Checkmarx Launches CheckAI Plugin for ChatGPT to Detect and Prevent Attacks Against ChatGPT-Generated Code

Checkmarx’ industry-first AI AppSec plugin works within the ChatGPT interface to protect against new attack types targeting GenAI-generated code

Checkmarx, the global leader in application security solutions, today launched its CheckAI Plugin for ChatGPT, the first plugin to detect and prevent attacks on ChatGPT-generated code. The plugin protects developers and security teams from malicious open source packages and dependencies while using ChatGPT.

The fact that open source and GenAI-generated code present both significant opportunities and new vulnerabilities is the best example of the decision-making tension that CISOs experience, according to Checkmarx CEO Sandeep Johri.

“Checkmarx has been a pioneer in enterprise application security, and with GenAI playing an increasing role in application development, we’re pleased to provide the first solution to help protect against the new generation of attacks already emerging. CISOs can rest assured that CheckAI's superior developer experience will meet AppSec standards while accelerating application delivery”, Johri said.

CISOs and application security leaders can ensure development teams use time-saving GenAI tools like ChatGPT while adhering to AppSec standards with the CheckAI Plugin for ChatGPT and Checkmarx Supply Chain Threat Intelligence.

Within a highly productive environment featuring a superior developer experience, development teams can readily:

  • Scan their GPT-generated code for vulnerabilities within the ChatGPT interface

  • Receive instant feedback on potential vulnerabilities or validation of open source packages

  • Employ protection against malicious open source packages

“With GenAI disrupting how we develop software we need to make sure we provide the right tools and governance to our developers for utilizing GPT. Nobody is slowing down.”  said Sharon Uda, VP of Engineering at CHEQ. “For CHEQ, as the leader in protecting marketing teams from the hazards of GenAI, protecting our developers is as important. With the CheckAI Plugin for ChatGPT, we’re able to protect our developers against the new types of attack that GenAI brings to the table.” 

Checkmarx AppSec security researchers found an OpenAI signup vulnerability in December 2022 that could have allowed unlimited credit on new accounts. OpenAI quickly fixed the vulnerability reported by the team. OpenAI develops safe and powerful AI for humanity.

The ChatGPT plugins beta, available to all ChatGPT Plus users, includes the CheckAI Plugin, which protects against malicious packages and open source dependencies. Future releases will include prompt protection, IaC validations, API validation, and more.

Checkmarx One, the most comprehensive application security platform, and Supply Chain Threat Intelligence for detecting malicious open source packages power CheckAI. Checkmarx One is scalable and integrates with developers' tools and development environments.

Have you got a news tip for our journalists? Share it with us anonymously here.

Send press releases to [email protected]. Other ways to contact us. Editorially, we may rewrite headlines and descriptions.

Recommend Redwires AU: Accessible News For Young Cybersecurity Aussies

Redwires AU provides Young Australians with easily accessible, curated cybersecurity news.

Before you go..

You can get RedWires AU for free right now. Your donation, no matter how big or small, will help us keep doing honest journalism.

The readers of Redwires AU are the engine that drives our publication. Add your support to the effort to create a sustainable future for journalism that does not make compromises in the AU.

In the world we live in now, accurate and thorough reporting and analysis are becoming more and more critical. To stop the spread of false information, it's essential that everyone in Australia has access to good reporting.

The Redwires AU contributes to society by opening up access to information and resources for all people, rather than just a select few.

Our only goal is to educate the general public more thoroughly. If you believe in what we're trying to accomplish here, please consider making a contribution right away to ensure our success in the years to come.

Upgrade your subscription to get the most out of it. Join the growing number of people around the world who believe in the power of independent media.