Home/Directory/Code & Development/Veracode

Veracode

Veracode's Application Risk Management Platform identifies risks, automates flaw fixes, and simplifies governance and compliance.

Acquired

application securitySASTsoftware composition analysisDevSecOps

About

The Veracode Application Risk Management Platform is engineered for the AI-coding era. The vendor states it identifies risks across the software development lifecycle, automates flaw fixes, and simplifies governance and compliance. The platform aims to reduce risk and deliver secure software. Veracode states its platform has scanned 1.5M+ applications, analyzed 471T+ code lines, and fixed 148M+ software flaws, with a false-positive rate of less than 1.1%. The platform provides unified visibility for security teams across code, dependencies, containers, and runtime signals. Developers receive remediation guidance and AI-driven fixes within their existing tools. The platform also offers governance, reporting, and policy control for leaders to support compliance and demonstrate progress. Veracode states its platform helps safeguard AI-generated code, protect the software supply chain, secure the SDLC, and accelerate remediation.

Read from veracode.com on 2026-08-26. We describe what the vendor states; we do not audit it.

Enterprise Readiness

from cataloged data

57/100 · Established

Security & ComplianceNot disclosed

No compliance certifications listed

Deployment FlexibilityStrong

Flexible deployment: Cloud, Hybrid

Integration DepthStrong

8 documented integrations

Proven AdoptionPartial

6 documented use cases

Company MaturityPartial

Founded 2006

Composite of public compliance, deployment, integration, adoption, and company signals. “Not disclosed” reflects gaps in available data, not a vendor deficiency.

Independently sourced

Pulled directly from regulator filings and platform APIs. No vendor or editorial input.

Status page2026-05-26

Operational

operational· via statuspage· 7 incidents (90d)

Enterprise Use Cases

Static Application Security Testing (SAST)

Software Composition Analysis (SCA)

Dynamic Application Security Testing (DAST)

DevSecOps integration

Compliance reporting and audit readiness

Vulnerability management and remediation

Integrations

JenkinsGitHubGitLabAzure DevOpsJIRASlackServiceNowAtlassian

How Veracode compares

Tool	Readiness	Pricing	Deployment	Compliance	Integrations
Veracode	57 · Established	Enterprise	Cloud, Hybrid	—	8
Checkmarx	Not scored	Enterprise	Cloud, On-Premise, Hybrid, Self-Hosted	—	8
Snyk	Not scored	Freemium	Cloud, On-Premise, Hybrid	—	8
Snyk Code	70 · Strong	Freemium	Cloud, On-Premise, Hybrid	—	8

Peers from the same category, ranked by Enterprise Readiness. Readiness is a composite of cataloged compliance, deployment, integration, adoption, and company signals.

Frequently Asked Questions

What is Veracode used for?

Veracode is veracode's Application Risk Management Platform identifies risks, automates flaw fixes, and simplifies governance and compliance. It is commonly used for static application security testing (sast), software composition analysis (sca), dynamic application security testing (dast), and devsecops integration.

Is Veracode free, and how is it priced?

Veracode uses enterprise pricing, typically a custom quote based on seats, usage, and requirements. Contact the vendor for a quote.

How can Veracode be deployed?

Veracode supports Cloud and Hybrid deployment. It is delivered as a cloud-hosted service.

What does Veracode integrate with?

Veracode documents 8 integrations, including Jenkins, GitHub, GitLab, Azure DevOps, JIRA, and Slack.

When was Veracode founded?

Veracode was founded in 2006.

Is Veracode enterprise-ready?

Based on cataloged data, Veracode has an Enterprise Readiness score of 57/100 (Established tier), derived from its compliance, deployment, integration, adoption, and company-maturity signals.

Quick Facts

PricingEnterprise

DeploymentCloud, Hybrid

Founded2006

CategoryCode & Development

Procurement

Evaluating vendors like this one?

The Enterprise AI RFI/RFP asks the security, governance, and lock-in questions sales decks skip.

See the template — RFI $299 / RFP $699 →

Is this your product?

Claiming is free and lets you correct your listing's data. Upgrade to Enhanced ($199/yr) for a vendor-maintained mark, a richer profile, and lead routing.