Checkmarx Explained

Checkmarx
Type:Private
Industry:Software Security, Application security
Founded:2006
Founder:Maty Siman (CTO), Emmanuel Benzaquen (Former CEO)
Hq Location:Atlanta, Georgia, US
Key People:Sandeep Johri (CEO)
Website:checkmarx.com

Checkmarx is an information security company specializing in software application security testing and risk management for software supply chains. It is headquartered in Atlanta, Georgia in the United States.[1] It has over 900 employees.

Background

Before founding Checkmarx, Maty Siman worked in the Mamram unit of the Israeli Defense Forces (IDF) and later in the Matzov unit. Then he worked a two years term until February 2006 as an advisor at the Israeli Prime Minister's Office.[2]

History

Checkmarx was founded in 2006 by Maty Siman and Emmanuel Benzaquen.[3] [1]

In 2017, Checkmarx acquired Codebashing to add AppSec training.[4] The following year, it acquired Custodela, DevSecOps consulting firm.[5] [6]

Checkmarx was acquired in April 2020 by Hellman & Friedman, a private equity firm with headquarters in San Francisco.

In August 2021, Checkmarx acquired Dustico, a software that detects backdoors and malicious attacks in the software supply chain.[7] [8]

In 2023, founder Emmanuel Benzaquen stepped down as CEO and was succeeded by Sandeep Johri.'[9]

Checkmarx announced in December 2025 that it had acquired Tromzo, a California-based company known for its AI-native autonomous security agents.[10] No financial details were made public. Checkmarx stated that Tromzo’s founders, Harshil Parikh and Harshit Chitalia, together with their full AI engineering team, will transition to Checkmarx’s product and engineering division.[11] Tromzo’s cognitive architecture and reasoning engine will serve as an intelligence layer throughout the Checkmarx One platform and will drive new Assist agents beginning in early 2026.[12]

Research

Checkmarx maintains a research division, Checkmarx Zero, that has published findings on vulnerabilities and software supply chain risks:

Independent reporting on Checkmarx research also examined manipulation risks in AI coding agents via a "lies-in-the-loop" technique,[18] alongside broader supply-chain findings in public repositories.[19] Survey reporting highlighted that most organizations experienced breaches tied to vulnerable code amid growing adoption of AI development tools.[20]

Funding

Checkmarx's early investors include Salesforce, which remains a partner as Checkmarx provides security reviews for the Salesforce AppExchange.[21] [22] [23] In 2015, U.S. private equity and venture capital firm Insight Partners acquired Checkmarx for $84 million.[23] [1] [3]

In April 2020, private equity firm Hellman & Friedman, alongside private investment firm TPG,[24] acquired Checkmarx for $1.15 billion.[1] [3] [25] After the acquisition, Insight Partners retained a minority interest in the company.[1] [26]

See also

References

  1. Web site: Hellman & Friedman Acquires Checkmarx for $1.15B. 2024-05-06. Dark Reading. 16 March 2020 . en.
  2. News: Bar-Yosef . Noa . November 20, 2012 . Security Startups: In Focus With CheckMarx Founder Maty Siman . SecurityWeek.
  3. Web site: Insight Partners sells security firm Checkmarx to Hellman & Friedman for $1.15B. 2020-09-01. TechCrunch. 16 March 2020. en-US.
  4. News: 2017-07-24 . App security co Checkmarx buys UK co Codebashing . 2025-11-21 . Globes . en.
  5. Web site: Wenkert. Amarelle. 2018-11-08. Cybersecurity Company Checkmarx Buys Ontario-based Custodela. 2020-09-09. CTECH - www.calcalistech.com.
  6. Web site: Checkmarx Acquires Custodela. 2020-09-09. Dark Reading. 8 November 2018 . en.
  7. Web site: Checkmarx acquires open-source supply chain security startup Dustico . TechCrunch. 5 August 2021 . News: 2021-08-09 . Checkmarx’s Dustico acquisition bolsters the open source software supply chain . http://web.archive.org/web/20231003110122/https://venturebeat.com/business/checkmarxs-dustico-acquisition-bolsters-the-open-source-software-supply-chain/ . 2023-10-03 . 2025-11-21 . VentureBeat . en-US.
  8. Web site: Page . Carly . 2021-08-05 . Checkmarx acquires open-source supply chain security startup Dustico . 2025-11-21 . TechCrunch . en-US.
  9. Web site: 2023-02-28 . Checkmarx CEO Benzaquen stepping down after 17 years in latest shakeup at cyber unicorn . 2025-11-21 . ctech . en.
  10. Web site: Checkmarx acquires Tromzo: Leap in autonomous AppSec . SourceSecurity.com . 10 December 2025 . 10 December 2025.
  11. Web site: Dorbian . Iris . PE-backed Checkmarx acquires tech company Tromzo . PE Hub . 10 December 2025 . 10 December 2025.
  12. Web site: Chowdhry . Amit . Checkmarx Buys Tromzo To Advance Agentic Application Security . Pulse 2.0 . 9 December 2025 . 10 December 2025.
  13. Web site: Camera app vulnerability could allow surveillance of Android users. SecurityWeek. 19 November 2019. 5 October 2025.
  14. Web site: Ring Android bug could let rogue apps spy on camera feeds. Ars Technica. 29 August 2022. 5 October 2025.
  15. Web site: Checkmarx surfaces malicious effort to compromise software supply chains. DevOps.com. 15 January 2025. 6 October 2025.
  16. Web site: Developers knowingly push vulnerable code, despite growing breach risk. Cybersecurity Dive. 3 September 2025. 5 October 2025.
  17. Web site: AI code generation creates blind spots in DevSecOps security. ITProToday. 20 July 2025. 5 October 2025.
  18. Web site: Lies-in-the-loop attack shows risks in AI coding agents . Dark Reading . 12 September 2025 . 6 October 2025.
  19. Web site: Checkmarx surfaces malicious effort to compromise software supply chains . DevOps.com . 3 September 2025 . 6 October 2025.
  20. Web site: Developers knowingly push vulnerable code, despite growing breach risk . Cybersecurity Dive . 3 September 2025 . 6 October 2025.
  21. Web site: Scheer. Matt. 2020-07-27. Security Checks When Submitting Apps to the Salesforce ISV Team. 2020-11-13. crmscience. en.
  22. Web site: Checkmarx Raises Funding From Salesforce.com, Ofer Hi-Tech. 2020-09-04. TechCrunch. en-US.
  23. Web site: 2015-06-17. Insight Venture Partners to buy Israeli co Checkmarx - Globes. 2020-09-09. en.globes.co.il. he.
  24. Web site: In $1.15 Billion Deal, Hellman & Friedman Acquires DevOps Firm Checkmarx Israel Defense. 2020-10-21. www.israeldefense.co.il. 17 April 2020 . en.
  25. Web site: 2019-08-22. 3 Israeli cybersecurity firms win Black Unicorn Awards. 2020-10-21. ISRAEL21c. en-US.
  26. Web site: Novinson. Michael. 2020-06-24. The Biggest 10 Cybersecurity Acquisitions Of 2020 (So Far). 2020-09-04. CRN.

This article is licensed under the GNU Free Documentation License. It uses material from the Wikipedia article "Checkmarx".

Except where otherwise indicated, Everything.Explained.Today is © Copyright 2009-2026, A B Cryer, All Rights Reserved. Cookie policy.