Veracode

Veracode is slower with scan results however the flaws discovered and sites crawled are almost the same. Rapid7 InsightAppSec only does dynamic scans. Veracode did find more links on a site crawl. Rapid7 InsightAppSec has more out of the box reports than Veracode. Both integration to DevOps tools were striaghtforward.

Veracode is easier to integrate and faster than FOSSA although Mend has more visual features

SonarQube is faster and can be free, but the security scanning capabilities are a joke compared to Veracode.
Unlike SonarQube, Veracode goes deeper into finding a very wide variety of vulnerabilities and best practices that should be applied to software and provides reporting and support to assist in the process.

Veracode has been longer on the market and has build the good reputation. We appreciate that they constantly improving the quality of their software and adding new features.

Reduced false positives, developers can identify vulnerabilities at early stage -shift left process. The security labs help developers.

Veracode is more thorough and provides a wider variety of tools than the competition. Support is prompt and very eager to make sure we get the help we need as quickly as possible. If Support can't resolve it right away, they will make sure we are connected to one of their consultants. The consultants are awesome.

Why you selected Veracode?
Stack coverage.
Integration into our pipeline and ticketing tools.
Good "false positive" rate.
SSO integration and ability to add antinomic.
Competitive pricing, considering the number of our contributors and components.

Veracode stands out as the best of breed for all types of AppSec scanners.

Veracode is much cheaper and does more: SAST, SCA, DAST, and now PEN as a service.

Veracode was brought in to supplement services previously provided by other vendors. As our org recently acquired another organization, we identified Veracode as a 'go-forward' system needed to consolidate security tooling in the organization.

Mend.IO formerly WhiteSource software is a product we used prior to Vericode. It did not have all of the capabilities or depth of Vericode. Additionally, Whitesource did not offer automatic scanning as part of their product and there was no Certification program to speak of.

My experience with Veracode has been the most productive since I started working with enterprise security monitoring systems. The application has efficient set of coding tools that is not available in other software development systems. It has modern data management tools that tracks the software production lifecycle closely to ensure there is excellent end product. The cost is good as and licensing terms are user friendly.

We used Accunetix as well mainly for web site security testing. We used Veracode for code and third party analysis.

Sonar cube was quicker, but not as thorough. Both integrated into our CI/CD pipeline, however the integration for Veracode is more straight forward.

Veracode is much better at uncovering security weaknesses and providing information and consulting. I use Veracode because our company decided for.

The usage of Veracode is definitely easier going!

The maturity of the Veracode and the continuous improvements in its products it's one of the principal characteristics of chosee it, Veracode it's a SaaS platform and was born in the cloud, so this is a great option for our clients to be quick to implement also the easy of their integrations it's some valuable

Checkmarx and Veracode have a few common points and some features which are different. Checkmarx UI is more user-friendly, but the level of detailing in Veracode reports is better. Veracode is a good choice for static analysis of code. if the user interface can be made smoother that would definitely help.

As the developer, not the business stakeholder, I did not select Veracode specifically. However, after using the application I believe it was the right choice. Veracode is thorough in its analyses, in its database of flaws, in its methodology of uncovering vulnerabilities, and in assisting the end user in resolving those vulnerabilities.

One Stop solution for security evaluation. Others were not so accurate and covering all the scenarios we were looking to plug.

Veracode is the clear choice. We evaluated the other products, but none compared to Veracode as an industry standard.

During the course of our using Veracode, we still do evaluate other platforms to see what they offer, and how they compare to Veracode. I do most of the evaluations myself, and I still come back to Veracode as being the overall best platform. Most every platform, for better or worse, still charges about the same yearly amount as Veracode. Mind you, none of them including Veracode, are inexpensive services. But even though some of their competitors have enticing elements to their services, overall Veracode still offers the best service, turnaround time, and support for the money.

More comprehensive.