1. Checkmarx choose what developers use

2. About us o Founded in 2006 o Enterprise Grade Static and Interactive Application Security Testing Solutions o Hundreds of Fortune 500 and SMB Customers o Fanatical support “Leader” in the 2014 AST Wave “Challenger “- 2014 AST Magic Quadrant & Only Vendor to score a perfect 5 in 2014 AST Critical Capabilities Report Fastest Growing Security Company in Israel, 2014 Tech Fast 500 Red Herring EMEA Top 100 Winners Awards

3. Challenge #1: Lack of secure coding knowledge DevelopersSecurity Manager

4. Solution #1: Scan & Fix- see where and how to fix the vulnerability detailed remediation advice where to fix vulnerable line of code IDE integration ? ?

5. Challenge #2: Outnumbered DevelopersSecurity Manager

6. Solution 2#: Automate the process Developers Source repository Fix suggestions Build management Auditor control panel Bug tracking SVN TFS Bamboo Web Service API CLI CxAudit Checkmarx web client TeamMentor Dashboards DAST Integrations Enforce your security policy in the SDLC

7. Challenge #3: Lack of budget

8. Solution #3: Fix as early as possible $80 $240 $960 $7600 Source: Ponemon Institute: National Institute of Standards and Technology Checkmarx solves your bug here Checkmarx solves your bug here Cost of a security bug at each development stage

9. Unique offering o Fully customizable- add and modify scan rules to your needs o Scan un-compiled/ un-built code o Accurate- low rate of FP/FN out of the box o Incremental scan o Best fix location- eliminate multiple vulnerabilities with a single fix o Scalable client- server architecture

10. Checkmarx SAST Architecture Virtual Compiler Code & Flow DB Security Query Beyond Security Detection Engine

11. Vulnerability Coverage- Compliance PCI DSS HIPAA SANS 25 OWASP TOP 10 & Mobile BSIMM CWE Mix and match existing presets or create your own policy

12. o Setup o Implementation o Find security vulnerabilities o Fix security vulnerabilities Why Checkmarx? Easy to UseReduce CostsFuture Proof o Accurate o Detect early o Fully automated o Speedy fix o Newest Languages supported o Extensive API o Expandable to your needs

13. Thank You!