Checkmarx CxSCA leverages source code analysis and automation to identify and remediate vulnerabilities in open source software. The solution provides open-source license management, known vulnerability detection, safe version recommendations, and container scanning capabilities. It includes supply chain security support, distinguishes between malicious packages and known vulnerabilities, and accelerates remediation by prioritizing high-risk issues. The platform integrates with common development tools like GitHub, GitLab, and BitBucket, and features a proprietary scanning engine for detecting component versions and dependencies. It optimizes remediation by identifying vulnerabilities in the application's execution path and provides coverage beyond the National Vulnerability Database, with instant alerts for new threats.
