Checkmarx One is a commercial platform, so there is no permanently free tier. Checkmarx Developer Assist is available as a one-month free trial, so you can evaluate it on your own code before any commercial conversation.

What is Checkmarx Developer Assist?

Checkmarx Developer Assist is an IDE-native security assistant that helps developers identify and fix security issues as they write code. It scans code in real time, including AI-generated code, and provides actionable guidance directly in the IDE, without waiting for CI/CD or external scans.

How does Checkmarx Developer Assist work inside my IDE?

Developer Assist runs directly within your IDE and analyzes code as it’s written, modified, or refactored. When a potential issue is detected, it surfaces inline feedback with context on why it matters and how to fix it, so you can address problems immediately without switching tools or breaking flow.

Will Checkmarx Developer Assist slow down my development workflow?

No. Developer Assist is designed to be lightweight and unobtrusive. It provides fast, incremental analysis and only surfaces relevant findings, so developers get meaningful feedback without excessive noise or performance impact.

Does Checkmarx Developer Assist help me fix issues, or just flag them?

Developer Assist goes beyond detection. It provides pre and post-commit remediation and safe refactoring suggestions to help you resolve issues without introducing breaking changes. The goal is to fix problems early, confidently, and correctly, before they ever reach a commit or pipeline.

What types of security issues does Checkmarx Developer Assist detect?

Developer Assist identifies security issues across multiple domains, including application security vulnerabilities detected through SAST, risks introduced by open source and malicious packages, exposed secrets and credentials, Infrastructure as Code (IaC) misconfigurations, and container-related security issues. This analysis applies to both human-written code and AI-generated code, ensuring consistent protection regardless of how the code is created.

What do I need to get started with Checkmarx Developer Assist?

To get started, you need a supported IDE with an existing AI coding assistant enabled, such as GitHub Copilot in VS Code or native agents in Cursor, Windsurf, or AWS Kiro. For AI-powered remediation, Developer Assist connects to Checkmarx remediation intelligence through the Model Context Protocol (MCP). MCP setup is simple and takes only a single configuration step. Once connected, your IDE gains secure access to Checkmarx AppSec knowledge for real-time guidance and verified fixes, without changing your workflow.

What information is shared with Checkmarx or AI models when I use Checkmarx Developer Assist?

Developer Assist is designed to minimize data sharing and keep source code inside your environment. Source code, secrets, and proprietary application data never leave the IDE. Only limited metadata, such as package name, package version, package manager, and vulnerability identifiers, are transmitted to Checkmarx services when enrichment or remediation data is required. AI-generated code changes are created locally by your IDE’s existing AI assistant, and all recommendations are reviewable, optional, and auditable. Checkmarx does not train AI models on customer data, and any optional fallback AI usage is restricted to open-source package metadata only.

Free Trial

Create Your Free Account

We’ll email your Activation Key. Business email required so we can provision it.

Thanks – Your Developer Assist Trial Is Being Prepared

We’ve received your request and are generating your personal Activation Key.

What Happens Next: 1. Your Activation Key arrives by email, tied to the address you signed up with. 2. Install the Developer Assist plugin for your environment – VS Code, Cursor, Windsurf, JetBrains, Kiro, Visual Studio, Claude Code or GitHub Copilot. 3. Enter your key in the plugin and open a repository.

Get Started Free: Checkmarx Developer Assist

One month of full access to the Developer Assist agent, running inside the IDE you already use.
No committments, nothing to install before you sign up.

Every capability, nothing gated

Detection, fix, safe refactor and verification. The trial is the full agent, not a limited evaluation build.

Every editor your team already uses

Plugins for VS Code, Cursor, Windsurf, JetBrains, Kiro and Visual Studio, plus Claude Code and GitHub Copilot

One month, one seat, no committment

Thirty days of full access. Nothing to pay, no automatic charge, and no procurement conversation to start.

Running in minutes, not days

Activation Key by email, a plugin from your IDE’s marketplace, and findings on the next file you open.

Extend security into IDEs, Coding Agents, CLI, terminal, and MCP-connected tools

Your Agentic AI-Powered Platform

Checkmarx Developer Assist agent delivers context-aware guidance to stop vulnerabilities before they enter the developer’s pipeline. As developers write new AI-powered code or refine existing code, Developer Assist keeps your IDE the safest place to build.

2 min.

Secure Generated Code in Real Time

01 Detect

Analyze human- and AI-generated changes as they are created. Developer Assist identifies risk across application code, dependencies, malicious packages, IaC, secrets, and containers.

02 Fix & Safe Refactor

Provide security-specific remediation grounded in the finding and surrounding code. Depending on the workflow, Developer Assist can guide the change, propose a reviewable fix, or support autonomous remediation.

03 Verify

Rescan changed code to confirm the original issue is no longer present. A fix is not complete just because the code compiles or appears reasonable.

04 Repeat

In supported autonomous workflows, Developer Assist can return the finding to the coding agent and retry remediation before risky work continues. In developer-led workflows, developers review and accept changes before verification.

Frequently Asked Questions

Checkmarx One is a commercial platform, so there is no permanently free tier. Checkmarx Developer Assist is available as a one-month free trial, so you can evaluate it on your own code before any commercial conversation.
Checkmarx Developer Assist is an IDE-native security assistant that helps developers identify and fix security issues as they write code. It scans code in real time, including AI-generated code, and provides actionable guidance directly in the IDE, without waiting for CI/CD or external scans.
Developer Assist runs directly within your IDE and analyzes code as it’s written, modified, or refactored. When a potential issue is detected, it surfaces inline feedback with context on why it matters and how to fix it, so you can address problems immediately without switching tools or breaking flow.
No. Developer Assist is designed to be lightweight and unobtrusive. It provides fast, incremental analysis and only surfaces relevant findings, so developers get meaningful feedback without excessive noise or performance impact.
Developer Assist goes beyond detection. It provides pre and post-commit remediation and safe refactoring suggestions to help you resolve issues without introducing breaking changes. The goal is to fix problems early, confidently, and correctly, before they ever reach a commit or pipeline.
Developer Assist identifies security issues across multiple domains, including application security vulnerabilities detected through SAST, risks introduced by open source and malicious packages, exposed secrets and credentials, Infrastructure as Code (IaC) misconfigurations, and container-related security issues. This analysis applies to both human-written code and AI-generated code, ensuring consistent protection regardless of how the code is created.
To get started, you need a supported IDE with an existing AI coding assistant enabled, such as GitHub Copilot in VS Code or native agents in Cursor, Windsurf, or AWS Kiro. For AI-powered remediation, Developer Assist connects to Checkmarx remediation intelligence through the Model Context Protocol (MCP). MCP setup is simple and takes only a single configuration step. Once connected, your IDE gains secure access to Checkmarx AppSec knowledge for real-time guidance and verified fixes, without changing your workflow.
Developer Assist is designed to minimize data sharing and keep source code inside your environment. Source code, secrets, and proprietary application data never leave the IDE. Only limited metadata, such as package name, package version, package manager, and vulnerability identifiers, are transmitted to Checkmarx services when enrichment or remediation data is required. AI-generated code changes are created locally by your IDE’s existing AI assistant, and all recommendations are reviewable, optional, and auditable. Checkmarx does not train AI models on customer data, and any optional fallback AI usage is restricted to open-source package metadata only.