Summary
Checkmarx (July 14, 2026) launched self-healing application security in its Assist agent family: Developer Assist runs a continuous find-fix-verify loop inside AI coding tools (Cursor, Windsurf, Kiro, Claude Code) via hooks and MCP, claiming up to 70% less manual remediation for dependency upgrades. Triage Assist and Remediation Assist prioritize backlog issues by “attackability” (reachability) and generate merge-ready PRs. GA with Checkmarx One. Backed by Weather Report study: frontier models produce working code 83–95% of the time but only 24–36% secure-and-functional. Early customer: PatientPoint (healthcare).
Source Analysis
Research Notes
Draft Article
PreScreening Notes
- Score: 5 / Priority: medium — Vendor product launch (self-healing Assist agents in Cursor/Claude Code via MCP); borderline press-release tone but AppSec+AI coding is audience-relevant.
- Recent (July 14–15), software+AI fit; company primary source — treat claims (70% remediation cut) cautiously downstream.
- No duplicate. Pass when-in-doubt.