AI is producing code quicker than groups can assessment it. Checkmarx, the chief in agentic utility safety, at present addressed that hole by introducing self-healing utility safety: autonomous brokers that detect, repair, and confirm vulnerabilities as builders code.
Key Takeaways
- Developer Help now runs a steady find-and-fix loop straight in AI coding instruments by means of hooks, catching and fixing vulnerabilities as code is written with as much as 70% much less handbook remediation effort.
- Triage and Remediation brokers autonomously prioritize what’s already within the codebase and generate merge-ready fixes, slicing handbook triage and accelerating developer productiveness.
Closing the Loop from Code to Backlog
In response to Checkmarx’s 2026 Way forward for Utility Safety report, 96% of builders now use AI coding instruments, however solely 18% apply safety repeatedly as they write code, a niche autonomous remediation is designed to shut.
In a examine Checkmarx commissioned from impartial researcher The Climate Report, printed in July 2026, frontier fashions produced working code 83% to 95% of the time, however solely 24% to 36% of that code was each safe and purposeful. Even a post-hoc safety assessment lifted the secure-and-functional fee to solely 47% to 56%, underscoring the hole that autonomous remediation is constructed to shut.
“Safety groups have spent a decade attempting to maintain tempo with how briskly code will get written, and AI simply moved that goalpost once more,” stated Harshil Parikh, VP of Product Administration at Checkmarx. “The one solution to shut that hole is to cease treating detection and remediation as separate steps dealt with by separate instruments and let the system repair what it finds.”
“The objective is prevention – making a steady movement of fresh code from the beginning and autonomous fixes earlier than code reaches manufacturing,” stated Jonathan Rende, chief product officer at Checkmarx. “With autonomous remediation, fixes are utilized whereas builders are nonetheless writing code, earlier than it’s ever checked in, and what’s within the pipeline will get prioritized and expedited with out having to consider it.”
Developer Help now works as a single remediation loop pre-commit. Whereas the IDE, it runs autonomously by means of hooks and MCP. It detects a vulnerability, retrieves context from Checkmarx One, generates a repair and verifies it earlier than code is dedicated. Builders utilizing IDEs like Cursor, Windsurf or Kiro or a command-line interface (CLI) with LLMs like Claude Code can get the identical autonomous loop with out switching instruments.
As soon as code reaches the backlog, Triage and Remediation brokers take over. They isolate exploitable threat from severity noise utilizing real-world reachability, what Checkmarx calls attackability, then generate merge-ready pull requests for the vulnerabilities that matter. Builders assessment and merge every repair; AppSec retains coverage management and full traceability over each automated determination.
Validated in Manufacturing at PatientPoint
PatientPoint, a long-time Checkmarx buyer within the healthcare know-how house, has been an early consumer of Remediation Help. Dealing with a rising vulnerability backlog as AI-assisted improvement accelerated the tempo of code modifications, the corporate’s utility safety group used the agent to translate a big quantity of findings to a small variety of merge-ready pull requests for builders.
“Triage and Remediation Help brokers recognized false positives and gave our builders the prospect to assessment earlier than merging; that’s precisely what we needed,” stated Femi Oyesanya, utility safety engineer at PatientPoint. “Our precedence is to guard affected person information, and this lets us do this with out slowing developer productiveness or driving up token prices.”
Availability
Developer Help’s autonomous mode, together with Triage Help and Remediation Help, are usually accessible now with Checkmarx One. To be taught extra, go to Checkmarx.com.
1 For dependency and package-upgrade work particularly, Developer Help’s Secure Refactor functionality fashions a consultant discount in handbook remediation effort of about 70%, slicing a typical six-hour bundle improve to 1.8 hours, an estimated $420 in developer time at $100 an hour.
