Merito Insights

Checkmarx Fusion is a hybrid vulnerability detection layer in Checkmarx One that combines deterministic, rules-based SAST with a language-agnostic AI engine and curated frontier AI models, reconciled into a single result set. Checkmarx reports an F1 score of 0.741, versus roughly 0.20 for legacy rule-based SAST, and describes the approach as producing consistent results across scans while extending coverage to vulnerabilities with no existing rule or CVE.

• Checkmarx
• SAST
• Application Security
• DevSecOps
• AI

AppSec vendors have converged on exploitability-scored triage, autofix pull requests, coding-agent integration, and grounded output, making those four things table stakes, not differentiators. Real competitive separation over the next 12 months will happen in four unsolved areas: continuous re-testing after a fix ships, AI-BOM, mobile AppSec keeping pace with embedded AI, and agent guardrails that enforce policy at the execution harness, not just the agent's decisions.

• Application Security
• AI
• AI Coding
• DevSecOps
• SBOM
• SCA
• Compliance

Learn how Black Duck identifies reused open-source fragments, enforces license policies, and supports secure AI-assisted development pipelines.

• Black Duck
• SCA
• AI Coding

Security teams need more than code scanning. Explore how deepsec fits into a modern AppSec strategy with ASPM, DevSecOps governance, and layered validation.

• deepsec
• SCA
• SAST
• DAST

As agentic coding systems and AI-assisted development reshape software creation, understanding what goes into your codebase is no longer optional—it’s essential. Software Bills of Materials (SBOMs) have become the cornerstone of transparency and trust in modern application security, helping organizations mitigate risks introduced by complex, AI-generated dependencies.

• AI
• Application Security
• SBOM