s confidence and predictability.” The new hybrid scanning engines and Finding Analysis Engine entered early access as part of Checkmarx One.

Press release, provided by Globe Newswire on behalf of Checkmarx.com. Read the original.

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/checkmarx-one-introduces-hybrid-sast-engine-with-finding-analysis-engine/",
        "name": "Checkmarx One Introduces Hybrid SAST Engine With Finding Analysis Engine",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/checkmarx-one-introduces-hybrid-sast-engine-with-finding-analysis-engine/#blogposting",
    "@type": "NewsArticle",
    "about": {
      "@id": "https://decisioninsights.ai/registry/checkmarx/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/checkmarx/",
      "name": "Checkmarx.com"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "EVP / SVP / VP / AVP"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Cybersecurity / Information Security"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Decision Maker / Budget Holder"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Adopters"
      },
      {
        "@type": "Audience",
        "additionalType": "Technology maturity",
        "audienceType": "Market Correction"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Software & Services / IT Services / Data Processing & Outsourced Services"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
      "@type": "Person",
      "name": "Decision Insights Record",
      "url": "https://decisioninsights.ai/author/decision-insights-signals/"
    },
    "dateModified": "2026-08-23T13:26:18-06:00",
    "datePublished": "2026-06-15T08:40:27-06:00",
    "description": "Checkmarx One hybrid SAST engine combines deterministic rules, an LLM layer, and a Finding Analysis Engine; tests showed F1 0.64 and 60% fewer false positives.",
    "headline": "Checkmarx One Introduces Hybrid SAST Engine With Finding Analysis Engine",
    "isBasedOn": {
      "@type": "CreativeWork",
      "sourceOrganization": {
        "@type": "Organization",
        "name": "GlobeNewswire"
      },
      "url": "https://www.globenewswire.com/news-release/2026/06/15/3311711/0/en/Checkmarx-One-Achieves-Industry-s-Highest-Scanning-Fidelity-Outperforming-Both-Legacy-Tools-and-AI-Models.html"
    },
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/checkmarx-one-introduces-hybrid-sast-engine-with-finding-analysis-engine/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/checkmarx/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/checkmarx/",
        "name": "Checkmarx.com"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
    "@type": "Person",
    "description": "Press releases and independent analyst research, structured into concise summaries for research and monitoring. Produced under our Standards & Methodology.",
    "name": "Decision Insights Record",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-signals/"
  }
]

Is this your company? Get structured data for your own pages