1C-Bitrix Secure Integrations: AI audit for Marketplace modules

The 1C-Bitrix information security and incident monitoring center expanded the Secure Integrations program. An AI-assisted code analysis layer was added to checks for third-party Marketplace solutions.

The Marketplace hosts thousands of modules, apps, and templates for 1C-Bitrix Site Management. The program already included signature-based automation, expert review, a public registry of vulnerable versions (including RSS), and incident response. AI audit complements formal rules where contextual code understanding helps.

Findings are classified with CWE and OWASP Top 10; severity uses CVSS. Fixing issues remains the module developer’s responsibility; the platform records the problem, deadlines, and user-protection steps. Teams doing Bitrix development and installing third-party modules should watch the registry and update vulnerable versions promptly.