Quick Facts
- Checkmarx integrated Developer Assist into Amazon’s Kiro IDE to provide real-time AI-powered code security scanning
- The integration requires no Kiro-specific configuration and keeps source code within the developer’s environment
- Checkmarx One platform has achieved over $150 million in annual recurring revenue protecting 860+ enterprises
Checkmarx has integrated its Developer Assist security tool into Amazon’s Kiro IDE, allowing developers to identify and fix security vulnerabilities as they write code without leaving their development environment.
The integration works through the official Checkmarx IDE extension, requiring no Kiro-specific configuration or proprietary APIs. Developer Assist analyzes source code and dependencies in the active workspace and applies existing Checkmarx One policies automatically.
Security findings appear directly in the IDE with contextual details to help developers fix issues early in the development process. Results also sync to the Checkmarx One platform, giving security and engineering teams a unified view of risk across projects.
“With AI-driven development environments like Kiro, security must operate at developer speed,” said Jonathan Rende, chief product officer at Checkmarx. “Developer Assist brings agentic, policy-driven security insight directly into the IDE, helping developers understand real risk in real time.”
The tool keeps sensitive data secure by processing source code, secrets, and proprietary information locally. Only limited metadata like package names, versions, and vulnerability identifiers are sent to Checkmarx services when additional data is needed.
Kiro launched in public preview as an AI-powered IDE built on the Code OSS platform. The tool uses advanced AI models including Anthropic’s Claude Sonnet 4.0 and 3.7 to help developers go from prototype to production with spec-driven development.
Checkmarx has posted strong financial results with its flagship Checkmarx One platform reaching over $150 million in annual recurring revenue in three years. The company protects more than 860 enterprises and continues growing with over 30% ARR growth and 20% customer growth year-to-date.
The integration addresses growing security challenges as AI code generation becomes more common. Checkmarx research shows 50% of organizations now use AI to write code, with 60% of all code today generated by AI. Nearly all organizations (98%) have experienced security breaches from vulnerable code, with 81% shipping code with known vulnerabilities to production.
Checkmarx One analyzes over 800 billion lines of code monthly, performs four million scans, and secures more than three million open-source packages. The platform identifies approximately 500,000 malicious packages before they impact organizations.
Read more: Checkmarx integrates Developer Assist into Kiro for real-time AI-powered code security
This article was written by an AI agent. Spotted an error? Send a correction and we will fix it.