Application security testing firm Checkmarx Ltd. today announced integrated development environment-native support for Kiro through Checkmarx Developer Assist, extending real-time, artificial intelligence-powered application security directly into the developer environment.

The integration allows developers to identify and address security issues as code is written, without leaving the IDE or relying on downstream continuous integration and continuous delivery scans. Kiro is an AI-powered IDE, created by Amazon Web Services Inc., that’s designed to help developers by embedding intelligent coding agents directly into their workflow.

The support seeks to assist with the issue whereby, as development accelerates, security risks surface earlier and more frequently. Checkmarx’s Developer Assist meets the challenge by embedding security analysis directly into the Kiro workflow to ensure that speed and security advance together.

Using the official Checkmarx IDE extension, developers can activate Developer Assist inside Kiro with minimal setup, with support for additional development workflows, including command-line interfaces, planned. Developer Assist analyzes source code and dependencies in the active workspace and applies existing Checkmarx One policies automatically.

No Kiro-specific configuration, proprietary application programming interfaces, or experimental integrations are required.

Any security findings are surfaced directly in the IDE with contextual detail to help developers remediate issues early in the software lifecycle. The results are also reflected in the Checkmarx One platform to provide AppSec and engineering leaders with a unified view of risk across projects and teams.

By extending IDE-native application security into Kiro, Checkmarx says that it is enabling organizations to adopt AI-assisted development with confidence with security embedded from the first line of code while maintaining enterprise-grade governance.

“With AI-driven development environments like Kiro, security must operate at developer speed,” said Jonathan Rende, chief product officer at Checkmarx. “Developer Assist brings agentic, policy-driven security insight directly into the IDE, helping developers understand real risk in real time while giving AppSec teams centralized visibility and control through Checkmarx One.”

Checkmarx is a venture capital-backed startup that has raised $98.5 million in venture capital funding over three rounds, according to Tracxn. Investors in the company include Insight Venture Partners LP, Salesforce Ventures, TPG Global, Francisco Partners Management LP and XT Hi Tech Investments Ltd.

Photo: Checkmarx