Superior code scanning enabling faster and more secure code.

We use Veracode to perform Static Application Security Testing (SAST) and Software Composition Analysis (SCA) scans against our code, repositories, and CI/CD pipelines for code deployments. We also utilized the IDE integration for software engineers to identify code issues earlier in the development lifecycle.

One of the areas Veracode excels in is their reporting. Our application development releases required a Veracode report to be included showing now high/critical findings.

My preference is to consolidate when possible. The product offerings need to meet a certain level of standards. I would not select a product for the sake of consolidation if the module was not up to standard.

Very important. My role requires continuous evaluation of our security posture and program maturity. Dashboards and reporting are integral to ensuring the data I report to executives and program stakeholders is relevant and accurate.

All. We use the IDE integration to scan code as it is being developed, we integrate into the CI/CD pipeline to scan PR and code merges. We also use the SCA module to scan our code repositories for evolving threats within open source libraries.