• TRIAGE
  • REMEDIATION
  • HUMAN
  • VERIFICATION

How to fix code vulnerabilities with your AI

Connect Checkmarx to your AI client to pinpoint security flaws and find the best places to apply patches.

Ask AI about this page

Short answer

How do I fix code vulnerabilities with my AI?

Your AI pulls scan results and uses Best Fix Location analysis to find the most effective patch points. You get the exact file and line number for every flaw. This breakdown shows how to move from detection to remediation.

The outcomes.

Where your security data lands.

The AI organizes scan data into actionable outcomes.

TRIAGE

Identified vulnerabilities

The AI pulls scan results to show you exactly what's broken. You see the specific flaws waiting for attention.

REMEDIATION

Optimal patch locations

Using Best Fix Location analysis, the AI finds the single most efficient spot to fix a bug. This prevents you from patching the same issue in multiple places.

HUMAN

Manual code review

The AI identifies the flaw and the best fix, but you still decide if the patch is safe to merge. You maintain final control over the codebase.

VERIFICATION

Confirmed fixes

Once you apply a patch, you can trigger new scans to ensure the vulnerability is gone. The AI tracks the status of the fix.

The workflow

What your AI does when a scan is ready.

The AI handles the heavy lifting of parsing scan data and calculating fix locations.

  1. Fetch scan data

    The AI pulls the latest security findings from your Checkmarx project.

    get_scan_results

  2. Locate best fixes

    The AI looks for the most efficient place to apply a patch to resolve a vulnerability.

    list_bfl

  3. Map flaws to code

    The AI uses the scan data to point you to the specific file and line number.

    get_scan_results

  4. Suggest remediation

    The AI combines the scan findings with the best fix locations to suggest a path forward.

    get_scan_resultslist_bfl

Try it

Copy these to start.

Use these prompts to kick off your security workflow.

Starting points

Swap out the project names and scan IDs with your actual Checkmarx data.

Checkmarx Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_thwJCCvAxQj2dRXly3vkJnbbHvTu7jJNcAvioyvo/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Checkmarx capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "checkmarx-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_thwJCCvAxQj2dRXly3vkJnbbHvTu7jJNcAvioyvo/mcp"
    }
  }
}
Copy into chat04

  • Show me the latest scan results for the 'payment-gateway' project.

  • Where is the best place to fix the SQL injection vulnerability found in the 'auth-service' scan?

  • List the best fix locations for all high-severity issues in my current scan.

  • Based on the scan results for 'api-server', which vulnerabilities have a Best Fix Location available?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Checkmarx once, then ask.

One connection gives your AI access to your security scans. Your credentials stay encrypted and secure.

Connect Checkmarx to your AI

FAQ

How this task behaves

  • 01

    Can the AI automatically apply the code patches?

    No. The AI identifies the best location for a fix, but you must manually write and commit the code.

  • 02

    Does the AI delete any scan data in Checkmarx?

    No. The AI only reads scan results and fix locations. It cannot delete or modify your Checkmarx data.

  • 03

    Can I use this to run new scans?

    No. This MCP is designed to read existing scan results and fix locations, not to trigger new scan jobs.

  • 04

    How does it know which fix is the most efficient?

    It uses the Best Fix Location analysis provided by Checkmarx to find the most effective point of remediation.

  • 05

    Can the AI see my entire codebase?

    No. The AI only sees the specific code snippets and locations identified within the Checkmarx scan results.

  • More questions about Checkmarx? See everything the Checkmarx Connector can do

Connect Checkmarx to Claude, Cursor, ChatGPT & more