Help us build Secure code and drive your development teams towards best secure code practices
December 20, 2021
Help us build Secure code and drive your development teams towards best secure code practices
Score 10 out of 10
Vetted Review
Verified User
Modules Used
- Static Analysis (SAST)
- Software Composition Analysis (SCA)
- Interactive Analysis (IAST)
- Dynamic Analysis (DAST)
- Developer Training
Overall Satisfaction with Veracode
We use Veracode to Scan code for OWSAP and other vulnerabilities via IDE, CICD Pipelines. Developers are able to review and compare the code file against the results of the scan and resolve or mitigate the flaws. I am particularly impressed by the scanning abilities automatically exclusion of some Third-party code.
Pros
- Identify Vulnerabilities
- Great Developer Support and Training
- Automatic Identification Third party code.
- Multiple Scanning options Portal, IDE, CI Pipelines
Cons
- Web Analysis portal has minor learning curve.
- Improve the login timeout
- Any improvements in Scanning speeds would be helpful
- A modern UI design would be good.
- Scan Vulnerabilities in code
- Support for both Legacy and New version of frameworks/code
- Veracode is helping us identify the vulnerabilities and driving developers to write better code.
Do you think Veracode delivers good value for the price?
Yes
Are you happy with Veracode's feature set?
Yes
Did Veracode live up to sales and marketing promises?
Yes
Did implementation of Veracode go as expected?
Yes
Would you buy Veracode again?
Yes
Comments
Please log in to join the conversation