ComplyCube vs. Veracode

Based on our experience with the platform, ComplyCube's verification engine is highly effective in verifying our customers' identities and risk profiles, making it well-suited for large-scale customer onboarding projects. ComplyCube also covers a high number of jurisdictions and industries. Still, it's important to consider your organization's specific needs and requirements to determine whether it's the right fit for you.

Veracode helped us our team's developers in saving time significantly. For instance, if I take a library and assume it's going to work until it reaches QA or UAT, where we find out there's a vulnerability, that can require extensive effort for code refactoring or redesigning; Veracode helps prevent that before the pull request is merged.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Our previous vendor's solution lacked many of the enterprise features we required. ComplyCube was able to address all of these deficiencies. Not only did it provide us with the enterprise-level features we required, but it also proved to be more compliant with AML/KYC regulations.
• The platform was easy to use for both our end customers and back-office teams, which was a significant advantage in terms of user adoption and productivity.

• It is good at recommending fixing issues with third-party dependencies used in application code with detailed version information and knowing which version fixes what.
• It has a very nice interface for triaging flaws. One can sort the vulnerabilities found in code from Very Likely to be exploited to least likely to be exploited.
• There is a collections feature that allows us to group together groups of application profiles belonging to the same suite of applications.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Though I have no major complaints, I do have a minor suggestion for improvement. It would be beneficial to have a native BI connector for Tableau to facilitate MI extraction. Currently, we use ComplyCube's API in Tableau Dashboards, which is already an improvement over our previous system. However, a native connector would further enhance the speed and efficiency of our data exploration.

• Scan results stability: from one scan to another, additional flaws appear whereas code did not change.
• Entry points selection: hard to be sure selection is optimal, should be automatized or hidden.
• Branches management: we currently use sandboxes to scan different branches of our software. Would be good to have real branches management.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

My team and I are pleased with ComplyCube - it helped us with the following:

• Automate customer and corporate onboarding
• Reduce operational risk and manual tasks
• Streamline our processes across multiple geographies
• Provides insights and helpful information on our corporate customers

While doing all the above, they've demonstrated excellent service, which is why we renewed with ComplyCube and will keep doing in the future, should they maintain the same service quality

At this time, and we just renewed a month ago, I dont see any products out there overall that can offer what Veracode does. Yes, its not cheap by any means, but for the money its the best application security scanning tool out there.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

ComplyCube has been very user-friendly and easy to navigate overall. The interface is intuitive and the platform is designed with the end-user in mind, which makes it easy to use even for those who are not particularly tech-savvy. The platform is also customizable, which allows us to tailor it to our specific compliance needs.

- Almost no setup required and easy to configure - Very easy to use, intuitive UI with integrated analytics and learning portals. - Seamless to review the results, triage them, generate reports. - Security progression of the product/application is tracked via successive scans. - Privileges/Roles nicely fine grained and tightly controlled to let teams "view" only their products.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

We have not had a single unplanned downtime or issue since we've partnered with ComplyCube.

Veracode has always been up and available to us.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

ComplyCube checks are super fast. Their SLAs are public and can confirm most checks take seconds. It's one of the fast identity verification vendors we've ever worked with.

At this point, it runs well and mostly in a timely fashion. Dynamic scans take days but this may be a config issue still to be resolved.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

The ComplyCube support team has been and continues to be very responsive, knowledgeable, and helpful whenever we have any questions or require assistance regularly. We currently work with several vendors across our various global operations, but I would easily single out ComplyCube's support as being the best my team and I dealt with

Overall, Veracode support is helpful, community support is great, and documentation is available for self-service. Our Customer Success Manager is very helpful and reaches out regularly to see if we need assistance. We have not utilized many of the other resources offered by Veracode, however, in the future we would like to leverage secure coding training for our Development teams.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

Training was conducted via MS Team, and the instructor was helpful and demonstrated strong knowledge in the AML and platform space.

The training was on point in terms of depth and covered all the aspects we were after. The platform provides a range of resources to help new users get up to speed, including training videos, documentation, and live calls.

Implementation was hassle-free as the API well document and support were on hand.

We use it as a SAS service, so really just getting our teams to mold the use of Veracode into their SDLC has been a process of years in the making. It comes down to what your teams are ready and willing to accept and change. Management is key in getting their groups on board with using it regularly. If it doesnt have management backing, your security teams have little to no influence in getting this process off the ground fully.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

ComplyCube presented itself as the most comprehensive solution for our KYC needs - their services are granular across all their services. All the vendors assessed tended to offer granularity on a couple of features but were quite basic in other areas. As we wanted to reduce the number of external vendors and relations, a one-stop shop like ComplyCube was ideal.

Veracode is slower with scan results however the flaws discovered and sites crawled are almost the same. Rapid7 InsightAppSec only does dynamic scans. Veracode did find more links on a site crawl. Rapid7 InsightAppSec has more out of the box reports than Veracode. Both integration to DevOps tools were striaghtforward.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

No idea

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

We have a customer that uses our integration of ComplyCube, and they perform millions of checks per year across a number of countries.

It meets our needs.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• It was all positive, given the startup program credits received!
• It saved us time too, as our manual processes have now been automated, which frees up the team to do other tasks
• The onboarding experience had evidently improved our conversion rates

• Positive: Scanning all our applications on Veracode provides us an overview of our cyber security posture for the organization as a whole.
• Positive: Performing the SAST, SCA and DAST scanning for all the applications at the early stages of the SDLC helps us identify and mitigate security vulnerabilities early, reducing the risk of data breaches and cyber-attacks.
• Negative: Sometimes Veracode SAST scanner closed and reopens some findings, leading to reliability issues on the scanner itself.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info