Nmap vs Veracode

• NMap provides a very fast and a very thorough network "sweep" that allows you to quickly map out exactly what's on your network.
• NMap is highly configurable. The "canned" choices are very good in most instances, but using various switches and options, you can create a very specific scan and get exactly the results you're looking for.
• NMap is easy to use. Even a new administrator will be able to use the graphical version (Zenmap) with efficiency right away.

Read full review

• The tool seems to have been build for automation.
• As a security engineer, I prefer the types of findings discovered through DAST or IAST since I can easily verify findings, but the SAST findings may be easier for the developers since it points to the area of code.
• While it's hard to get developers to take advantage of the consultation calls, I like the fact we can get a highly technical person to walk us through any type of Veracode question.

Read full review

• exporting, There's a serious lack of ability to export the information in a readable format to present to VPs and such. I always find myself doing a lot of data massaging to get it in a pretty format
• some scans can trigger sensitive IDS/IPS
• SYN scans can be particularly aggressive and cause problems on remote systems.

Read full review

• Although an improvement to what was there previously, the Analytics section using Looker, could still use some improvement. It does seem that what Veracode has deployed is a very limited version of Looker. While helpful and useful, there seems to be so much more that Looker does (such as dynamic querying), however, the version that Veracode employs doesn't seem to offer this.
• More user control of administrative functions such as user adding/deleting. Veracode still uses a 'soft delete'/'hard delete' functionality. This can become cumbersome for self-user-administration when a deleted user has to be re-added. A support call is then necessary to have this done.
• Their idle timeout process needs work. While using the Looker tool, you must save your work every few minutes, as their 'Shark-attack-like' idle timeout will sneak up on you and redirect you away in an instant causing you to lose any unsaved work.

Read full review

• Positive return as it's open-source (free) on all OS's.
• If a person is not used of the command line there are a ton of front ends that make it point-and-click so the learning curve is good. That cuts down on time and manpower.

Read full review

• As I already stated, the cost per application is very high which makes the use of Veracode too expensive for many of out applications.
• The analysis report is accepted by our clients as a proper SSAT report.
• Most of out competition does not perform any type of SSAT on the applications they create. This is something we offer and be the only one out there doing this type of testing.

Read full review