Item: Veracode
Rating: 8
Author: Verified User

Overall Satisfaction with Veracode

Use Cases and Deployment Scope

Primarily for scanning web applications, while others might use it to secure mobile apps, APIs, or even IoT devices. The ultimate goal is to reduce the risk of security breaches and ensure that software applications are developed and maintained. IDE integration and security testing are the best feature to identify and address security vulnerabilities in my software applications.

Pros and Cons

Pros

IDE Integration
SCA
SAST

Cons

Plug-in pipeline
CI/CD
Pull requests

Return on Investment

Compliance standard
Faster detect
Reduction of risk

Support Rating

I interact with Veracode Support several times and they provide me a great support. In general, depends on who interact from the other side and some response can be a little tricky. All settle up, the environment works great and that’s what is important with a help from the support team.

Alternatives Considered

PortSwigger Burp Suite, Cisco SecureX, Microsoft Defender for Cloud and Darktrace

Key Insights

Do you think Veracode delivers good value for the price?

Yes

Are you happy with Veracode's feature set?

Yes

Did Veracode live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Veracode go as expected?

Yes

Would you buy Veracode again?

Yes

Other Software Used

Microsoft Visual Studio, dotPeek (part of dotUltimate), Postman, PortSwigger Burp Suite

Likelihood to Recommend

It used in DevOps to identify security flaw before going to production. Common and hidden areas of software can be ignored if it’s too wide, so the report and triage flaws help security teams to understand where to improve. Furthermore, MPT an great to provide details and vulnerabilities that from DAST doesn’t arise.

Comments

Please log in to join the conversation

Veracode Security far ahead of competitors

Modules Used