Checkmarx
 | |
| Company type | Private |
|---|---|
| Industry | Software Security, Application security |
| Founded | 2006 |
| Founder | Maty Siman (CTO), Emmanuel Benzaquen (Former CEO) |
| Headquarters | Atlanta, Georgia, US |
Key people | Sandeep Johri (CEO) |
| Website | checkmarx.com |
Checkmarx is an enterprise application security company specializing in static application security testing (SAST) headquartered in Atlanta, Georgia in the United States.[1]
Background
[edit]Before founding Checkmarx, Maty Siman worked in the Mamram unit of the Israeli Defense Forces (IDF) and later in the Matzov unit. Then he worked a two years term until February 2006 as an advisor at the Prime Minister's Office.[2]
History
[edit]Checkmarx was founded in 2006 by Maty Siman, the company's CTO, and Emmanuel Benzaquen, former CEO (2006 – 2023), and has over 900 employees.[3][1] Sandeep Johri has been serving as the CEO since February of 2023.
In 2018, it also acquired Custodela, a company that provides software security program development as well as consulting services.[4][5]
Checkmarx was acquired in April 2020 by Hellman & Friedman, a private equity firm with headquarters in San Francisco.
In August 2021, Checkmarx acquired Dustico, a software that detects backdoors and malicious attacks in the software supply chain.[6]
Application Security Research
[edit]Checkmarx's research department is known for uncovering technical vulnerabilities in popular technologies, software, applications, and IoT devices.[3]
In November 2019, the company's security research team uncovered a number of vulnerabilities affecting Google and Samsung smartphones. The vulnerabilities allowed an attacker to take remote control of smartphone apps, giving them the ability to take photos, record video and conversations, and identify the phone's location. The research team submitted a report to the Android security team at Google and continued to provide feedback as the vulnerabilities were addressed.[7]
In January 2020, Checkmarx detailed multiple security vulnerabilities with the Trifo Ironpie robot vacuum.[8] The company has also uncovered issues with Amazon Alexa,[9][10] Meetup,[11] and Tinder,[12][13] among others.
In August 2022, Checkmarx researchers found vulnerabilities in the Ring Android app, which could have allowed malicious applications to be installed on the user's phone to expose personal data, geolocation, and camera recordings.[14]
Funding
[edit]Checkmarx's early investors include Salesforce, which remains a partner as Checkmarx provides security reviews for the Salesforce AppExchange.[15][16][17] In 2015, U.S. private equity and venture capital firm Insight Partners acquired Checkmarx for $84 million.[17][1][3]
In April 2020, private equity firm Hellman & Friedman, alongside private investment firm TPG,[18] acquired Checkmarx for $1.15 billion.[1][3][19] After the acquisition, Insight Partners retained a minority interest in the company.[1][20]
See also
[edit]References
[edit]- ^ a b c d e "Hellman & Friedman Acquires Checkmarx for $1.15B". Dark Reading. 16 March 2020. Retrieved 2024-05-06.
- ^ Bar-Yosef, Noa (November 20, 2012). "Security Startups: In Focus With CheckMarx Founder Maty Siman". SecurityWeek.
- ^ a b c d "Insight Partners sells security firm Checkmarx to Hellman & Friedman for $1.15B". TechCrunch. 16 March 2020. Retrieved 2020-09-01.
- ^ Wenkert, Amarelle (2018-11-08). "Cybersecurity Company Checkmarx Buys Ontario-based Custodela". CTECH - www.calcalistech.com. Retrieved 2020-09-09.
- ^ "Checkmarx Acquires Custodela". Dark Reading. 8 November 2018. Retrieved 2020-09-09.
- ^ "Checkmarx acquires open-source supply chain security startup Dustico". TechCrunch. 5 August 2021.
- ^ "Bugs From Big Tech Beg the Question: Should You Cover Your Smartphone Camera?". Fortune. Retrieved 2020-09-04.
- ^ Hautala, Laura. "Hackers can peep through this smart vacuum's camera, research shows". CNET. Retrieved 2020-09-04.
- ^ "Turning an Amazon Echo Into a Spy Device Only Took Some Clever Coding". Wired. Retrieved 2020-09-02.
- ^ Ng, Alfred. "Amazon Alexa flaw would have let hackers listen in". CNET. Retrieved 2020-09-02.
- ^ Winder, Davey. "Meetup Security Flaws Exposed 44 Million Members To Data Loss And Payment Threat". Forbes. Archived from the original on August 4, 2020. Retrieved 2020-09-04.
- ^ "Tinder's Lack of Encryption Lets Strangers Spy on Your Swipes". Wired. Retrieved 2020-09-02.
- ^ Murnane, Kevin. "Amazon's Alexa Hacked To Surreptitiously Record Everything It Hears". Forbes. Retrieved 2020-09-02.
- ^ "Ring patched an Android bug that could have exposed video footage". arstechnica.com. KEVIN PURDY. 18 August 2022. Retrieved 18 August 2022.
- ^ Scheer, Matt (2020-07-27). "Security Checks When Submitting Apps to the Salesforce ISV Team". crmscience. Retrieved 2020-11-13.
- ^ "Checkmarx Raises Funding From Salesforce.com, Ofer Hi-Tech". TechCrunch. Retrieved 2020-09-04.
- ^ a b "Insight Venture Partners to buy Israeli co Checkmarx - Globes". en.globes.co.il (in Hebrew). 2015-06-17. Retrieved 2020-09-09.
- ^ "In $1.15 Billion Deal, Hellman & Friedman Acquires DevOps Firm Checkmarx | Israel Defense". www.israeldefense.co.il. 17 April 2020. Retrieved 2020-10-21.
- ^ "3 Israeli cybersecurity firms win Black Unicorn Awards". ISRAEL21c. 2019-08-22. Retrieved 2020-10-21.
- ^ Novinson, Michael (2020-06-24). "The Biggest 10 Cybersecurity Acquisitions Of 2020 (So Far)". CRN. Retrieved 2020-09-04.