Checkmarx - Products

For Code Perfection

CxViewer is used by developers, team leaders and management for obtaining audit results and reviewing vulnerabilities and attacks patterns within the lines of code. It enables high-level viewing of CxAudit and CxDeveloper results, including flow analysis, vulnerability representation within the code, and filtering and sorting vulnerable lines of code. CxViewer is used as complementary software to CxAudit and CxDeveloper. Using the same user-friendly graphic interface as all of Checkmarx Cx products, CxViewer allows developers to load specific reviewed projects and investigate the detailed results of security vulnerabilities, business logic attacks, and best practices compliance

Reviewing Results

Once a code is reviewed by either an external or internal auditor or by a team leader, the results of the security code review are archived by project name and review date. It is then the task of the developers to go back to the keyboard and make the required changes according to the review findings. CxViewer turns the difficult task of reviewing audit results, understanding security vulnerabilities and making the desired correction a much simpler process. CxViewer presents the entire code, including highlighted vulnerable code lines and attack flows, so that developers can familiarize themselves effortlessly with the project and make the right corrections efficiently and rapidly.

Fixing the Code

Developers browse the user-friendly CxViewer screen and step-by-step go over reviewed code in order to locate and make the desired corrections. In a virtually ZERO false-positives audit result, developers find the vulnerabilities directly in the code with step-by-step flow representation. This allows them to identify the vulnerability at the source and follow its root throughout the entire code. The attack flow enables not only the rapid correction of the flaws, but training and education for the developers, for future programming

Report Reviewing

CxViewer is used by management to project review audits of different development teams. With a succession of just a few clicks, they can easily select a project and an audit review. CxViewer allows both browsing the results using the all-familiar Cx interface, or producing a comprehensive report for reviewing, publishing or printing.