Veracode

Claim Profile

Adaptive application security for the AI era

Visit Website Write a Review
SoftwareWorld Editorial Review

Why SoftwareWorld Chooses Veracode

"Security teams often turn to Veracode when they need a reliable way to find and fix vulnerabilities in their code before software goes live. It fits well into development workflows where catching security issues early matters. Teams working across large codebases or multiple projects tend to find it useful for consistent security testing without slowing down releases too much. That said, smaller teams or startups with limited budgets may find the pricing difficult to justify at an early stage."
Decision Snapshot

Veracode Evaluation Snapshot

Review the most important product facts, official access information, and SoftwareWorld’s page-level trust standards in one place.

User Rating4.5 / 5
Starting PriceContact Vendor
Free TrialNot specified
Free VersionNo
APINot specified
DeploymentCloud Hosted
HeadquartersUnited States
Buyer Contribution

Your Veracode experience can help other buyers

Used Veracode? Share an honest review about usability, features, support, and overall experience. Your feedback can help other buyers evaluate the product with greater confidence.

Reviews are published after SoftwareWorld moderation.

Write a Review
Trust & Transparency

Why Buyers Can Trust This Page

Structured Product Information

Consistent buyer-focused fields make software profiles easier to evaluate.

Clear Sponsored Disclosure

Paid placements are labeled and separated from product facts and reviews.

Editorial Independence

Sponsored participation does not influence SoftwareWorld's editorial assessment.

Data Transparency

Pricing and availability can change, so current details should be confirmed with the vendor.

Product Overview

Veracode Overview

Product description, media, company details, support, training, deployment, customer size, languages, and industries.

About Veracode

Veracode is a comprehensive risk management software designed to help organizations manage and mitigate security risks in their software development lifecycle. It provides tools for identifying, assessing, and remediating vulnerabilities in applications, helping businesses secure their software before it reaches production. Veracode’s automated code scanning and dynamic testing solutions enable organizations to detect vulnerabilities in both source code and running applications. It also offers detailed reports that prioritize risks based on severity, providing teams with actionable insights to address the most critical issues first. With Veracode, businesses can ensure compliance with industry standards and regulations such as OWASP and PCI DSS. The platform supports integration with DevOps and CI/CD pipelines, allowing security testing to be seamlessly incorporated into the development process. Additionally, Veracode’s cloud-based approach enables organizations to scale their security efforts and access critical security data from anywhere. By reducing the risk of data breaches and security incidents, Veracode helps organizations protect their reputation and minimize potential financial losses.
Company Veracode
Founded 2006
Headquarters United States
Employees 501-1000

Support

Email Phone Chat Knowledge Base FAQs/Forum

Training

Documentation Videos

Licensing & Deployment

Proprietary Cloud Hosted Web-Based

Typical Customers

Self-Employed Small-Business Midsize-Business
Languages Supported 1 language available
English
Industries Served 1 industry available
Non-profit Organization Management

Why Choose Veracode

Problem it Solves

  • Problem it Solves Securing Applications Against Vulnerabilities To Prevent Cyber Threats

Target Users

  • Target Users Security Professionals
  • Target Users Developers
  • Target Users DevOps Teams
  • Target Users Compliance Officers
  • Target Users IT Managers

Core Use Case

  • Core Use Case Identify Security Vulnerabilities
  • Core Use Case Analyze Application Code
  • Core Use Case Prioritize Remediation Efforts
  • Core Use Case Integrate With Development Tools
  • Core Use Case Monitor Security Compliance

USP

  • USP Secure Your Software With Comprehensive, Automated Vulnerability Detection

Pros

  • Pros Static analysis catches vulnerabilities early before code reaches production
  • Pros Developer-friendly fix guidance reduces time spent interpreting scan results
  • Pros Supports a wide range of languages and frameworks out of the box
  • Pros Pipeline integration fits naturally into existing CI/CD workflows without friction
  • Pros Policy-based compliance reporting simplifies audits for regulated industries
  • Pros Software composition analysis flags risky open-source dependencies with clear context
  • Pros Cloud-based platform means no heavy infrastructure setup on your end
  • Pros Scan accuracy has noticeably improved with fewer false positives over time

Cons

  • Cons Pricing scales significantly as scan volume and team size grow
  • Cons Deep integration setup demands considerable developer time upfront
  • Cons Scan feedback can feel verbose, slowing triage for smaller teams
  • Cons Remediation guidance occasionally leans too technical for non-security developers
Editorial Buyer Guidance

Who Is Veracode Best For?

Review the buyer problem, target users, practical use cases, and product differentiator identified by the SoftwareWorld review team.

Problem It Solves

Securing Applications Against Vulnerabilities To Prevent Cyber Threats

Target Users

  • Security Professionals
  • Developers
  • DevOps Teams
  • Compliance Officers
  • IT Managers

Core Use Cases

  • Identify Security Vulnerabilities
  • Analyze Application Code
  • Prioritize Remediation Efforts
  • Integrate With Development Tools
  • Monitor Security Compliance

Unique Selling Point

  • Secure Your Software With Comprehensive
  • Automated Vulnerability Detection
Strengths and Limitations

Veracode Pros & Cons

Consider the practical advantages and limitations identified through SoftwareWorld's product assessment.

+

Pros

  • Static analysis catches vulnerabilities early before code reaches production
  • Developer-friendly fix guidance reduces time spent interpreting scan results
  • Supports a wide range of languages and frameworks out of the box
  • Pipeline integration fits naturally into existing CI/CD workflows without friction
  • Policy-based compliance reporting simplifies audits for regulated industries
  • Software composition analysis flags risky open-source dependencies with clear context
  • Cloud-based platform means no heavy infrastructure setup on your end
  • Scan accuracy has noticeably improved with fewer false positives over time
!

Cons

  • Pricing scales significantly as scan volume and team size grow
  • Deep integration setup demands considerable developer time upfront
  • Scan feedback can feel verbose, slowing triage for smaller teams
  • Remediation guidance occasionally leans too technical for non-security developers
Category-Based Capabilities

Veracode Features

Each category combines the selected software category, its category-specific description, and the features assigned to that category.

Cybersecurity Software 28 selected features Open category ↗
Whitelisting/Blacklisting Compliance Management Policy Management Audit Trail Real Time Reporting Single Sign On Secure Data Storage Behavior Tracking Incident Management Activity Tracking SSL Security Patch Management Endpoint Protection Risk Alerts Remote Monitoring & Management Security Auditing Vulnerability Scanning Event Logs HIPAA Compliant Server Monitoring Anti Virus Authentication Access Controls/Permissions Two-Factor Authentication Threat Response Data Security Firewalls Artificial Intelligence
Financial Risk Management Software 13 selected features Open category ↗
Liquidity Analysis Market Risk Management Risk Analysis Reporting/Analytics Operational Risk Management Portfolio Management Portfolio Modeling For Hedge Funds Compliance Management Credit Risk Management Loan Portfolio Management Stress Tests Artificial Intelligence
Risk Management Software 23 selected features Open category ↗
Risk Scoring Audit Management Predictive Analytics Exceptions Management Mobile Access Business Process Control Legal Risk Management Alerts/Notifications Operational Risk Management Compliance Management Corrective and Preventive Actions (CAPA) Internal Controls Management Risk Assessment IT Risk Management Reputational Risk Management Response Management Incident Management Audit Trail Risk Analysis Reporting/Analytics Document Management Document Storage Risk Alerts
Static Application Security Testing (SAST) Software 11 selected features Open category ↗
Application Security Vulnerability Scanning Real-Time Analytics Debugging Dashboard Integrated Development Environment API Multi-Language Scanning Deployment Management Source-Code Scanning Artificial Intelligence
Connected Applications

Veracode Integrations

Integration information is displayed only when approved integration products are available on the profile.

Pricing Information

Veracode Pricing

Pricing type, currency, trial availability, payment frequency, destination links, and package-level starting prices.

Pricing Type Contact Vendor
Preferred Currency USD ($)
Free Trial NA
Free Version NA
Payment Frequency NA
Verified User Feedback

Veracode Reviews

Approved reviews submitted through verified Google or LinkedIn reviewer accounts.

Write a Veracode Review ↗
4.5
Based on 1 approved review
5 stars 50%
4 stars 50%
3 stars 0%
2 stars 0%
1 star 0%
Mohmad S
Mohmad S Infra Architect

Decent Code Scanner Tool

The tool is acceptable and works well, and the best part is that it is DOD approved. Issue identification is accurate, and the guidance to fix problems is helpful. Scanning speed and issue tracking are good, and it supports multiple code languages. However, first time IDE configuration is difficult, and precise documentation is not available.

Reviewed on March, 2024
Alternative Products

Top Veracode Alternatives

Explore leading products commonly evaluated alongside Veracode.

View All Veracode Alternatives ↗
Frequently Asked Questions

Veracode FAQs

Answers generated from approved profile information, selected options, packages, integrations, support, training, deployment, and devices.

Veracode is a comprehensive risk management software designed to help organizations manage and mitigate security risks in their software development lifecycle. It provides tools for identifying, assessing, and remediating vulnerabilities in applications, helping businesses secure their software before it reaches production. Veracode’s automated code scanning and dynamic testing solutions enable organizations to detect vulnerabilities in both source code and running applications. It also offers detailed reports that prioritize risks based on severity, providing teams with actionable insights to address the most critical issues first. With Veracode, businesses can ensure compliance with industry standards and regulations such as OWASP and PCI DSS. The platform supports integration with DevOps and CI/CD pipelines, allowing security testing to be seamlessly incorporated into the development process. Additionally, Veracode’s cloud-based approach enables organizations to scale their security efforts and access critical security data from anywhere. By reducing the risk of data breaches and security incidents, Veracode helps organizations protect their reputation and minimize potential financial losses.

  • No, Veracode does not offer a free version.

  • No, Veracode does not offer any free trial.

  • No, Veracode does not offer an API.

  • Veracode can be integrated with the following applications:

    • ServiceNow , Docker , Jira , GitLab , Tableau , Slack , AWS Cloud , Splunk Enterprise , GitHub , CircleCI , Microsoft Teams , ServiceNow , Azure DevOps Services , SonarQube , Bitbucket , Jenkins X , Bamboo , ServiceNow , jira

  • Veracode offers support with the following options:
    • Email , Phone , Chat , Knowledge Base , FAQs/Forum

  • Veracode offers training with the following options:
    • Documentation , Videos

  • Veracode supports the following languages:
    • English

  • Following are the typical users of the Veracode:
    • Self-Employed , Small-Business , Midsize-Business

  • Veracode supports the following deployment:
    • Cloud Hosted

  • Veracode supports the following devices and operating systems:
    • Web-Based
Are you an authorized Veracode representative?

Claim this profile with an official business email to request management access. Public product information and approved reviews remain available before the profile is claimed.

Write a Review Visit Website ↗
Get Expert Help