Say with confident that my product is vulnerability proof using Veracode
Updated November 25, 2021

Say with confident that my product is vulnerability proof using Veracode

Amit Sharma | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User

Modules Used

  • Software Composition Analysis (SCA)

Overall Satisfaction with Veracode

I used Veracode for various applications in [the] organization, and I am able to identify and resolve many code vulnerabilities with the help of Veracode. Initially, I started with the .net application and now organization is planning to work on scanning angular apps and now I am exploring it, Plugins provided by Veracode are also really useful to analyze problems at the time of development.
  • helps us to find out issues in code, majorly sql injections and untrusted initialization
  • Support is really very helpful
  • Plug-ins are helpful
  • Easy to integrate in CI/CD pipeline
  • Easy to use in IDE
  • Sometime it's hard to resolve problems, the way Veracode expected
  • Not able to find support videos/links for full project scans of other languages, the way they are available for .net
  • Integration in CI/CD, so that we get scan as soon build created
  • It builds confidence in clients that application is full for security, validated by Veracode
After doing more and more research we observed it as the best solution for identifying problems in our code.

Do you think Veracode delivers good value for the price?

Yes

Are you happy with Veracode's feature set?

Yes

Did Veracode live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Veracode go as expected?

Yes

Would you buy Veracode again?

Yes

I think this is the best tool to identify problems in code and this also helps to reduce flaws in code which really makes the application robust and the client also feels confident while using it. But scan actually takes longer time than expected and many times it's not telling us the proper reason of why it is failing while uploading file during scan.