Checkmarx SCA

Checkmarx SCA scans open-source dependencies for known vulnerabilities, malicious packages, and license issues as part of the Checkmarx One AppSec platform. Its Developer Assist agent suggests AI-generated non-vulnerable replacement packages when no patched version is available. Free access is offered through IDE plugins for IntelliJ IDEA Ultimate and VS Code.