Skip to main content
TrustRadius
Veracode

Veracode

Overview

What is Veracode?

Veracode is a software security firm that identifies flaws and vulnerabilities across the software development lifecycle. Veracode’s Software Security Platform uses advanced AI algorithms trained on vast datasets of code, for more precise identification and rectification of security flaws.

Read more
Recent Reviews

Best in Security

10 out of 10
March 03, 2024
Incentivized
It's being used across whole organization, multiple engineering teams are using it for third-party libraries scan i.e. software …
Continue reading

Veracode to the Rescue!

10 out of 10
February 27, 2024
Veracode DAST is used on app applications in the portfolio. SAST/SCA scans and DAST scans are run monthly for all Critical application in …
Continue reading
Read all reviews

Awards

Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Reviewer Pros & Cons

View all pros & cons

Video Reviews

1 video

View Playlist
Veracode Review: Provides Helpful Support When Troubleshooting Security Needs
02:38
Return to navigation

Pricing

View all pricing
Veracode

Veracode

N/A
Unavailable

What is Veracode?

Veracode is a software security firm that identifies flaws and vulnerabilities across the software development lifecycle. Veracode’s Software Security Platform uses advanced AI algorithms trained on vast datasets of code, for more precise identification and rectification of security flaws.

Entry-level set up fee?

  • No setup fee

Offerings

  • Free Trial
  • Free/Freemium Version
  • Premium Consulting/Integration Services

Would you like us to let the vendor know that you want pricing?

981 people also want pricing

Alternatives Pricing

SonarQube

SonarQube

$160
per year per installation
What is SonarQube?

SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable.

Vulcan Cyber

Vulcan Cyber

Free
What is Vulcan Cyber?

Vulcan Cyber is an exposure and vulnerability risk mitigation platform that coordinates teams, tools and tasks to eliminate the most-critical exposure risk to the business. Vulcan Cyber first correlates risk signals from scanners, cyber asset and threat intelligence tools. Risk data from…

Return to navigation

Product Details

What is Veracode?

The Veracode Platform provides a comprehensive approach to build and secure software and meet application risk management requirements through tools, solutions, AI-generated fixes and ASPM capabilities to gain visibility into vulnerabilities from code to cloud and quickly remediate them.

Learn more at www.veracode.com, on the Veracode blog, and on LinkedIn and Twitter.

Veracode Screenshots

Screenshot of the Veracode Platform HomepageScreenshot of Static Analysis ScansScreenshot of Findings Status and History DashboardScreenshot of the Veracode Platform

Veracode Videos

Veracode Static Analysis Demo
Veracode Software Composition Analysis Demo
Veracode Dynamic Analysis Demo

Watch The Veracode Platform

Watch Manhattan Associates Success Story

Veracode Integrations

Veracode Competitors

Veracode Technical Details

Deployment TypesSoftware as a Service (SaaS), Cloud, or Web-Based
Operating SystemsUnspecified
Mobile ApplicationNo
Supported CountriesNorth America, EMEA, APAC, LATAM
Supported LanguagesJava, .NET, PHP, Android, iOS, JavaScript, Python

Veracode Downloadables

Frequently Asked Questions

Veracode is a software security firm that identifies flaws and vulnerabilities across the software development lifecycle. Veracode’s Software Security Platform uses advanced AI algorithms trained on vast datasets of code, for more precise identification and rectification of security flaws.

Checkmarx, Snyk, and SonarQube are common alternatives for Veracode.

Reviewers rate Support Rating highest, with a score of 7.9.

The most common users of Veracode are from Enterprises (1,001+ employees).

Veracode Customer Size Distribution

Consumers0%
Small Businesses (1-50 employees)18%
Mid-Size Companies (51-500 employees)65%
Enterprises (more than 500 employees)17%
Return to navigation

Comparisons

View all alternatives
Return to navigation

Reviews and Ratings

(201)

Attribute Ratings

Reviews

(1-1 of 1)
Companies can't remove reviews or game the system. Here's why
June 09, 2022

Veracode Meets Our Needs

Verified User
Vice-President in Information Technology
Insurance Company, 11-50 employees
Score 8 out of 10
Vetted Review
Verified User
Incentivized
Use Cases and Deployment Scope
We employ Veracode's static and dynamic scanning offerings to scan our application code for vulnerabilities on a regular basis. We also use the software composition testing of third-party, open-source libraries as a check against our use of a second similar tool. These features, as well as others we employ external to Veracode, help to increase our application's security posture. We have also recently contracted for their manual APT offering.
Pros and Cons
  • Static scanning is quick and efficient
  • The scan reports are easy to read and informative
  • Interaction with both account management and support staff is great
  • The contracting process is easy
  • The platform's interface could be a little more intuitive
  • Sometimes we get a notification that our static license use has been exceeded but it has not
  • Sometimes the static scan reports many, many potential flaws but it turns out the tool has not been programmed to correctly recognize a particular use case
  • The configuration of dynamic scanning is a bit disjointed.
  • It may just be our application but the dynamic scanning process needs to be improved. Note that we have an open case with Veracode on this so we do expect a resolution.
Likelihood to Recommend
Use of this platform allows us to better control vulnerabilities and demonstrate to clients that we take our security posture seriously. Of course this, though important, is only one aspect of ensuring our code is as secure as possible. The feature set of the tool is quite mature and serves our needs quite well for the most part.
Most Important Features
  • Scanning capabilities
  • Reporting capabilities
Return on Investment
  • Our use of the tools has allowed us to pass large client security requirements
  • Our use of the tools has allowed us to more easily pass RFP security requirements
  • Our use of the tools is beneficial in helping to meet general security audit requirements
Alternatives Considered
We have not evaluated other solutions similar to those offered by Veracode.
Other Software Used
Users and Roles
2
Software Development management Software developer
Support Headcount Required
2
Knowledge in software development and software security is helpful if not required.
Business Processes Supported
  • Static scanning capabilities
  • Dynamic scanning capabilities
  • Manual APT offering
Future Planned Uses
  • We may integrate the dynamic scanning tool into our build process. The capability is there, we just have not explored it yet.
Likelihood to Renew
8
It is likely we will renew our use of the Static scanning tool. We will be evaluating and determining later whether we continue with the Dynamic scanning offering and the Manual APT service.
Products Replaced
No
Key Differentiators
  • Product Features
Evaluation Lessons Learned
Though it would have been smart to evaluate other, similar offerings, we did not due to time constraints. We would next time.
Implementation Details / Implementation Partner
  • Implemented in-house
Implementation Phases
Yes
Static scanning
Manual APT
Dynamic scanning
Change Management Lessons
Change management was minimal
Implementation Issues
  • Dynamic scanning configuration
Implementation Rating
8
Quite painless for the most part though dynamic scanning configuration issues were encountered.
Training Types Used
  • No Training
Ease of Veracode Training
Most areas can be figured out on your own. Other areas, depending on needs, may require a bit of assistance.
Product Configurability
7
Just about right.
Configuration Lessons
No
UI Customization
No - there is no facility to customize the interface
Extensibility and Customization
No - the product does not support adding custom code
Additional Customization Considerations
No
Support Rating
9
We have only had to contact support a few times in the nine years we've used their products. For the most part, Veracode has been very responsive either via email or on calls. These requests have either been for something that did not seem to be right in the interface or for scan-finding call-outs.
Premium Support
No. Did not feel it was necessary. Standard support is fine for our requirements.
Bug Resolution
No
Exceptional Examples of Veracode Support
There have been a couple of times when their support staff has helped us collaboratively determine an appropriate direction in remediating a reported flaw. We have found them to be very knowledgeable and helpful in these situations.
Usability
7
Overall Veracode's static scanning tool works well and is pretty intuitive. I do find myself trying to remember how to find certain features or screens from time to time, but I eventually stumble upon them. To be fair, I am only in the tool once every three months. I do find their dynamic scanning tool a bit confusing regarding the setup and configuration of a target URL. I do eventually find things but I do believe this process could be improved upon.
Easy Tasks
  • Scan reports
Difficult Tasks
  • Dynamic scan configuration
Scalability
8
It meets our needs.
Reliability and Availability
10
Veracode has always been up and available to us.
Performance
7
At this point, it runs well and mostly in a timely fashion. Dynamic scans take days but this may be a config issue still to be resolved.
Pre-Sale Experience
9
They have always been very responsive to our needs.
Post-Sale Experience
10
They have always been responsive to our needs.
Key Negotiation Points
Pricing
Dealing with Veracode
Not really. Members of all teams have been great to work with.
Upgrade Process
No
Future Edition Upgrade Plans
No
Migrating Between Editions
No
Return to navigation