Veracode and Check Point CloudGuard CNAPP are two notable solutions in cloud security. Veracode has the upper hand in pricing and support, while Check Point CloudGuard CNAPP stands out for its comprehensive features which users feel justify its cost.
Features: Veracode's valuable features include broad language support, detailed reporting, and competitive pricing. Check Point CloudGuard CNAPP users appreciate its robust threat prevention, seamless integration capabilities, and extensive feature set which appeals to users looking for an all-encompassing solution.
Room for Improvement: Veracode could enhance its scanning speed, update its policy libraries more frequently, and improve performance optimizations. Check Point CloudGuard CNAPP users desire better documentation, more intuitive configuration, and enhanced usability resources.
Ease of Deployment and Customer Service: Veracode receives praise for its straightforward deployment model but faces criticism for the occasional complexity in troubleshooting. Check Point CloudGuard CNAPP has a more complex deployment but garners high marks for effective customer service and post-deployment support.
Pricing and ROI: Veracode is viewed favorably for its competitive setup costs and quicker ROI. Check Point CloudGuard CNAPP has higher setup costs, but users find the investment worthwhile due to the extensive security benefits and long-term ROI.
Monitoring cloud security automatically ensures a return on investment.
The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.
Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.
When I need help or have open questions, or if I require the capability to deploy a quick test environment, there are always people I can contact at Check Point to get my information or the environment as fast as I need it.
I have a dedicated support engineer and a presales engineer dedicated to me.
Access to the engineering team is crucial for faster feedback on the product fix process.
They are very responsive and quick to help with queries within our scope.
They respond very quickly since security is something critical.
I never had any performance-related issues.
Cloud solutions are easier to scale than on-premise solutions.
It has a good capacity to scale effectively.
If there are errors, it is sometimes challenging to elaborate or troubleshoot since it is not transparent enough to understand what to search for.
It is rapidly evolving, and sometimes mistakes occur, necessitating testing.
If the Veracode server is down, we experience many issues during the scan.
It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.
I need more integration from the code-to-cloud principle.
It would be nice to have periodic updates on what people should do, maybe with some analysis or something.
I require consistency in the user interface to ensure everything is streamlined into the same look and feel.
If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.
We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.
A nice addition would be if it could be extended for scenarios with custom cleansers.
It is not cheap, of course, yet it is a necessity.
From a licensing and cost perspective, it is really competitive.
It's not the most expensive solution.
If there's a security gap, you'll never know the cost or effect.
Pricing-wise, I find it a bit expensive because it's based on the number of users requesting access to Veracode.
One of the main reasons we use the solution is that it is great at identifying risks that are critical to our business.
The CDR helps detect anomalous behavior and respond to threats before they become an issue.
Detecting misconfigurations in the cloud is what the CSPM delivers.
It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.
The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.
It fixes issues directly in the IDE while you're doing it.
Check Point CloudGuard CNAPP is a cloud-native application protection platform designed to secure your cloud environments and applications. By combining CSPM, CWPP, CSNS, and WAF capabilities, it provides a comprehensive solution to protect your cloud environment from a wide range of threats.
CloudGuard CNAPP delivers end-to-end cloud security, including workload protection, vulnerability management, and identity management, all while maintaining continuous compliance. It uses advanced AI to detect and prevent threats, offering protection for containers, serverless applications, and APIs. CloudGuard CNAPP also emphasizes simplifying security management, integrating directly with cloud platforms like AWS, Azure, and GCP.
CloudGuard CNAPP provides customers with more context to drive actionable security and smarter prevention, from code-to-cloud, across the application lifecycle. More Context Means Actionable Security, Smarter Prevention. The primary components are:
What are the key features of CloudGuard CNAPP?
What are the key benefits to consider?
Check Point CloudGuard CNAPP simplifies cloud security management with integrated protection and automation.
Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.
Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.
What are the key features of Veracode?
What benefits should users consider in Veracode reviews?
Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.
Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.
We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.