{"id":90237,"date":"2024-02-12T07:00:00","date_gmt":"2024-02-12T12:00:00","guid":{"rendered":"https:\/\/staging.checkmarx.com\/?p=90237"},"modified":"2026-02-03T11:01:37","modified_gmt":"2026-02-03T09:01:37","slug":"you-can-have-it-all-speed-security-introducing-our-new-sast-engine","status":"publish","type":"post","link":"https:\/\/checkmarx.com\/blog\/you-can-have-it-all-speed-security-introducing-our-new-sast-engine\/","title":{"rendered":"You Can Have It All: Speed & Security – Introducing Our New SAST Engine"},"content":{"rendered":"

Checkmarx is a pioneer and leader in the Application Security space. Our commitment to our customers and best of class technology has led us to become the industry leader in Application Security, as recognized in consistent recognition in the Forrester Wave: Static Application Security Testing<\/a> and Gartner Magic Quadrant<\/a>and has allowed us to secure the applications driving our world.<\/p>\n\n\n\n

Keeping Up with the Changing Pace of Development<\/strong><\/h2>\n\n\n\n

In the past, software development mainly followed a waterfall approach- releasing software only once or twice a year. But the world has changed. Nowadays, cloud-native development often means releasing updates multiple times a day. This change in pace of application development has made speed a more important consideration. Sometimes, this comes at the expense of security. In Checkmarx\u2019s upcoming survey on the state of application security, 91% of respondents even admitted to deploying vulnerable code to production. It’s no longer about finding everything but finding and fixing what matters most.<\/p>\n\n\n\n

Up until now, companies had to choose — a developer-oriented SAST tool<\/a> that risked false negatives \u2013 vulnerable code never being identified and unknowingly released into production \u2013 or security-oriented solutions which found everything, but often at the expense of speed and had false positives, making it difficult for developers to know what to fix before the next sprint.<\/p>\n\n\n\n

Either\/Or. Not both. <\/p>\n\n\n\n

This led to further solution sprawl, as companies sometimes used an array of tools for their team \u2013 a \u201cgood enough\u201d solution for less mature teams and enterprise-grade solution for their enterprise teams.<\/p>\n\n\n\n

Until now. <\/p>\n\n\n\n

We are pleased to announce that our new SAST scanning<\/a> engine will further improve an individual\u2019s ability to customize their scanning capabilities, and experience speed, accuracy, and security.<\/p>\n\n\n\n

<\/p>\n\n\n\n

Risk Reduction vs Ease of Use – Do I Have To Choose One?<\/strong><\/h2>\n\n\n\n

Traditional SAST offerings force customers to choose between maximum risk reduction and ease of use (which finds less risk). <\/p>\n\n\n\n

With this new release, Checkmarx is the only solution that offers both in a single package<\/strong>, providing enterprises with the power and flexibility to secure their entire application footprint, and enabling a better developer experience<\/p>\n\n\n\n

The new engine offers both in-depth security (to find maximum risk) and fast scanning (to cover every application with minimum overhead and noise). Users can choose the most appropriate configuration for each application based on that application\u2019s requirements:<\/p>\n\n\n\n