Aqua Cloud Security Platform vs Veracode comparison

Aqua Cloud Security Platform

Read 207 Veracode reviews

23,090 Views
5,542 Comparison Views

89% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Veracode and Aqua Cloud Security Platform compete in application security. Veracode offers superior features, while Aqua Cloud Security Platform excels in deployment efficiency and customer support.

Features: Veracode provides comprehensive scanning capabilities, effective vulnerability management, and extensive coverage. Aqua Cloud Security Platform offers robust integration, advanced container security, and strong deployment efficiency.

Room for Improvement: Users suggest Veracode improve its reporting capabilities, reduce false positives, and enhance user assistance features. Aqua Cloud Security Platform users recommend better documentation, more streamlined user customization, and improved user assistance features.

Ease of Deployment and Customer Service: Veracode's deployment is considered straightforward but time-consuming for large-scale installations, with reliable customer service. Aqua Cloud Security Platform provides a quicker deployment process and responsive customer service, making it more user-friendly in this aspect.

Pricing and ROI: Veracode's setup cost is generally higher, but users note significant ROI due to its extensive functionality. Aqua Cloud Security Platform offers a more cost-effective setup with satisfactory ROI, especially for those focused on container security.

To learn more, read our detailed Aqua Cloud Security Platform vs. Veracode Report (Updated: April 2026).

Aqua Cloud Security Platform vs. Veracode

April 2026

Download the complete report

Helped 893,221 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Aqua Cloud Security Platform

Ranking in Container Security

25th

Average Rating

8.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Cloud and Data Center Security (17th), Cloud Workload Protection Platforms (CWPP) (21st), Cloud-Native Application Protection Platforms (CNAPP) (19th), Software Supply Chain Security (16th), DevSecOps (15th)

Veracode

Ranking in Container Security

10th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

207

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Software Composition Analysis (SCA) (2nd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of May 2026, in the Container Security category, the mindshare of Aqua Cloud Security Platform is 2.9%, down from 3.4% compared to the previous year. The mindshare of Veracode is 2.6%, down from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Mindshare Distribution
Product	Mindshare (%)
Veracode	2.6%
Aqua Cloud Security Platform	2.9%
Other	94.5%

Container Security

Featured Reviews

Burak AKCAGUN

Business Development Manager at Axoft Ukraine

A robust and cost-effective solution, excelling in scalability, on-premises support, and responsive technical support, making it well-suited for enterprises navigating stringent regulatory environment

The most crucial aspect is runtime protection, specifically image scanning before preproduction and deployment. Customers find it invaluable to have the ability to check for vulnerabilities in an image before deployment, similar to a sandbox environment. This feature ensures that customers can identify any potential issues with the image, such as misconfigurations or vulnerabilities, before integrating it into their workloads and infrastructure. In their source pipeline, companies can identify issues before deploying changes. This is crucial because customers prefer resolving any problems or misconfigurations before the deployment process. Software change security, including GSPM Cloud, is a key feature customers seek in their infrastructure.

Read full review

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

Onboarding developers successfully while improving code security through IDE integration

Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The DTA, which stands for Dynamic Threat Analysis, allows me to analyze Docker images in a sandbox environment before deployment, helping me anticipate risks."

"We find the Docker and Kubernetes support for container security most valuable."

"Aqua Security helps us to check the vulnerability of image assurance and check for malware."

"The ROI is clear; we could not live without it because now we are getting back a picture of the vulnerability and we are able to fix severe security and vulnerability bugs."

"The container security element of this product has been very valuable to our organization."

"We previously used Alcide; Aqua gives us more features and is more solid in terms of security, and Aqua is more of a market share leader with more of a technology advantage."

"The most valuable features are that it's easy to use and manage."

"Aqua Security allowed us to gain visibility into the vulnerabilities that were present in the container images, that were being rolled out, the amount of risk that we were introducing to the platform, and provided us a look into the container environment by introducing access control mechanisms. In addition, when it came to runtime-level policies, we could restrict container access to resources in our environment, such as network-level or other application-level access."

More Aqua Cloud Security Platform pros

"Overall, we've never had any problem with vulnerable code going into production."

"Compared to when we started versus now, we have done a phenomenal job, year on year our security debt has been continuously decreasing by 10 to 12 percent."

"The capability to identify vulnerable code is the most valuable feature of Veracode."

"There are really three solutions at the top of the industry ratings, and Veracode is the best, in my opinion."

"The integration with DevOps pipelines is seamless."

"The product’s policy reporting for ensuring compliance with industry standards and regulations is great."

"Veracode provides faster scans compared to other static analysis security testing tools."

"My point is that Veracode is very good, and I would strongly recommend it."

More Veracode pros

Cons

"They want to release improvements to their product to work with other servers because now they are more focused on the Kubernetes environment."

"I would like Aqua Security to look into the development of a web security portal."

"Aqua Security could improve the forwarding of logging into Splunk and into other tools, it should be easier."

"It's a bit hard to use the user roles. That was a bit confusing."

"In the next release, Aqua Security should add the ability to automatically send reports to customers."

"It's a bit hard to use the user roles. That was a bit confusing."

"The user interface could be improved, especially in terms of organization and clarity."

More Aqua Cloud Security Platform cons

"Those pages need to be redesigned."

"Sometimes, I get feedback from a developer saying, "They are scanning a Python code, but getting feedback around Java code.""

"It would be ideal if it was able to demonstrate higher levels of cybersecurity certifications like becoming FedRAMP compliant or working in those areas."

"Scanning large amounts of code can be a time-consuming process and there is scope for improvement."

"We tried to create an automatic scanning process for Veracode and integrate it into our billing process, but it was easier to adopt it to repositories based on GIT."

"It does nearly everything, but penetration testing."

"Technical support was difficult at times due to off-shore support that seemed to be reading from a script and not really understanding our issue."

"In the future, I would like to see the RASP capability built-in."

More Veracode cons

Pricing and Cost Advice

"It comes at a reasonable cost."

"The pricing of this solution could be improved."

"Aqua Security is not cheap, and it's not very expensive, such as Splunk, they are in the middle."

"Dealing with licensing costs isn't my responsibility, but I know that the licenses don't depend on the number of users, but instead are priced according to your workload."

"They were reasonable with their pricing. They were pretty down-to-earth about the way they pitched their product and the way they tried to close the deal. They were one of the rare companies that approached the whole valuation in a way that made sense for our company, for our needs, and for their own requirements as well... They will accommodate your needs if they are able to understand them and they're stated clearly."

"The pricing and licensing are reasonable, and relatively straightforward, and different licensing and subscription models are available."

"We are still considering it at the enterprise level. It has a subscription-based model. We find its price a little high based on the features it provides."

"Veracode is one of the more expensive solutions in the market, but it is worth the expense because of the eLearning and the security consultations; everything is included in the license."

"Veracode's price is high. I would like them to better optimize their pricing."

"Users in some forums mentioned that pricing for this solution can be quite high."

"Veracode is expensive. But the solution is worth it."

"I think it's a great value. It's at a price point that a small company like mine can afford to use versus, if it was too exorbitant, I wouldn't be able to use this product. The cost of the license is small in comparison to the value it brings"

"For the value we get out of it, coupled with the live defect review sessions, we find it an effective value for the money. We are a larger organization."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

893,221 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

22%

Government

Computer Software Company

Manufacturing Company

Financial Services Firm

16%

Manufacturing Company

11%

Computer Software Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	6
Midsize Enterprise	1
Large Enterprise	10

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	45
Large Enterprise	114

Questions from the Community

What do you think of Aqua Security vs Prisma Cloud?

Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

What do you like most about Veracode Static Analysis?

I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.

What is your experience regarding pricing and costs for Veracode Static Analysis?

My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.

Sysdig Secure vs Aqua Cloud Security Platform

Comparisons

Compared 10% of the time

Prisma Cloud by Palo Alto Networks vs Aqua Cloud Security Platform

Compared 8% of the time

Wiz vs Aqua Cloud Security Platform

Compared 5% of the time

TrendAI Deep Security vs Aqua Cloud Security Platform

Compared 4% of the time

Snyk vs Aqua Cloud Security Platform

Compared 4% of the time

More Aqua Cloud Security Platform Competitors

SonarQube vs Veracode

Compared 7% of the time

Checkmarx One vs Veracode

Compared 6% of the time

HCL AppScan vs Veracode

Compared 3% of the time

GitHub Advanced Security vs Veracode

Compared 3% of the time

OWASP Zap vs Veracode

Compared 3% of the time

More Veracode Competitors

Product Reports

Aqua Cloud Security Platform

May 2026

Download Aqua Cloud Security Platform product report

Download Veracode product report

April 2026

Also Known As

Aqua Security Platform, CloudSploit, Argon

Crashtest Security , Veracode Detect

Overview

Aqua Cloud Security Platform supports container environments with strong features such as Docker and Kubernetes integration, efficient vulnerability management, and seamless runtime protection, making it a key choice for cloud and container security.

Aqua Cloud Security Platform focuses on comprehensive container and cloud security enhancements. It offers robust tools for Docker and Kubernetes, efficient vulnerability management, and on-demand patching. The platform is praised for its Runtime Protection, Drift Prevention, and robust documentation, promoting seamless integration with existing platforms. Image scanning, Digital Threat Analysis, and sandboxing services accentuate security measures while integration with Docker Hub ensures ease of use. Scalable runtime policies, image assurance, and dynamic threat analysis simplify security tasks. Challenges remain in developing web security portals and greater standard server integration. Enhancing reporting, simplifying training, and improving log forwarding are key goals. Resource consumption, clearer roles, automation, and code analysis are vital future considerations.

What are the most important features of Aqua Cloud Security Platform?

Docker and Kubernetes Support: Ensures container security and streamlined operations.
Vulnerability Management: Efficient scanning and on-demand patching.
Strong Runtime Protection: Implements Drift Prevention and scalable policies.
Seamless Integration: Works with existing platforms for optimal performance.
Image Assurance and Threat Analysis: Provides thorough security checks and dynamic analysis.

What benefits or ROI can users expect?

Simplified Container Security: Streamlines container and cloud tasks for enhanced protection.
Enhanced Image Assessment: Detects configurations and risks efficiently.
Greater Data Protection: Ensures application visibility and security in deployments.
Flexible Licensing Models: Offers potential for reconsideration and optimization.

Aqua Cloud Security Platform is leveraged in industries focusing on container security, vulnerability scanning, and securing Kubernetes configurations within CI/CD pipelines. It is employed for image assessments and network security, demonstrating its efficacy in cloud applications and workload protection. Efficiently identifying misconfigurations and risks in cloud environments, it provides scanning for public clouds and docker environments, emphasizing data protection and application visibility tailored to customer-specific deployments.

Aqua Security

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

HPE Salesforce Telstra Ellie Mae Cathay Pacific HomeAway

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.