AI is producing code quicker than groups can evaluate it. Checkmarx, the chief in agentic software safety, immediately addressed that hole by introducing self-healing software safety: autonomous brokers that detect, repair, and confirm vulnerabilities as builders code.
Key Takeaways
- Developer Help now runs a steady find-and-fix loop immediately in AI coding instruments by hooks, catching and fixing vulnerabilities as code is written with as much as 70% much less guide remediation effort.
- Triage and Remediation brokers autonomously prioritize what’s already within the codebase and generate merge-ready fixes, slicing guide triage and accelerating developer productiveness.
Closing the Loop from Code to Backlog
In accordance with Checkmarx’s 2026 Way forward for Software Safety report, 96% of builders now use AI coding instruments, however solely 18% apply safety repeatedly as they write code, a spot autonomous remediation is designed to shut.
In a research Checkmarx commissioned from unbiased researcher The Climate Report, printed in July 2026, frontier fashions produced working code 83% to 95% of the time, however solely 24% to 36% of that code was each safe and practical. Even a post-hoc safety evaluate lifted the secure-and-functional price to solely 47% to 56%, underscoring the hole that autonomous remediation is constructed to shut.
“Safety groups have spent a decade making an attempt to maintain tempo with how briskly code will get written, and AI simply moved that goalpost once more,” mentioned Harshil Parikh, VP of Product Administration at Checkmarx. “The one method to shut that hole is to cease treating detection and remediation as separate steps dealt with by separate instruments and let the system repair what it finds.”
“The purpose is prevention – making a steady move of unpolluted code from the beginning and autonomous fixes earlier than code reaches manufacturing,” mentioned Jonathan Rende, chief product officer at Checkmarx. “With autonomous remediation, fixes are utilized whereas builders are nonetheless writing code, earlier than it’s ever checked in, and what’s within the pipeline will get prioritized and expedited with out having to consider it.”
Developer Help now works as a single remediation loop pre-commit. Whereas the IDE, it runs autonomously by hooks and MCP. It detects a vulnerability, retrieves context from Checkmarx One, generates a repair and verifies it earlier than code is dedicated. Builders utilizing IDEs like Cursor, Windsurf or Kiro or a command-line interface (CLI) with LLMs like Claude Code can get the identical autonomous loop with out switching instruments.
As soon as code reaches the backlog, Triage and Remediation brokers take over. They isolate exploitable danger from severity noise utilizing real-world reachability, what Checkmarx calls attackability, then generate merge-ready pull requests for the vulnerabilities that matter. Builders evaluate and merge every repair; AppSec retains coverage management and full traceability over each automated determination.
Validated in Manufacturing at PatientPoint
PatientPoint, a long-time Checkmarx buyer within the healthcare know-how house, has been an early person of Remediation Help. Going through a rising vulnerability backlog as AI-assisted improvement accelerated the tempo of code modifications, the corporate’s software safety group used the agent to translate a big quantity of findings to a small variety of merge-ready pull requests for builders.
“Triage and Remediation Help brokers recognized false positives and gave our builders the prospect to evaluate earlier than merging; that’s precisely what we wished,” mentioned Femi Oyesanya, software safety engineer at PatientPoint. “Our precedence is to guard affected person information, and this lets us try this with out slowing developer productiveness or driving up token prices.”
Availability
Developer Help’s autonomous mode, together with Triage Help and Remediation Help, are typically obtainable now with Checkmarx One. To be taught extra, go to Checkmarx.com.
1 For dependency and package-upgrade work particularly, Developer Help’s Protected Refactor functionality fashions a consultant discount in guide remediation effort of about 70%, slicing a typical six-hour bundle improve to 1.8 hours, an estimated $420 in developer time at $100 an hour.
