Checkmarx LLM Scanner

Checkmarx LLM Scanner inspects code and artifacts bundled inside AI model packages before deployment and reports findings in Checkmarx One.

Verified 11 Nov 2026

Facts

Source per value

AI-SPM and AI-BOM, as documented What the vendor documents for this capability.: Produces deterministic AI-BOM evidence with model provenance, findings, and risk posture. 1
Model and supply-chain scanning, as documented What the vendor documents for this capability.: Static scanning finds unsafe deserialization, command execution, trust-remote-code, and malicious pickle patterns without executing models. 1
Frameworks mapped Security and compliance frameworks the vendor explicitly maps its testing, controls or reports to. A mapping, not a certification.: AI-BOM evidence supports NIST AI RMF, EU AI Act, and ISO 42001 obligations. 1
Integrations and platforms Named clouds, models, development tools, protocols or security tools the product supports.: Scans Hugging Face, Git repositories, local directories, and internal registries; CLI exports SARIF, JSON, YAML, and text. 1

Cisco AI Defense: Cisco AI Defense gives enterprises discovery, model validation, runtime protection, and access controls for AI they build and use.
CrowdStrike Falcon AI security: CrowdStrike provides enterprise AI agent discovery, identity controls, supply-chain protection, and gateway response through its Falcon platform.
Knostic: Knostic secures enterprise coding assistants and agent endpoints with runtime action controls, posture management, and agent supply-chain scanning.
Oligo Security: Oligo protects enterprise AI runtime infrastructure, open-source models, LLM frameworks, and agent workflows using execution-level visibility and response.

Tell us what you need once. We send it to matching vendors and they reply to you directly.