CodeSentry vs Veracode comparison

Read 208 Veracode reviews

32,067 Views
8,658 Comparison Views

89% willing to recommend

CodeSentry

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CodeSentry and Veracode based on real PeerSpot user reviews.

Find out what your peers are saying about Snyk, Veracode, Black Duck and others in Software Composition Analysis (SCA).

To learn more, read our detailed Software Composition Analysis (SCA) Report (Updated: October 2026).

Software Composition Analysis (SCA)

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CodeSentry

Ranking in Software Composition Analysis (SCA)

29th

Average Rating

8.0

Reviews Sentiment

8.5

Number of Reviews

Ranking in other categories

No ranking in other categories

Veracode

Ranking in Software Composition Analysis (SCA)

2nd

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

208

Ranking in other categories

Application Security Tools (3rd), Static Application Security Testing (SAST) (3rd), Container Security (14th), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (3rd)

Mindshare comparison

As of November 2026, in the Software Composition Analysis (SCA) category, the mindshare of CodeSentry is 0.9%, up from 0.3% compared to the previous year. The mindshare of Veracode is 6.1%, down from 8.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Software Composition Analysis (SCA) Mindshare Distribution
Product	Mindshare (%)
Veracode	6.1%
CodeSentry	0.9%
Other	93.0%

Software Composition Analysis (SCA)

Featured Reviews

antony

Engineer at a manufacturing company with 11-50 employees

Easy-to-install with efficient vulnerability detection features

We use the product for automotive detection of vulnerabilities The product's most valuable feature is the CWE ratio. The product's installation speed needs improvement. It should be less than 30 to 45 minutes. We have been using CodeSentry for the last one and a half years. It is a stable…

Read full review

Yash Shende

Software Development Engineer II at Rocket Software

Monthly scans have provided baseline security but still miss critical vulnerabilities

Veracode can improve to stand in this market. They do not have to do much; they just need to improve their UI experience and add more documentation within the application rather than just creating documentation pages on different websites. They need to ensure their web application guides whoever uses it. Since whoever uses Veracode must be a technical person, they just need to guide them to the actual points. They can also improve their security capabilities by adding more filters to identify what vulnerabilities their application has. They need to improve their scanning engine to scan for more critical defects. Also, the integration part can be enhanced by adding features to integrate with a CLI, such as introducing a CLI version or a Jenkins plugin. If such features exist, they should show it as a pop-up, signaling that they have a new feature. Currently, it feels Veracode from two years ago is still the same, so that is something Veracode needs to improve. They can improve the security part. Some of the severe security issues were never caught by Veracode in the reports. In fact, I have never seen any high or critical severity issues pop up in my Veracode report. That is one thing they can improve on their scanning ability to catch high severity issues. Next is integration; Veracode does not provide any tools to integrate with Jenkins or CLI. I do not even know if there is any CLI for Veracode that I can use to automate in my pipeline. The last thing is the UI interface that they have, as it is a bit confusing. I remember we did not have the capability to handle authentications of our internal application. We had to write Selenium code using a Selenium IDE. To write a Selenium script for a Veracode scan, you have to download a Selenium IDE, record it, and then paste that file into Veracode. I can see that Selenium IDE is already decommissioned, so it is no longer used by anyone. Still, we have to use it because Veracode only supports that kind of file for Selenium to automate. They can add more ways to authenticate our application using normal JavaScript or Python or Shell script. I feel these are the four main points. They can document it more by adding tooltips into the application that explain why a parameter is required and what other options are available. For the same example with the Selenium script, they can add a link to their documentation that explains what other kinds of scripts can be written for authentication. I feel they can also make the UI more intuitive so that whoever uses it can guide themselves, as whoever uses Veracode is already a technical person.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The product's most valuable feature is the CWE ratio."

"The result was amazing, enabling us to find everything that could potentially create a problem for us."

"Veracode impacts the overall security posture by maintaining data integrity, ensuring we are not exposed to threats from third-party libraries with known vulnerabilities."

"I believe the static analysis is Veracode's best and most valuable feature. Software composition analysis is a feature that most people don't use, and we don't use SCA for most of our applications. However, this is an essential feature because it provides insight into the third-party libraries we use."

"The most valuable feature is detecting security vulnerabilities in the project."

"The dashboards and the threat insights it provides are very good. The dashboards are intuitive and pretty straightforward, but also pretty detailed."

"There have been a lot of benefits gained from Veracode. Compared to other tools, Veracode has good flexibility with an easy way to run a scan. We get in-depth details on how to fix things and go through the process. They provide good process documents, community, and consultation for any issues that occur during the use of Veracode."

"The best feature is definitely the detailed reports. It provides code-related queries in the order of high, medium, and low depending on what we need to do. Veracode is user-friendly as well."

"The support that Veracode provides is really fabulous; they are very responsive and provide you with a thorough analysis, and if you have any questions or doubts, they help to clear them in a very simple manner."

More Veracode pros

Cons

"The product's installation speed needs improvement. It should be less than 30 to 45 minutes."

"I would ask Veracode to be a lot more engaged with the customer and set up live sessions where they force the customer to engage with Veracode's technical team. Veracode could show them a repo, how they should do things, this is what these results mean, here is a dashboard, here's the interpretation, here's where you find the results."

"It needs to reach the level of Checkmarx's and Fortify Software's capabilities and service levels, or may further loosen the market share."

"Some features could be improved in terms of user-friendliness."

"The Veracode platform probably hasn't improved our organization overall, although through no fault of theirs."

"Veracode needs to improve its integration with other tools."

"It could be improved with support for more programming languages, like SQL."

"Veracode Static Analysis can improve the false positive. There are always improvements that can be done to the false positive rate. There are some things that get flagged that are not an issue. However, it is not a huge concern."

"It's very expensive for a small organization."

More Veracode cons

Pricing and Cost Advice

"The product has reasonable pricing."

"Veracode is expensive. But the solution is worth it."

"Users in some forums mentioned that pricing for this solution can be quite high."

"As compared to others, it is a costly solution. It is overpriced, and many organizations with a limited budget cannot afford it. That is why they are going for other tools, but those tools are not that effective. Veracode is better in terms of quality. If you want good service, you have to pay for it."

"They have just streamlined the licensing and they have a number of flexible options available, so overall it is quite good, albeit pricey."

"To my knowledge, licensing for Veracode Static Analysis is paid yearly by my company."

"There is a fee to scale up the solution which I consider expensive."

"Veracode's pricing is competitive."

"Veracode is costly. They have different license models for different customers. What we had was based on the amount of code that has been analyzed. The license that we had was capped to a certain amount, for example, 5 Gig. There would be an extra charge for anything above 5 Gig."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

15%

Manufacturing Company

12%

Outsourcing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	70
Midsize Enterprise	46
Large Enterprise	114

Questions from the Community

Ask a question

Earn 20 points

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

See all answers

What is the biggest difference between Veracode and Checkmarx?

According to my experience of using both the tools in different organizations Veracode is a Cloud-native, managed AppSec platform with strong focus on ease of use, it is SaaS delivery, and provide...

See all answers

What is your experience regarding pricing and costs for Veracode Static Analysis?

My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.

See all answers

Comparisons

Black Duck SCA vs CodeSentry

Compared 53% of the time

Mend.io vs CodeSentry

Compared 47% of the time

More CodeSentry Competitors

Checkmarx One vs Veracode

Compared 5% of the time

SonarQube vs Veracode

Compared 5% of the time

HCL AppScan vs Veracode

Compared 3% of the time

GitLab vs Veracode

Compared 2% of the time

Snyk vs Veracode

Compared 2% of the time

More Veracode Competitors

Product Reports

Software Composition Analysis (SCA)

Download CodeSentry product report

Download Veracode product report

Also Known As

No data available

Crashtest Security , Veracode Detect

Overview

CodeSentry is a cutting-edge tool providing comprehensive security insight for software binaries. Designed for experts in cybersecurity, it thoroughly analyzes vulnerabilities and enhances software security posture.

CodeSentry empowers security professionals with detailed binary analysis, pinpointing vulnerabilities within software components. Equipped with advanced scanning capabilities, it offers invaluable insights critical for safeguarding digital infrastructures. Capable of integrating seamlessly within established systems, its use extends across numerous tech environments.

What features define CodeSentry?

Vulnerability Detection: Identifies security flaws for immediate action to prevent potential breaches.
Comprehensive Scanning: Thoroughly examines binaries to provide in-depth security intelligence.
Integration Capabilities: Easily integrates with popular development tools to streamline workflows.
Detailed Reporting: Offers insightful reports highlighting critical vulnerabilities for effective risk management.
Continuous Monitoring: Provides ongoing surveillance to ensure software integrity over time.

What benefits should be considered in CodeSentry?

Enhanced Security: Strengthens software defenses by identifying and addressing threats promptly.
Improved Risk Management: Facilitates strategic security planning with detailed vulnerability insights.
Cost Efficiency: Reduces potential costs related to security breaches and data loss.
Operational Efficiency: Streamlines security processes, reducing time and resources spent on manual detection.

In specific industries like finance and healthcare, CodeSentry's ability to detect and address vulnerabilities is crucial. For financial institutions, it ensures the protection of sensitive data against cyber assaults. In healthcare, it safeguards patient information, maintaining compliance with stringent regulatory standards. Its implementation in these settings highlights the tool's adaptability and essential role in fortifying critical infrastructure.

AdaCore

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

Information Not Available

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.

Software Composition Analysis (SCA)