Checkmarx has unveiled IDE-native support for Kiro via its Developer Assist tool, embedding AI-enhanced application security capabilities directly into the development environment.
This integration enables developers to detect and resolve security vulnerabilities during the coding process seamlessly, avoiding the need to depend solely on downstream CI/CD scans.
Embedding security in development
As development processes become more rapid, security challenges emerge earlier and more often.
Developer Assist addresses these issues by integrating security assessments within the Kiro workflow, ensuring both pace and protection are maintained in tandem. This initiative reflects the stride towards preemptive security management in modern software development cycles.
Facilitating additional workflows
Jonathan Rende, Chief Product Officer at Checkmarx, emphasises the necessity for security to operate at developer speed in AI-driven environments like Kiro.
He noted, “Developer Assist brings agentic, policy-driven security insight directly into the IDE, helping developers understand real risk in real time while giving AppSec teams centralised visibility and control through Checkmarx One. With the Kiro agent powered by Checkmarx, developers can eliminate up to 90% of security rework before code is committed.” This approach reduces potential vulnerabilities before finalising the code, enhancing overall code integrity.
Simplified security enhancement
By leveraging the official Checkmarx IDE extension, developers can activate Developer Assist within Kiro with ease, necessitating minimal configuration setup. The tool analyses both source code and dependencies in the active workspace against established Checkmarx One policies. This process requires no Kiro-specific configurations or specialised integrations.
AI-augmented development slecurity
Security alerts generated by Developer Assist are displayed directly within the IDE, complete with contextual details to facilitate prompt developer intervention early in the software development lifecycle. Outcomes are synchronised with the Checkmarx One platform, offering a cohesive risk view for security and engineering managers across all projects and teams.
By integrating IDE-native security features into Kiro, Checkmarx supports organisations in embracing AI-driven development while maintaining robust security standards, embedding security measures from the initial stages of coding, and upholding enterprise-level governance protocols.
