AI is producing code quicker than groups can assessment it. Checkmarx, the chief in agentic utility safety, at this time addressed that hole by introducing self-healing utility safety: autonomous brokers that detect, repair, and confirm vulnerabilities as builders code.
Key Takeaways
- Developer Help now runs a steady find-and-fix loop immediately in AI coding instruments by way of hooks, catching and fixing vulnerabilities as code is written with as much as 70% much less guide remediation effort.
- Triage and Remediation brokers autonomously prioritize what’s already within the codebase and generate merge-ready fixes, reducing guide triage and accelerating developer productiveness.
Closing the Loop from Code to Backlog
In keeping with Checkmarx’s 2026 Way forward for Utility Safety report, 96% of builders now use AI coding instruments, however solely 18% apply safety repeatedly as they write code, a spot autonomous remediation is designed to shut.
In a research Checkmarx commissioned from impartial researcher The Climate Report, revealed in July 2026, frontier fashions produced working code 83% to 95% of the time, however solely 24% to 36% of that code was each safe and practical. Even a post-hoc safety assessment lifted the secure-and-functional fee to solely 47% to 56%, underscoring the hole that autonomous remediation is constructed to shut.
“Safety groups have spent a decade making an attempt to maintain tempo with how briskly code will get written, and AI simply moved that goalpost once more,” mentioned Harshil Parikh, VP of Product Administration at Checkmarx. “The one technique to shut that hole is to cease treating detection and remediation as separate steps dealt with by separate instruments and let the system repair what it finds.”
“The aim is prevention – making a steady move of unpolluted code from the beginning and autonomous fixes earlier than code reaches manufacturing,” mentioned Jonathan Rende, chief product officer at Checkmarx. “With autonomous remediation, fixes are utilized whereas builders are nonetheless writing code, earlier than it’s ever checked in, and what’s within the pipeline will get prioritized and expedited with out having to consider it.”
Developer Help now works as a single remediation loop pre-commit. Whereas the IDE, it runs autonomously by way of hooks and MCP. It detects a vulnerability, retrieves context from Checkmarx One, generates a repair and verifies it earlier than code is dedicated. Builders utilizing IDEs like Cursor, Windsurf or Kiro or a command-line interface (CLI) with LLMs like Claude Code can get the identical autonomous loop with out switching instruments.
As soon as code reaches the backlog, Triage and Remediation brokers take over. They isolate exploitable threat from severity noise utilizing real-world reachability, what Checkmarx calls attackability, then generate merge-ready pull requests for the vulnerabilities that matter. Builders assessment and merge every repair; AppSec retains coverage management and full traceability over each automated determination.
Validated in Manufacturing at PatientPoint
PatientPoint, a long-time Checkmarx buyer within the healthcare expertise area, has been an early person of Remediation Help. Going through a rising vulnerability backlog as AI-assisted improvement accelerated the tempo of code modifications, the corporate’s utility safety group used the agent to translate a big quantity of findings to a small variety of merge-ready pull requests for builders.
“Triage and Remediation Help brokers recognized false positives and gave our builders the prospect to assessment earlier than merging; that’s precisely what we needed,” mentioned Femi Oyesanya, utility safety engineer at PatientPoint. “Our precedence is to guard affected person knowledge, and this lets us do this with out slowing developer productiveness or driving up token prices.”
Availability
Developer Help’s autonomous mode, together with Triage Help and Remediation Help, are typically accessible now with Checkmarx One. To study extra, go to Checkmarx.com.
1 For dependency and package-upgrade work particularly, Developer Help’s Secure Refactor functionality fashions a consultant discount in guide remediation effort of about 70%, reducing a typical six-hour package deal improve to 1.8 hours, an estimated $420 in developer time at $100 an hour.
