Checkmarx choose what developers use

About us o Founded in 2006 o Enterprise Grade Static and Interactive Application Security Testing Solutions o Hundreds of Fortune 500 and SMB Customers o Fanatical support “Leader” in the 2014 AST Wave “Challenger “ AST Magic Quadrant & Only Vendor to score a perfect 5 in 2014 AST Critical Capabilities Report Fastest Growing Security Company in Israel, 2014 Tech Fast 500 Red Herring EMEA Top 100 Winners Awards

Challenge #1: Lack of secure coding knowledge DevelopersSecurity Manager

Solution #1: Scan & Fix- see where and how to fix the vulnerability detailed remediation advice where to fix vulnerable line of code IDE integration ? ?

Challenge #2: Outnumbered DevelopersSecurity Manager

Solution 2#: Automate the process Developers Source repository Fix suggestions Build management Auditor control panel Bug tracking SVN TFS Bamboo Web Service API CLI CxAudit Checkmarx web client TeamMentor Dashboards DAST Integrations Enforce your security policy in the SDLC

Challenge #3: Lack of budget

Solution #3: Fix as early as possible $80 $240 $960 $7600 Source: Ponemon Institute: National Institute of Standards and Technology Checkmarx solves your bug here Checkmarx solves your bug here Cost of a security bug at each development stage

Unique offering o Fully customizable- add and modify scan rules to your needs o Scan un-compiled/ un-built code o Accurate- low rate of FP/FN out of the box o Incremental scan o Best fix location- eliminate multiple vulnerabilities with a single fix o Scalable client- server architecture

Checkmarx SAST Architecture Virtual Compiler Code & Flow DB Security Query Beyond Security Detection Engine

Vulnerability Coverage- Compliance PCI DSS HIPAA SANS 25 OWASP TOP 10 & Mobile BSIMM CWE Mix and match existing presets or create your own policy

o Setup o Implementation o Find security vulnerabilities o Fix security vulnerabilities Why Checkmarx? Easy to UseReduce CostsFuture Proof o Accurate o Detect early o Fully automated o Speedy fix o Newest Languages supported o Extensive API o Expandable to your needs

Thank You!