Release Updates
Every Checkmarx release Merito has reviewed, newest first. Each update explains what changed, who it affects and what to plan before you upgrade.
Checkmarx One 3.66 adds native SCA reachability analysis for supported direct dependencies, plus inventory APIs, API Security analytics, and richer scan reporting. It also extends AI-assisted triage, DAST controls, SCM traceability, and developer tooling support.
Checkmarx SCA September 2026 introduces Codebashing courses for OWASP Top 10:2025 and OWASP LLM vulnerabilities. It also adds APIs to list earned certificates with role-based access and download selected certificate records by ID. The release supports governed security-training evidence for audits, release readiness, and AI application risk programs.
Checkmarx One 3.64 gives administrators organization-level control of scanner and integration settings for connected source-control organizations, including explicit project override rules. It also improves enterprise risk governance through AI usage disablement, API Security audit events, state-based policy exemptions, and inclusion of BYOR data in platform summaries and reports. SCA, DAST, MCP, SBOM, and AI Supply Chain updates broaden coverage and improve evidence for delivery, compliance, and audit teams.
Checkmarx One 3.62 adds detailed Audit Trail records for SAST finding triage and Analytics and Reporting activity, improving compliance evidence and forensic traceability. It introduces Risk Orchestration to consolidate results across security engines, plus generally available AI Triage & Remediation for supported SAST and SCA workflows. The release also adds AI Supply Chain scan controls, CLI and CI/CD support, AI-BOM export, and more granular SCA policy options for net-new production dependency risk.
Checkmarx SCA July 2026 adds support for pnpm-lock.yaml as the authoritative source for resolving direct and transitive dependencies in PNPM-managed projects. This improves the accuracy of vulnerability and license analysis without changing project configuration. SCA Resolver 2.14.11 also adds ARM64 installers, expanded package extraction, PNPM support, and packages-only or binary-only SBOM generation.
Checkmarx One 3.60 helps enterprises identify AI components embedded in source code, govern their use through policies, and bring security scanning into approved AI assistant workflows. It adds scanner-specific net-new vulnerability rules, a policy-violations API, SAST scanned-file reporting, and package-level container triage. These capabilities support more defensible AppSec governance without adding unnecessary friction to delivery teams.
Checkmarx SCA updates help enterprises move from vulnerability detection to practical remediation with smarter upgrade recommendations, improved reporting, and more reliable incremental scanning.
Discover how Checkmarx One 3.58 improves auditability, vulnerability ownership, container security, DAST coverage, and CI/CD efficiency for enterprise AppSec and DevSecOps programs.
Checkmarx SCA adds broader open source license detection and automated remediation for Python and NuGet, helping enterprises improve software supply chain security, audit readiness, and DevSecOps efficiency.