How many security-leadership moves has CISO Tribune tracked at Checkmarx?

CISO Tribune has tracked 1 move at Checkmarx since November 5, 2026.

When was Kobi Sivilya appointed at Checkmarx?

Kobi Sivilya's appointment as Chief Information Security Officer and Chief Information Officer of Checkmarx was announced on November 5, 2026, per checkmarx.com (company announcement).

Where did Kobi Sivilya work before becoming Chief Information Security Officer and Chief Information Officer of Checkmarx?

The record of the appointment gives Kobi Sivilya's previous role as CISO and VP of IT at Outbrain.

What does Checkmarx sell?

Checkmarx sells Checkmarx Developer Assist and Checkmarx MCP Server. Checkmarx Developer Assist: Delivers context-aware security guidance within the IDE. It combines realtime scanning with agentic AI remediation. Checkmarx MCP Server: A secure gateway that bridges AI-powered development assistants with the Checkmarx security platform.

Who does Checkmarx fit?

From its own pages, Checkmarx sells mainly to developers who write code in IDEs and with AI coding agents. Its documentation describes plugins for several IDEs and for AI coding agents. Checkmarx offers Developer Assist in distinct licensing models, each serving a distinct segment of its customers, including SAST on-premises accounts.

How does CISO Tribune file Checkmarx?

CISO Tribune files Checkmarx under Static application security testing, with Dynamic application security testing, Software composition analysis and Application security posture management as secondary categories.

Checkmarx is owned by Hellman & Friedman, which acquired it in 2020.

Company record · security vendor

Checkmarx CISO: Kobi Sivilya

CISO Tribune company record: Checkmarx, seat filled, since November 5, 2026

The current Chief Information Security Officer and Chief Information Officer of Checkmarx, as tracked by CISO Tribune, is Kobi Sivilya, whose appointment was announced on November 5, 2026 (checkmarx.com (company announcement)). Previously CISO and VP of IT at Outbrain. Read the record. The record entered the Wire on November 5, 2026.

Career profile: Kobi Sivilya on CISO Spotlights ↗

Tracked by the Wire since November 5, 2026 · 1 recorded move · every claim links to a sourced record · Updated November 9, 2026

Where Checkmarx appears on the record (49)

Every page on CISO Tribune and its network that carries this company, 49 in all.

On the Wire: Kobi Sivilya named Chief Information Security Officer and Chief Information Officer at Checkmarx · 2026-11-05
Career profile: Kobi Sivilya on CISO Spotlights ↗
Compared with (43): vs 42Crunch, vs AISLE, vs Anchore, vs Apiiro, vs Arnica, vs Astra Security, vs Attaxion, vs Beagle Security, vs Black Duck, vs Contrast Security, vs Cycode, vs Data Theorem, vs Detectify, vs Endor Labs, vs Escape, vs Fleuret AI, vs GitHub Advanced Security, vs GitLab, vs Indusface, vs Invicti, vs JFrog, vs Kiuwan, vs Legit Security, vs Mend.io, vs Oligo, vs OpenText, vs Outpost24, vs OX Security, vs Phoenix Security, vs Prime Security, vs Promptfoo, vs Pynt, vs RapidFort, vs Raven.io, vs Semgrep, vs Snyk, vs Socket, vs Sonatype, vs SplxAI, vs StackHawk, vs Traceable AI, vs Trail of Bits, vs Veracode
In the vendor directory (4): Static application security testing vendors · primary category
Dynamic application security testing vendors · category
Software composition analysis vendors · category
Application security posture management vendors · category

About Checkmarx

CISO Tribune's Leadership Bench files Checkmarx under Cybersecurity Vendors and North America. The Wire has one security-leadership move at Checkmarx on record, announced on November 5, 2026.

Security leadership timeline

2026-11-05

Kobi Sivilya named Chief Information Security Officer and Chief Information Officer at Checkmarx

Checkmarx announced the appointment of Kobi Sivilya as CISO and CIO, where he will oversee the company's security, IT, and business applications.

Security chiefs at other Cybersecurity Vendors organizations

Other organizations CISO Tribune files under Cybersecurity Vendors with a named security chief on record: those in North America first, in alphabetical order from Checkmarx onward.

Cognition: Alex Stamos, Chief Information Security Officer.
Concentric AI: Lane Sullivan, Chief Information Security and Strategy Officer.
Cyberhaven: Aman Sirohi, Chief Information Security Officer.
Cylerity: Drew McCombs, Chief Technology Officer and Chief Information Security Officer.
DefenseStorm: William Wetherill, Chief Information Security Officer.
EigenQ: Alexander Truskovsky, Chief Information Security Officer.
Fable Security: Jacob Berry, Chief Information Security Officer.
Flock Safety: Chris Castaldo, Chief Information Security Officer (CISO).

The full Cybersecurity Vendors bench

What the company sells

Checkmarx sells Checkmarx Developer Assist, which delivers context-aware security guidance directly within a developer's IDE. Checkmarx Developer Assist helps prevent vulnerabilities before they reach the pipeline. As developers write or refine AI-generated and existing code, Checkmarx Developer Assist provides real-time detection, remediation and actionable insights.

Checkmarx Developer Assist comprises two main elements. The first is Realtime Scanning, which identifies vulnerabilities in realtime during IDE development of both human-generated and AI-generated code. Scanners run in the background whenever a developer edits a relevant file. Checkmarx scanners identify vulnerabilities and unmasked secrets in code. Checkmarx also identifies vulnerable or malicious container images and open source packages used in a project. Results are marked as Problems that are highlighted in the code and annotated with identifying icons.

The second element is Agentic-AI Remediation, in which a developer initiates an Agentic-AI session to receive remediation suggestions. Checkmarx feeds relevant information to the AI agent, which accesses the Model Context Protocol (MCP) server to gather data from proprietary databases and customized AI models. The AI assistant then uses this data to generate remediated code for the project. Developers can accept the suggested changes or chat with the AI agent to learn more about the vulnerability and fine-tune the remediation suggestion.

Checkmarx Developer Assist lets developers mark risks as Ignore, so that the risks are no longer shown in the IDE. A developer can Revive a risk at any time to resume showing that risk. Specialized realtime scanners identify vulnerable open source packages and container images, exposed secrets and IaC risks.

Checkmarx provides dedicated Developer Assist plugins for two types of coding platforms: IDEs (VS Code, Cursor, Kiro, Windsurf, Visual Studio and JetBrains) and AI Coding Agents such as Claude Code. In the coding agent plugin, Developer Assist steps in and remediates the risk as the assistant generates code. The plugin is currently available for Claude Code CLI, Copilot CLI and Cursor CLI.

The Checkmarx MCP Server is a secure gateway that bridges AI-powered development assistants with the Checkmarx security platform. The Checkmarx MCP Server defines the tools and APIs that allow AI agents such as GitHub Copilot, Cursor AI or Windsurf AI to interact with Checkmarx cloud services from within the IDE. Once the developer authenticates in the IDE, the MCP Service is automatically installed. The Checkmarx MCP Server authenticates the developer's IDE session with Checkmarx. The Checkmarx MCP Server exposes available Checkmarx tools and capabilities, such as code scanning, remediation and policy enforcement, as AI-accessible functions.

Checkmarx says the MCP standard lets any IDE-integrated AI assistant access Checkmarx engines and services, including SAST, SCA, IaC and API Security, through a unified interface. Checkmarx selected the MCP standard as the foundation for its agentic architecture. Checkmarx describes MCP as vendor-neutral and supported by a growing ecosystem of AI tools.

Developer Assist is available in three licensing models, each serving a distinct segment of Checkmarx customers.^[1]

Categories: Static application security testing (primary category)
Dynamic application security testing
Software composition analysis
Application security posture management
Compare Checkmarx with companies in the same category
Headquarters: Not established from our sources
Founded: 2006^[2]
Ownership: Owned by Hellman & Friedman since 2020^[2][4][5]
CISO on record: Kobi Sivilya, Chief Information Security Officer and Chief Information Officer (appointment announced on November 5, 2026)
Website: checkmarx.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Checkmarx Developer Assist^[5]
Delivers context-aware security guidance within the IDE. It combines realtime scanning with agentic AI remediation.
Checkmarx Developer Assist provides real-time detection, remediation and actionable insights as developers write or refine AI-generated and existing code. It comprises two main elements, Realtime Scanning and Agentic-AI Remediation. Plugins exist for IDEs and for AI coding agents.
Checkmarx MCP Server^[5]
A secure gateway that bridges AI-powered development assistants with the Checkmarx security platform.
The Checkmarx MCP Server defines the tools and APIs that allow AI agents to interact with Checkmarx cloud services from within the IDE. The MCP Service is installed automatically once the developer authenticates in the IDE.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Checkmarx's categories, then alphabetical. A list from the record, never a ranking.

On static application security testing, Checkmarx competes with Veracode, GitLab, Kiuwan, Semgrep, AISLE, GitHub Advanced Security, OpenText, Arnica, Black Duck, Invicti and 13 more.
On dynamic application security testing, Checkmarx competes with Invicti, Beagle Security, Detectify, StackHawk, Black Duck, Mend.io, Veracode, Fleuret AI, 42Crunch, Astra Security and 7 more.
On software composition analysis, Checkmarx competes with Black Duck, Mend.io, Endor Labs, Snyk, Sonatype, Arnica, Invicti, OX Security, Phoenix Security, Veracode and 10 more.
On application security posture management, Checkmarx competes with Arnica, OX Security, Phoenix Security, Apiiro, Cycode, Prime Security, Legit Security and Raven.io.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

G2 · 4.2 out of 5^[4]seen November 3, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]checkmarx.comCheckmarx · checkmarx.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[2]Hellman friedman completes acquisition of checkmarxCheckmarx · checkmarx.com · published April 16, 2020 · Tier A: the company, a regulator or a filing
[3]Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 AttackThe Hacker News · published April 27, 2026 · Tier B: trade or business press
[4]Checkmarx Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
[5]About Checkmarx Developer AssistCheckmarx · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[6]Checkmarx Fusion: Hybrid Scanning Delivers the Most Complete Vulnerability Detection AvailableGlobeNewswire · published July 28, 2026 · Tier A: the company, a regulator or a filing

Last verified November 2, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 3, 2026 from the references above.

Work for Checkmarx? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Questions CISOs ask about Checkmarx

Who is the CISO of Checkmarx?: Kobi Sivilya is the current Chief Information Security Officer and Chief Information Officer of Checkmarx on CISO Tribune's record, appointed on November 5, 2026.
How many security-leadership moves has CISO Tribune tracked at Checkmarx?: CISO Tribune has tracked 1 move at Checkmarx since November 5, 2026.
When was Kobi Sivilya appointed at Checkmarx?: Kobi Sivilya's appointment as Chief Information Security Officer and Chief Information Officer of Checkmarx was announced on November 5, 2026, per checkmarx.com (company announcement).
Where did Kobi Sivilya work before becoming Chief Information Security Officer and Chief Information Officer of Checkmarx?: The record of the appointment gives Kobi Sivilya's previous role as CISO and VP of IT at Outbrain.
Who are the security chiefs at other Cybersecurity Vendors organizations?: On CISO Tribune's record they include Alex Stamos at Cognition, Lane Sullivan at Concentric AI, Aman Sirohi at Cyberhaven and Drew McCombs at Cylerity.
What does Checkmarx sell?: Checkmarx sells Checkmarx Developer Assist and Checkmarx MCP Server. Checkmarx Developer Assist: Delivers context-aware security guidance within the IDE. It combines realtime scanning with agentic AI remediation. Checkmarx MCP Server: A secure gateway that bridges AI-powered development assistants with the Checkmarx security platform.
Who does Checkmarx fit?: From its own pages, Checkmarx sells mainly to developers who write code in IDEs and with AI coding agents. Its documentation describes plugins for several IDEs and for AI coding agents. Checkmarx offers Developer Assist in distinct licensing models, each serving a distinct segment of its customers, including SAST on-premises accounts.
How does CISO Tribune file Checkmarx?: CISO Tribune files Checkmarx under Static application security testing, with Dynamic application security testing, Software composition analysis and Application security posture management as secondary categories.
When was Checkmarx founded?: Checkmarx was founded in 2006.
Who owns Checkmarx?: Checkmarx is owned by Hellman & Friedman, which acquired it in 2020.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.