IntelliJ IDEA is an IDE that aims to give Java and Kotlin developers everything they need out of the box, including a smart code editor, built-in developer tools, framework support, database support, web development support, and much more.
$16.90
per month
Veracode
Score 9.2 out of 10
Mid-Size Companies (51-1,000 employees)
Veracode is a software security firm that identifies flaws and vulnerabilities across the software development lifecycle. Veracode’s Software Security Platform uses advanced AI algorithms trained on vast datasets of code, for more precise identification and rectification of security flaws.
N/A
Pricing
IntelliJ IDEA
Veracode
Editions & Modules
For Individual Use
$16.90
per month
All Products Pack (For Individual Use)
$28.90
per month
For Organizations
$59.90
per month
All Products Pack (For Organizations)
$77.90
per month
No answers on this topic
Offerings
Pricing Offerings
IntelliJ IDEA
Veracode
Free Trial
Yes
Yes
Free/Freemium Version
Yes
Yes
Premium Consulting/Integration Services
No
Yes
Entry-level Setup Fee
No setup fee
No setup fee
Additional Details
Yearly subscriptions:
For Individual Use – $169 /1st year, $ 135 /2nd year and $ 101 /3d year onwards
All Products Pack (For Individual Use) – $289 /1st year, $ 231 /2nd year and $ 173 /3d year onwards
Veracode has been longer on the market and has build the good reputation. We appreciate that they constantly improving the quality of their software and adding new features.
Veracode has a very good integration within its products, which makes it easy for a developer. Veracode helps in providing support both actively and through resources on their platform to remediate and fix the issues found in one's application. The reporting section being …
Snyk and WhiteSource have fewer features. WhiteSource UI is as bad as Veracode; Snyk is integrated better in GitHub but provides decent results only for JavaScript. The best one for reporting and quality of results across languages is Meterian, which does not appear in this …
Have also evaluated services by GitHub and Snyk. I will say that we continue to use Veracode because of its brand recognition and vendor status in the financial services industry. However if my current company was not operating in this industry I would be tempted to use the …
1. We need only a few features and detailed reporting for static analysis. Veracode is enough to suit that need. 2. We have not used other products since 2013. So Veracode became de-facto standard for us.
This is a superb tool if your project involves a lot of backend development, especially in Java/Spring Boot and Kotlin. The support for the front end is great as well, but some developers may prefer to use the GitHub copilot add-on. I especially love using the GitHub copilot add-on. It may be less appropriate if your project requires heavy use of HotSwaps for backend debugging, as sometimes the support for that can be limited.
Veracode is well suited for development applications that can be made more secure right from the beginning. There is an excellent extension in Visual Studio that scans code from the IDE. However, it is less appropriate or incompatible with scanning SOAP or WSDL APIs. It supports only REST APIs.
Unit testing: Fully integrated into IntelliJ IDEA. Your unit tests will run smoothly and efficiently, with excellent debugging tools for when things get tricky.
Spring integration: Our Spring project using Maven works flawlessly in IntelliJ IDEA. I know firsthand that Apache is also easily and readily supported too. The integration is seamless and very easy to set up using IntelliJ IDEA's set up wizard when importing new projects.
Customization: IntelliJ IDEA comes out of the box with a bunch of handy shortcuts, as well as text prediction, syntax error detection, and other tools to help keep your code clean. But even better is that it allows for total customization of shortcuts you can easily create to suit your needs.
Veracode performs Static Application Security Testing (SAST) very well by finding flaws in the code using entry points so that it tests for everything a user can interact with in the application. This approach is very helpful for avoiding a lot of false positives early on.
Veracode performs SCA automatically on every SAST scan, so that we don't have to manually scan the application again for SCA scans.
Veracode integrates very well with the ticketing tools, so that it becomes very easy to track every finding and its status within our ticketing tool.
VS Code is maturing and has a Scala plugin now. The overall experience with VS Code - for web development at least - is very snappy/fast. IntelliJ feels a bit sluggish in comparison. If that Scala plugin for VS Code is deemed mature enough - we may not bother renewing and resort to the Community Edition if we need it.
At this time, and we just renewed a month ago, I dont see any products out there overall that can offer what Veracode does. Yes, its not cheap by any means, but for the money its the best application security scanning tool out there.
There is always room for improvement, but I haven't met any IDE that I liked more so far. Even if it did not fit a use case right out of the box, there is always a way to configure how it works to do just that.
- Almost no setup required and easy to configure - Very easy to use, intuitive UI with integrated analytics and learning portals. - Seamless to review the results, triage them, generate reports. - Security progression of the product/application is tracked via successive scans. - Privileges/Roles nicely fine grained and tightly controlled to let teams "view" only their products.
Customer support is really good in the case of IntelliJ. If you are paying for this product then, the company makes sure that you will get all the services adequately. Regular update patches are provided to improve the IDE. An online bug report makes it easier for the developers to find the solution as fast as possible. The large online community also helps to find the various solutions to the issues.
Overall, Veracode support is helpful, community support is great, and documentation is available for self-service. Our Customer Success Manager is very helpful and reaches out regularly to see if we need assistance. We have not utilized many of the other resources offered by Veracode, however, in the future we would like to leverage secure coding training for our Development teams.
This installs just like any other application - its pretty straight forward. Perhaps licensing could be more challenging - but if you use the cloud licensing they offer its as simple as having engineers login to the application and it just works.
We use it as a SAS service, so really just getting our teams to mold the use of Veracode into their SDLC has been a process of years in the making. It comes down to what your teams are ready and willing to accept and change. Management is key in getting their groups on board with using it regularly. If it doesnt have management backing, your security teams have little to no influence in getting this process off the ground fully.
Eclipse is just so old, like a dinosaur, compared to IntelliJ. There are still formats that Eclipse supports better, especially old and/or propriety ones. Still, most of the modern software development needs can be done on IntelliJ, & in a much better way, some of them are not even supported on Eclipse.
Veracode is slower with scan results however the flaws discovered and sites crawled are almost the same. Rapid7 InsightAppSec only does dynamic scans. Veracode did find more links on a site crawl. Rapid7 InsightAppSec has more out of the box reports than Veracode. Both integration to DevOps tools were striaghtforward.
Veracode's platform has had a very positive impact on our security posture, paving the path towards having coverage monitored automatically on hundreds of internal applications throughout the development lifecycle.
Veracode's platform has also had a very positive impact on improving the security knowledge of our development team, providing meaningful feedback as well as training options to reduce mitigation time and help to prevent flaws before they are created.
