Sonatype Platform vs. Veracode

Sonatype Platform

Veracode

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Sonatype Platform	Score8.3 out of 10	Enterprise companies (1,001+ employees)	Sonatype secures the software supply chain and protects organizations' vital software development lifecycle(SDLC). The platform unites security teams and developers to accelerate digital innovation without sacrificing security or quality across the SDLC. With users among more than 2,000 organizations and 15 million software developers, Sonatype tools and guidance help users to deliver and maintain exceptional and secure software.	$0 for use of the Sonatype Nexus Repository Community Edition
Veracode	Score8.7 out of 10	Mid-Size Companies (51-1,000 employees)	Veracode provides advanced application security solutions, trusted by enterprises to develop and maintain secure software. Its platform identifies exploitable risks, speeds up vulnerability remediation, and reduces security debt at scale using a proprietary AI-assisted remediation engine.	N/A

Pricing

Sonatype Platform

Veracode

Sonatype Air-Gapped Environment Nexus Repository: $175
per year per user
Sonatype Repository Firewall: $224
per year per user
Sonatype Repository Firewall for Artifactory: $224
per year per user
Sonatype Air-Gapped Environment Repository Firewall: $230
per year per user
Sonatype Repository Firewall Cloud: $265
per year per user
Sonatype Lifecycle: $690
per year per user
Sonatype Lifecycle Cloud: $810
per year per user
Sonatype Air-Gapped Environment Lifecycle: $825
per year per user
Sonatype Nexus Repository Pro: $960
per month (billed annually)
Sonatype Nexus Repository: $960
per month (billed annually)
Sonatype SBOM Manager: Contact Sales

No answers on this topic

Pricing Offerings
Sonatype Platform	Veracode
Free Trial
Yes	Yes
Free/Freemium Version
No	Yes
Premium Consulting/Integration Services
No	Yes

Required

No setup fee

—

Developer pricing options available

Community Pulse
Key User Insights
	Sonatype Platform	Veracode
Considered Both Products	Sonatype Verified User Chose Sonatype Platform Well both have their own procs and cons, As a user of Sonatype Nexus Lifecycle, I have found the overall experience highly satisfactory. Incentivized Helpful?	Veracode Verified User Chose Veracode We selected Veracode after testing these tools with 3 important solutions and Veracode had a great ratio of findings, with low false positive, and the best price between the tools that were good enough. Incentivized Helpful? Verified User Chose Veracode Veracode had better pricing than most of them, and much easier deployment (SaaS) so we don't need to worry about hardware. Even with the only cloud option that was not ideal for us, we embraced it. Also, it supports the technology we are using .NET C# and it works great for us. Incentivized Helpful? Verified User Chose Veracode Checkmarx for SAST is easier to integrate and use. It also has a nicer and more convenient UI that shows you the source code and the context of the vulnerabilities identified. However, it is more expensive, not on the cloud so you need your own infrastructure, and it doesn't … Incentivized Helpful?
	Would buy again
	100% Would buy again 13 Answers	92% Would buy again 121 Answers
	Delivers good value for the price
	100% Delivers good value for the price 13 Answers	96% Delivers good value for the price 85 Answers
	Happy with the feature set
	100% Happy with the feature set 13 Answers	95% Happy with the feature set 125 Answers
	Lived up to sales and marketing promises
	89% Lived up to sales and marketing promises 8 Answers	95% Lived up to sales and marketing promises 72 Answers
	Implementation went as expected
100% Implementation went as expected 11 Answers	86% Implementation went as expected 95 Answers

User Ratings
	Sonatype Platform	Veracode
Likelihood to Recommend	8.3 (14 ratings)	8.6 (138 ratings)
Likelihood to Renew	8.9 (2 ratings)	9.0 (8 ratings)
Usability	8.0 (2 ratings)	7.3 (27 ratings)
Availability	9.0 (1 ratings)	9.1 (1 ratings)
Performance	8.0 (1 ratings)	6.4 (1 ratings)
Support Rating	10.0 (2 ratings)	9.0 (67 ratings)
Implementation Rating	- (0 ratings)	9.1 (3 ratings)
Configurability	8.4 (2 ratings)	6.4 (1 ratings)
Contract Terms and Pricing Model	9.0 (1 ratings)	- (0 ratings)
Ease of integration	9.0 (1 ratings)	5.5 (1 ratings)
Product Scalability	8.0 (1 ratings)	7.3 (1 ratings)
Professional Services	9.0 (1 ratings)	- (0 ratings)
Vendor post-sale	10.0 (1 ratings)	8.9 (2 ratings)
Vendor pre-sale	10.0 (1 ratings)	8.2 (1 ratings)

User Testimonials
	Sonatype Platform	Veracode
Likelihood to Recommend	Sonatype - Guidance on remediation is very good - Vulnerability detection is very good - Support is very good - Ability to ask PMs/POs open questions at Office Hours every month is very good - Support for languages is lacking (TIOBE Index Top20) - Some features are un-neededly hidden and make the usage more complex then it needs to be Sebastian Schmidt Senior Application Manager Read full review	Veracode No answers on this topic
Pros	Sonatype No answers on this topic	Veracode No answers on this topic
Cons	Sonatype No answers on this topic	Veracode Scan results stability: from one scan to another, additional flaws appear whereas code did not change. Entry points selection: hard to be sure selection is optimal, should be automatized or hidden. Branches management: we currently use sandboxes to scan different branches of our software. Would be good to have real branches management. Incentivized Nicolas Garcin R&D manager Read full review
Likelihood to Renew	Sonatype No answers on this topic	Veracode No answers on this topic
Usability	Sonatype No answers on this topic	Veracode - Almost no setup required and easy to configure - Very easy to use, intuitive UI with integrated analytics and learning portals. - Seamless to review the results, triage them, generate reports. - Security progression of the product/application is tracked via successive scans. - Privileges/Roles nicely fine grained and tightly controlled to let teams "view" only their products. Incentivized Śrinivāsa Rao Kuruba Manager, Information Technology Read full review
Reliability and Availability	Sonatype Extremely good Navneet Mittal Senior Manager Read full review	Veracode No answers on this topic
Performance	Sonatype Sonatype products are great value as I said but a few areas like how products use underlying resources in order to make it further lightweight, is something I would like them to consider. Navneet Mittal Senior Manager Read full review	Veracode No answers on this topic
Support Rating	Sonatype Monthly touchpoints with Sinisa has been very valuable. Incentivized Frederick Farber Enterprise Architect Read full review	Veracode No answers on this topic
Implementation Rating	Sonatype No answers on this topic	Veracode No answers on this topic
Alternatives Considered	Sonatype No answers on this topic	Veracode No answers on this topic
Contract Terms and Pricing Model	Sonatype Great value for money Navneet Mittal Senior Manager Read full review	Veracode No answers on this topic
Scalability	Sonatype Everything is very good except a little concern regarding large scale docker usage. Navneet Mittal Senior Manager Read full review	Veracode No answers on this topic
Professional Services	Sonatype Very good Navneet Mittal Senior Manager Read full review	Veracode No answers on this topic
Return on Investment	Sonatype No answers on this topic	Veracode No answers on this topic
ScreenShots	Sonatype Platform Screenshots	Veracode Screenshots

Sonatype Platform vs. Veracode

Sonatype Platform

Veracode

Add Product

Recommended Comparisons

Sonatype Platform Screenshots

Veracode Screenshots