What Is Checkmarx Fusion
Brief
AppSec teams have always faced a tradeoff – one that feels impossible to solve. Rules-based scanners are precise and consistent, but they only catch what they’ve been explicitly told to look for. AI-based scanners reason more broadly and catch things rules miss – but ask the same question twice and you can get two different answers.
Checkmarx’s hybrid model removes that tradeoff.
A deterministic detection engine and an AI reasoning engine analyze the code in parallel, and a third engine, the Findings Analysis Engine (FAE), reconciles their output into one verified result. It is precise, broad, and repeatable every time.
But the hybrid model is only the start.
Checkmarx Fusion, now in Early Access for SAST within Checkmarx One, adds a new layer on top of that hybrid foundation.