Veracode, a great security tool for everyone
To be SoC2 and ISO compliant and also to protect our SaaS, we are using this tool to scan every component that we build for SA and SCA.
we …
we …
Overview
What is Veracode?
Veracode is an application security platform that performs five types of analysis; static analysis, dynamic analysis, software composition analysis, interactive application security testing, and penetration testing. Veracode offers on-demand expertise and aims to help companies fix security defects.
Recent Reviews
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Reviewer Pros & Cons
- Veracode continues to update their platforms, their capabilities, and their research often; the promise of continuous improvement from all facets prov...
- We would also like to see Veracode continue to improve their dynamic scan offerings; with the recent addition of DAST Essentials we feel this improvem...
Video Reviews
1 video
Veracode Review: Provides Helpful Support When Troubleshooting Security Needs
02:38
Pricing
N/A
Unavailable
What is Veracode?
Veracode is an application security platform that performs five types of analysis; static analysis, dynamic analysis, software composition analysis, interactive application security testing, and penetration testing. Veracode offers on-demand expertise and aims to help companies fix security defects.
Entry-level set up fee?
- No setup fee
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Would you like us to let the vendor know that you want pricing?
941 people also want pricing
Alternatives Pricing
What is SonarQube?
SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable.
What is Indusface WAS?
Indusface Web Application Scanner provides an application security audit to detect a range of high-risk Vulnerabilities, Malware, and Critical CVEs.
Product Details
- About
- Integrations
- Competitors
- Tech Details
- Downloadables
- FAQs
What is Veracode?
The Veracode platform is a software security solution that aims to be pervasive but not invasive, embedded into the environments that developers work in, with recommended fix and in-context learning. Security teams can use Veracode to manage policy, gain a comprehensive view of an organization's security posture though analytics and reporting, mitigate risks, and produce the evidence necessary to meet regulatory requirements.
It is presented as an always-on, continuous orchestration of secure development that gives organizations the confidence that the software being built is secure and meets compliance requirements.
Veracode Features
- Supported: Continuous Scanning to reduce risks at every phase of development - Veracode Static Analysis, Dynamic Analysis, Software Composition Analysis, and Manual Penetration Test throughout SDLC.
- Supported: Developer Experience - Finds and fixes laws in line with security integration into where developers work, automated remediation guidance, and in-context learning.
- Supported: Comprehensive Platform Experience - Streamlined governance, risk and compliance processes through flexible policy management, unified reporting and analytics, and peer benchmarking to mitigate risks fast and deliver a successful DevSecOpsprogram.
- Supported: Market Expansion - To meet data residency needs in EU with cloud-native instance built in Frankfurt, Germany on AWS.
- Supported: Contextual Platform Data - Fine-tuned with nearly 2 decades of scanning and customer learning. Predicts future vulnerabilities with self-healing capabilities through applying machine learning and artificial intelligence to the data.
- Supported: Cloud-native SaaS Architecture - Provides elastic scalability, high performance, and lower costs with cloud-native SaaS architecture.
Veracode Screenshots
Veracode Videos
Veracode Static Analysis Demo
Veracode Software Composition Analysis Demo
Veracode Dynamic Analysis Demo
Watch The Veracode Platform
Veracode Integrations
Veracode Competitors
Veracode Technical Details
| Deployment Types | Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Unspecified |
| Mobile Application | No |
| Supported Countries | North America, EMEA, APAC, LATAM |
| Supported Languages | Java, .NET, PHP, Android, iOS, JavaScript, Python |
Veracode Downloadables
Frequently Asked Questions
Veracode is an application security platform that performs five types of analysis; static analysis, dynamic analysis, software composition analysis, interactive application security testing, and penetration testing. Veracode offers on-demand expertise and aims to help companies fix security defects.
Reviewers rate Support Rating highest, with a score of 8.
The most common users of Veracode are from Enterprises (1,001+ employees).
Veracode Customer Size Distribution
| Consumers | 0% |
|---|---|
| Small Businesses (1-50 employees) | 18% |
| Mid-Size Companies (51-500 employees) | 65% |
| Enterprises (more than 500 employees) | 17% |
Comparisons
Compare with
Reviews and Ratings
(197)Attribute Ratings
Reviews
(1-25 of 122)Companies can't remove reviews or game the system. Here's why
March 18, 2024
Veracode, a great security tool for everyone
- Allows a clear way to provide SoC2 evidence
- Allows visibility to stakeholders such as managers, CISO without direct communication
- "Forces" Developers to get into security
March 15, 2024
Great In-Depth Analysis of In-House Applications
- Veracode's platform has had a very positive impact on our security posture, paving the path towards having coverage monitored automatically on hundreds of internal applications throughout the development lifecycle.
- Veracode's platform has also had a very positive impact on improving the security knowledge of our development team, providing meaningful feedback as well as training options to reduce mitigation time and help to prevent flaws before they are created.
- Several legitimate security vulnerabilities in my team's legacy software were caught and addressed.
- Change management is made more auditable by quickly attaching scan reports to change tickets.
- Developers are more security-minded in general when they remember their code is going to be scanned.
March 06, 2024
Veracode User Experience
- At the moment due to very slow speed to the scan, we can not fully integrate it in our development process.
- However, we are using it for our release process.
- The analysis that Veracode software provides gives us and our client confidence that we are producing the secure code.
March 03, 2024
Best in Security
- Need to support Perl-SCA.
- Need to add more labs.
- Shift left process is really helpful.
March 01, 2024
Sleep Soundly - Use Veracode
- Veracode's tools can perform in a couple of hours what would take us weeks to do.
- Our customers--rightfully--expect a high degree of security from us.
- It's easy to integrate Veracode into a CI pipeline allowing you to catch flaws while the code changes are fresh in your mind.
February 27, 2024
Veracode SAST review
- No new vulnerabilities in recent code
- Far fewer false positives to investigate
- Prioritization of dependencies to be updated is justified and faster
- A lot of preparation and integration work on the pipeline side
February 27, 2024
Veracode to the Rescue!
Score 10 out of 10
Vetted Review
Verified User
- Faster scan times make it easier for developers to address exposed vulns
- Simplified reporting removes the need for external data and reporting mechanisms
February 15, 2024
Great products; + Great price.
- Very positive impact. For a very low cost, we are able to achieve a high level of security compliance.
February 13, 2024
Worth the investment
- Fast results allows our team to find problems and solutions quickly
- Allows smaller team to accomplish a large amount of code review in a short amount of time
January 16, 2024
Great DAST and Penetration Testing Platform.
- Consolidation of tools has saved our org thousands of dollars.
- Dast and penetration findings are found in the same dashboard.
- The platform lets us quickly demonstrate to external auditors that we're continuously monitoring our platform.
October 12, 2023
Veracode Security far ahead of competitors
- Compliance standard
- Faster detect
- Reduction of risk
August 30, 2023
Elevating Security Through Automation and Integration
- Reduces risk
- Helps us remain complaint
- Reduce security debt
August 23, 2023
Vericode Use for Companies ERP Product offerings
- Higher compliance and overall security standards and awareness within our software products.
- Competitive advantage
- Marketing clout, being able to tout that we are verified with one of the industry leaders on a continual basis vs just saying 'yes we have our software tested on a annual basis for vunerabilities'
- There is positive ROI.
- Faster implementation of project implementation has enhanced achievement of set goals.
March 27, 2023
A normal review of Veracode
Score 8 out of 10
Vetted Review
Verified User
- We saved time in identifying security issues.
- The tool was easy to use allowing us to run the product as needed.
- The thorough scans allowed us to have higher confidence in release of the product.
January 10, 2023
Veracode For your Code
- Keep the trust of customers
- Keep the code fresh
- Fast resolution of flaws as compared
December 29, 2022
Excellent Code Security Scanning Cloud Service
Score 9 out of 10
Vetted Review
Verified User
- A lot of developers just brush it off - but tickets are coming so they have to fix their issues!
- It's turned me to be a more security-focused developer
December 20, 2022
Veracode makes your life easy and safe.
- Reduced Risk.
- Less workload.
- Achieve compliance standard.
November 09, 2022
Veracode the proven medium fur security and security awareness.
- Reduction of security debt.
- Reduced risk.
- Achievement of higher compliance standards.
- Compliance with regulatory requirements.
November 08, 2022
Veracode - Save software and superb support!
- Secure Usage of Open Source.
- Sensitive Data Leaguage.
- Maintaining our compliance
- Reducing the risk of a security hole
October 07, 2022
Veracode helps to improve the security in applications
- Faster time to market
- Effective reviews and recommendations
- Compliance of security standards
- SaaS platform for a quick and agile start
September 15, 2022
Heathy, bug-free Code brought to you in association with Veracode
- No vulnerabilities in Live applications
- Enough time to fix reported flaws
- Static scan done frequently to assess application health
September 15, 2022
Catch Vulnerabilities before Hackers Do
- As I am a developer, not a stakeholder, I can't speak to the ROI. I can say, though, that anytime someone can produce more secure and more robust code the better.