New autonomous brokers stop vulnerabilities by securing code earlier than it’s submitted
MOUNTAIN VIEW, Calif., July 14, 2026 (GLOBE NEWSWIRE) — AI is producing code sooner than groups can assessment it. Checkmarx, the chief in agentic utility safety, right now addressed that hole by introducing self-healing utility safety: autonomous brokers that detect, repair, and confirm vulnerabilities as builders code.
Key Takeaways
- Developer Help now runs a steady find-and-fix loop instantly in AI coding instruments by means of hooks, catching and fixing vulnerabilities as code is written with as much as 70% much less guide remediation effort.
- Triage and Remediation brokers autonomously prioritize what’s already within the codebase and generate merge-ready fixes, chopping guide triage and accelerating developer productiveness.
Closing the Loop from Code to Backlog
Based on Checkmarx’s 2026 Way forward for Software Safety report, 96% of builders now use AI coding instruments, however solely 18% apply safety repeatedly as they write code, a niche autonomous remediation is designed to shut.
In a examine Checkmarx commissioned from impartial researcher The Climate Report, printed in July 2026, frontier fashions produced working code 83% to 95% of the time, however solely 24% to 36% of that code was each safe and purposeful. Even a post-hoc safety assessment lifted the secure-and-functional fee to solely 47% to 56%, underscoring the hole that autonomous remediation is constructed to shut.
“Safety groups have spent a decade making an attempt to maintain tempo with how briskly code will get written, and AI simply moved that goalpost once more,” mentioned Harshil Parikh, VP of Product Administration at Checkmarx. “The one strategy to shut that hole is to cease treating detection and remediation as separate steps dealt with by separate instruments and let the system repair what it finds.”
“The objective is prevention – making a steady circulate of fresh code from the beginning and autonomous fixes earlier than code reaches manufacturing,” mentioned Jonathan Rende, chief product officer at Checkmarx. “With autonomous remediation, fixes are utilized whereas builders are nonetheless writing code, earlier than it’s ever checked in, and what’s within the pipeline will get prioritized and expedited with out having to consider it.”
Developer Help now works as a single remediation loop pre-commit. Whereas the IDE, it runs autonomously by means of hooks and MCP. It detects a vulnerability, retrieves context from Checkmarx One, generates a repair and verifies it earlier than code is dedicated. Builders utilizing IDEs like Cursor, Windsurf or Kiro or a command-line interface (CLI) with LLMs like Claude Code can get the identical autonomous loop with out switching instruments.
As soon as code reaches the backlog, Triage and Remediation brokers take over. They isolate exploitable threat from severity noise utilizing real-world reachability, what Checkmarx calls attackability, then generate merge-ready pull requests for the vulnerabilities that matter. Builders assessment and merge every repair; AppSec retains coverage management and full traceability over each automated determination.
Validated in Manufacturing at PatientPoint
PatientPoint, a long-time Checkmarx buyer within the healthcare expertise house, has been an early consumer of Remediation Help. Going through a rising vulnerability backlog as AI-assisted improvement accelerated the tempo of code adjustments, the corporate’s utility safety group used the agent to translate a big quantity of findings to a small variety of merge-ready pull requests for builders.
“Triage and Remediation Help brokers recognized false positives and gave our builders the prospect to assessment earlier than merging; that is precisely what we needed,” mentioned Femi Oyesanya, utility safety engineer at PatientPoint. “Our precedence is to guard affected person information, and this lets us do this with out slowing developer productiveness or driving up token prices.”
Availability
Developer Assist’s autonomous mode, together with Triage Assist and Remediation Assist, are typically obtainable now with Checkmarx One. To be taught extra, go to Checkmarx.com.
1 For dependency and package-upgrade work particularly, Developer Help’s Protected Refactor functionality fashions a consultant discount in guide remediation effort of about 70%, chopping a typical six-hour package deal improve to 1.8 hours, an estimated $420 in developer time at $100 an hour.
About Checkmarx
Checkmarx is the chief in agentic utility safety, delivering enterprise-grade safety whereas reducing engineering prices and accelerating improvement velocity. The Checkmarx One platform scans trillions of strains of code every year, enabling corporations to chop vulnerability density by greater than half. Autonomous safety brokers repeatedly detect and counter AI-driven threats throughout the software program improvement lifecycle, delivering prevention-first safety for legacy, fashionable, and AI-generated code at enterprise scale. Observe Checkmarx on LinkedIn, YouTube, and X.
For extra data, contact:
[email protected]
