Sellsy vs. Veracode

We like sellsy. Its not perfect and as other users have pointed out, there is and always will be, room for improvement.

If you require deep integration with Google apps and Microsoft Office 365, then Sellsy may not be for you. Sellsy just about manages to work with google in so far that it can sync contacts, calendar, sales docs and incoming email with google. There is currently no way to make sent email appear in the sent items section of sellsy unless you compose the email within the sellsy app. The O365 integration is not nearly as powerful as sellsy does not sync sellsy contacts or calendar with microsoft (in its current form).

I believe that one of the primary functions of any business management app should be the capability to centrally manage all of a company's business clients, contacts etc. and sync this data to all employee accounts with the 2 biggest players for business email (Microsoft and Google) as a minimum. This data should never be an island stored only on 1 application. The Discovery that sellsy does not currently sync contacts and calendars with O365 was a disappointment. If Sellsy started supporting exchange sync for Microsoft Office 365 we would immediately dump google and switch over. In fact Sellsy is the only reason we continue to use Gapps as we need our contacts and calendars synced to our mobile devices.

We have built up a list of small little things that do not work as expected since we started using sellsy and continually pass them on to the development team. Many are small trivial things from an engineering perspective but are still annoying nonetheless, especially to users who wish to get the job done. Employees are easily frustrated if they have to fight with software to do certain tasks. Annoyances in the user experience (no matter how small) can lead to lost productivity which in turn costs money in the business world. However based on our experience with Sellsy support we believe that they do listen carefully to their customers concerns and are on the path to deliver a quality experience to their customers through the process of frequent updates to the software. You can easily establish how good a SAAS provider is by measuring their ability to fix problems soon after they are initially reported.

In simple terms Sellsy is an incredibly feature rich application and is way ahead of the competition. It represents good value for money and is backed up by free support.

Veracode helped us our team's developers in saving time significantly. For instance, if I take a library and assume it's going to work until it reaches QA or UAT, where we find out there's a vulnerability, that can require extensive effort for code refactoring or redesigning; Veracode helps prevent that before the pull request is merged.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Appealing Design
• Easy to prepare invoices and send them
• Good tracking system
• Friendly support staff

• It is good at recommending fixing issues with third-party dependencies used in application code with detailed version information and knowing which version fixes what.
• It has a very nice interface for triaging flaws. One can sort the vulnerabilities found in code from Very Likely to be exploited to least likely to be exploited.
• There is a collections feature that allows us to group together groups of application profiles belonging to the same suite of applications.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Training. The only real issue I have with Sellsy is that its got so many features its hard to understand them all. I looked for training videos and they are all in French. Thats a big problem for a guy who grew up in NJ.
• I would embed training videos directly into the software. This way as you add services, you get a full tutorial immediately.

• Scan results stability: from one scan to another, additional flaws appear whereas code did not change.
• Entry points selection: hard to be sure selection is optimal, should be automatized or hidden.
• Branches management: we currently use sandboxes to scan different branches of our software. Would be good to have real branches management.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

Sellsy ticks the most boxes for us. While it could still do a lot of things better there is no other single app that offers the same spectrum of features at a comparable price for SMEs.

At this time, and we just renewed a month ago, I dont see any products out there overall that can offer what Veracode does. Yes, its not cheap by any means, but for the money its the best application security scanning tool out there.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

There is room for improvement.

- Almost no setup required and easy to configure - Very easy to use, intuitive UI with integrated analytics and learning portals. - Seamless to review the results, triage them, generate reports. - Security progression of the product/application is tracked via successive scans. - Privileges/Roles nicely fine grained and tightly controlled to let teams "view" only their products.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

We have not yet experienced any down time with sellsy.

Veracode has always been up and available to us.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

Sellsy is slow to load pages for us. Sometimes waiting a few seconds. This could be due to our geographical location.

At this point, it runs well and mostly in a timely fashion. Dynamic scans take days but this may be a config issue still to be resolved.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

Based on our experience. We have submitted a large amount of tickets and they have proven the Sellsy development team have the ability to respond fast and implement changes reasonably quickly. (Updated July 2015)
It took sellsy a number of weeks to solve an issue with the billable hours section of their application. This delayed us from being able to invoice our client for completed works. Lots of small things like email tracking timestamps have never been fixed even though we highlighted this issue months ago. Though small it is growing more and more frustrating to be reminded every time we try to see what time a client read or opened an email from us.

Overall, Veracode support is helpful, community support is great, and documentation is available for self-service. Our Customer Success Manager is very helpful and reaches out regularly to see if we need assistance. We have not utilized many of the other resources offered by Veracode, however, in the future we would like to leverage secure coding training for our Development teams.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

If you are importing data from a CSV, Sellsy recommends you use OpenOffice. OpenOffice is an absolute disaster on Windows 8 and crashes every few mins. While no fault of Sellsy they should not recommend software which makes an already challenging task even more difficult. A small gripe in hindsight but during the process was deeply frustrating. For any users looking to format your CSV Google, try importing CSV data into Excel and your life will be much more easy.

We use it as a SAS service, so really just getting our teams to mold the use of Veracode into their SDLC has been a process of years in the making. It comes down to what your teams are ready and willing to accept and change. Management is key in getting their groups on board with using it regularly. If it doesnt have management backing, your security teams have little to no influence in getting this process off the ground fully.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

For me it is close to what Salesforce did. I do not use all the options they both offer so I mostly judge on the customer / contact tool.

Veracode is slower with scan results however the flaws discovered and sites crawled are almost the same. Rapid7 InsightAppSec only does dynamic scans. Veracode did find more links on a site crawl. Rapid7 InsightAppSec has more out of the box reports than Veracode. Both integration to DevOps tools were striaghtforward.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

No idea

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

The license model once you understand it is very flexible allowing you to select from the modules within sellsy. This gives small companies control of the cost facilitating them with the option to only pay for the features they use.

It meets our needs.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• It helped us look and operate professionally even though we had started out of our homes. That's huge.

• Positive: Scanning all our applications on Veracode provides us an overview of our cyber security posture for the organization as a whole.
• Positive: Performing the SAST, SCA and DAST scanning for all the applications at the early stages of the SDLC helps us identify and mitigate security vulnerabilities early, reducing the risk of data breaches and cyber-attacks.
• Negative: Sometimes Veracode SAST scanner closed and reopens some findings, leading to reliability issues on the scanner itself.

Incentivized

Invited by the Vendor

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info