DEVOPSdigest

Checkmarx announced a new Checkmarx plugin for the Microsoft Visual Studio Team Services platform.

The new Checkmarx Microsoft Visual Studio Team Services Plugin allows organizations with agile development practices to embed security into their software development lifecycle (SDLC) without the delays traditionally caused by application security testing.

The Checkmarx plug-in for Microsoft Visual Studio Team Services integrates into Visual Studio team’s SDLC, enabling early detection and remediation of crucial security flaws. This allows teams to efficiently fix flaws as part of the CI toolchain, without imposing delays on the DevOps or CI/CD deployment cycle.

Other benefits of using the Checkmarx Static Source Code Analysis include:

- Faster feedback loop - Checkmarx’s unique incremental scan capability means only new or modified code (that hasn't been scanned before) along with the related dependencies will be scanned. This means scan time is reduced from hours to minutes, perfect for organizations using CI/CD.

- Set your risk threshold and automate - Checkmarx allows users to easily set an organization’s security thresholds to an acceptable risk level. Users can then decide if they want to break builds based on whether scans met the thresholds or not.

- Saves precious remediation time: Checkmarx doesn’t leave a long list of vulnerabilities to remediate, but actually goes a step further and uses algorithms to correlate the different findings and identify the best fix locations which can eliminate multiple vulnerabilities with a single fix. This unique capability optimizes the remediation process and cuts down developer hours dedicated to remediation by up to 80 percent.

- Seamless integration: The Checkmarx plugin for Visual Studio Team Services platform is simple to install and configure. Visual Studio users can simply install CxSAST from the Visual Studio marketplace.

“Checkmarx equips CI/CD and DevOps teams with a seamless way to integrate security into their development practices and “push security left” so developers are empowered to deliver secure code without slowing down development” said Moshe Lerner, SVP, Product Strategy and Corporate Development at Checkmarx. “To ensure minimal impact on development cycles, it’s important to work with security testing solutions that can automate your security scans and integrate with your existing IDEs, source repository and build servers, which is what we’ve done with Visual Studio Team Services. We’re excited to be a part of such a vibrant and growing ecosystem.”

Shawn Nandi, Senior Director, Microsoft Corp. said, “Development teams are looking for ways to reduce security risks while also accelerating the DevOps cycle. Checkmarx’s integration with Visual Studio Team Services tackles this problem head-on by scanning your code as part of the pull request in the Continuous Integration flow.”

The Checkmarx Static Source Code Analysis (CxSAST) Microsoft Visual Studio Team Services Plugin has been launched in beta.