We performed a comparison between Amazon EKS and Veracode based on real PeerSpot user reviews.
Find out what your peers are saying about Palo Alto Networks, Wiz, Microsoft and others in Container Security."Amazon EKS is like Kubernetes, but it helps manage our nodes and scalability in AWS."
"The most valuable feature is the computing speed."
"The stability of the solution is good."
"The product's most valuable features are scalability, observability, and performance."
"Amazon EKS is very scalable."
"The most valuable feature is the cluster engine."
"The tool works well with the nodes in AWS. It's scalability is also good in terms of architecture."
"AWS cloud services are flexible and have thorough documentation. AWS also has data centers all over the world."
"In terms of secure development, the SAST scan is very useful because we are able to identify security flaws in the code base itself, for the application."
"Veracode Security Labs are fantastic. My team loves getting the hands-on experience of putting in a flaw and fixing it. It's interactive. We've gotten decent support from the sales and software engineers, so the initial support was excellent. They scheduled a consultation call to dive deep and discuss why we see these findings and codes. That was incredibly helpful."
"Wide range of platforms and technology assessments."
"There are quite a few features that are very reliable, like the newly launched Veracode Pipelines Scan, which is pretty awesome. It supports the synchronous pipeline pretty well. We been using it out of the Jira plugin, and that is fantastic."
"One of the features they have is Software Composition Analysis. When organizations use third-party, open source libraries with their application development, because they're open source they quite often have a lot of bugs. There are always patches coming out for those open source applications. You really have to stay on your toes and keep up with any third-party libraries that might be integrated into your application. Veracode's Software Composition Analysis scans those libraries and we find that very valuable."
"I don't have to have a team of developers behind me that keep up with all the latest threats because the subscription service they provide for me does that."
"It gives feedback to developers on the effectiveness of their secure coding practices."
"The Veracode support team is excellent."
"Amazon EKS provides very minimum information during the upgrade of the node group."
"I would like Amazon EKS to be easier to configure on various environments like Windows or Linux installations"
"It is very cumbersome to assign permissions to users to interact with a cluster."
"There is room for improvement in stability. I faced some problems with the App."
"The dashboard needs to be more user-friendly."
"Amazon EKS's vulnerability management of data could be improved."
"They should enhance the Jira integration."
"They should include some essential configuration features to it."
"There is room for improvement in documentation."
"There were some additional manual steps or work involved that we should not have needed to do."
"It can have more APIs and capabilities to handle other things well. We were doing a trial for it. There were two things that I looked at: one was uploading some Java-related content and the other was uploading database SQL files and having the review done on the quarterback. The Java portion of it worked fine, and it was pretty seamless, but the database portion was not. We uploaded some files to use for vulnerabilities, and the tell-all portion of it was pretty easy. We uploaded a war file and Java files, and we got the reports back on these. They were pretty clear to understand. We did the same thing for the database portion for the most part. However, the content wasn't getting uploaded in a predictable fashion, and it was slow and hard to get done. We had to do it over and over. After it indicated that the content was uploaded, there were no results. There were zero search findings. It was possibly a user error, something that we didn't do correctly, but they had acknowledged that it was something they were currently enhancing. This is something that could be made easier if they haven't already done that. I don't know how many releases they've had in that timeframe. I haven't looked at it since then. It was a trial period."
"From what we have seen of Veracode's SCA offering, it is just average."
"In the next release, I would like a proper way of packaging files for scanning and the packing of IOS apps and API Dynamic scan methodology."
"Once your report has been generated, you need to review the report with consultation team, especially if it is too detailed on the development side or regarding the language. Then, you need some professional help from their end to help you understand whatever has been identified. Scheduling consultation takes a longer time. So, if you are running multiple reports at the same time, then you need to schedule a multiple consultation times with one of their developers. There are few developers on their end who work can work with your developers, and their schedules are very tight."
"Veracode has plenty of data. The problem is the information on the dashboards of Veracode, as the user interface is not great. It's not immediately usable. Most of the time, the best way to use it is to just create issues and put them in JIRA... But if I were a startup, and only had products with a good user interface, I wouldn't use Veracode because the UI is very dated."
"The security labs integration has room for improvement."
Amazon EKS is ranked 15th in Container Security with 38 reviews while Veracode is ranked 4th in Container Security with 194 reviews. Amazon EKS is rated 8.6, while Veracode is rated 8.2. The top reviewer of Amazon EKS writes "Supports multiple tools and has a straightforward setup process ". On the other hand, the top reviewer of Veracode writes "Helps to reduce false positives and prevent vulnerable code from entering production, but does not support incremental scanning ". Amazon EKS is most compared with OpenShift Container Platform, VMware Tanzu Mission Control, Kubernetes, Rancher Labs and Linode, whereas Veracode is most compared with SonarQube, Checkmarx One, Fortify on Demand, Snyk and OWASP Zap.
See our list of best Container Security vendors.
We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
