CrowdStrike Falcon Cloud Security vs Veracode comparison

CrowdStrike Falcon Cloud Se...

Read 201 Veracode reviews

14,613 Views
9,530 Comparison Views

90% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Veracode and CrowdStrike Falcon Cloud Security are two prominent products in cloud security. CrowdStrike Falcon Cloud Security has the upper hand due to its advanced features and perceived value for its price.

Features: Veracode is praised for its automated scanning, comprehensive reporting, and ease of use. CrowdStrike Falcon Cloud Security stands out with advanced threat detection, real-time visibility, and robust endpoint protection.

Room for Improvement: Veracode users suggest improving integration with more development tools, enhancing scan speed, and refining the user interface. CrowdStrike Falcon Cloud Security users seek better data visualization, more frequent updates, and enhanced user experience for reporting features.

Ease of Deployment and Customer Service: Veracode customers find deployment manageable but complex without support, with positive feedback for customer service responsiveness. CrowdStrike Falcon Cloud Security users find deployment streamlined and benefit from a strong support system.

Pricing and ROI: Veracode offers competitive pricing and good ROI. CrowdStrike Falcon Cloud Security is perceived as expensive but justifiable due to its advanced capabilities, delivering high ROI. Users find the investment worthwhile for the enhanced security provided.

To learn more, read our detailed CrowdStrike Falcon Cloud Security vs. Veracode Report (Updated: May 2025).

CrowdStrike Falcon Cloud Security vs. Veracode

May 2025

Download the complete report

Helped 856,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CrowdStrike Falcon Cloud Se...

Ranking in Application Security Tools

11th

Ranking in Container Security

4th

Ranking in Application Security Posture Management (ASPM)

3rd

Average Rating

8.2

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Cloud Workload Protection Platforms (CWPP) (6th), Cloud Security Posture Management (CSPM) (8th), Cloud-Native Application Protection Platforms (CNAPP) (7th), Cloud Infrastructure Entitlement Management (CIEM) (2nd)

Veracode

Ranking in Application Security Tools

2nd

Ranking in Container Security

8th

Ranking in Application Security Posture Management (ASPM)

2nd

Average Rating

8.2

Reviews Sentiment

7.0

Number of Reviews

201

Ranking in other categories

Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st)

Mindshare comparison

As of June 2025, in the Application Security Tools category, the mindshare of CrowdStrike Falcon Cloud Security is 0.9%, up from 0.3% compared to the previous year. The mindshare of Veracode is 9.2%, down from 10.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Saif Ullah Khan

Security Engineer at ebryx

Boosts security by automatically blocking applications or activities, but query responses have been slower recently

For the past six months, we have been facing some issues. Because it is a cloud-based infrastructure, it has been getting slower. There are no bugs because they release updates continuously. We highly appreciate that, but during hunting or running a query on different logs, the time frame has increased in the past six months. It takes longer to give us the results. Another issue is the lack of proper documentation. During investigations, there is no proper documentation available. This is a problem because many people are saying there should be proper documentation explaining what CrowdStrike captures from the machine and the meaning of it.

Read full review

David-Robertson

Director Enterprise Architecture at Exeter Finance Corp.

Static scanning and software composition analysis are very helpful, but the usability needs improvement

Static scanning and software composition analysis are very helpful. My colleagues and I don't need to be experts on all of those ancillary things, so we can focus more on the business deliverables. They have a pretty good tool that allows me to run scans of my local integrated development environment. I can find a lot of those flaws a lot sooner than I would if I had to wait for these cloud-based scans. They've come out with some sort of automated fix feature. I haven't used it, but they gave us a demo of it, and that one looks promising. I don't know if it's ready for prime time yet.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of Falcon Cloud Security is its comprehensive threat-hunting ability."

"The RTR feature stands out as particularly valuable to me due to its capability to log into machines."

"The most valuable feature is the auto-detection capability for threat hunting and issuing advisories on remedies."

"The immediate mitigation of potential threats and instant alerts are valuable."

"I think the overall solution should be rated a ten out of ten."

"It's easy to gather insights and conduct analysis about existing threats."

"The product's initial setup phase is easy."

"Technical support is helpful."

More CrowdStrike Falcon Cloud Security pros

"Veracode is a very good tool, especially from a compliance standpoint."

"It can be very hard to make a good lab environment with a console with log windows and code bases. What I like about Veracode is that they managed to do that. It has a very responsive graphical user interface and has worked very well. I was very pleased with that."

"The best feature is definitely the detailed reports. It provides code-related queries in the order of high, medium, and low depending on what we need to do. Veracode is user-friendly as well."

"To me, the principal feature is the CLI (command-line interface) because I put together a lot of implementations using it. Another important aspect is the low false-positive rate because the solution is very configurable. It is as low as 1 percent and that is a huge difference compared to competitors."

"Considering that in my project, we are mostly using Software Composition Analysis as a part of Static Code Analysis, for me, the main part is reporting and highlighting necessary vulnerabilities. Veracode platform has a rather good database of different vulnerabilities in different libraries and different sources. So, finding vulnerabilities in third-party libraries is the main feature of Software Composition Analysis that we use. It is the most important feature for us."

"The coding standards in our development group have improved. From scanning our code we've learned the patterns and techniques to make our code more secure. An example would be SQL injection. We have mitigated all the SQL injection in our applications."

"What we found most valuable in Veracode is the ability to do automatic scans of our software. We've incorporated the solution into our SDLC process, so we take our builds before they get released and put them through scans to ensure any new vulnerabilities haven't occurred."

"It's not "one policy fits all." I really like that Veracode allows me to set up specific policies that I can apply to applications."

More Veracode pros

Cons

"The only suggestion for improvement would be the pricing."

"One area for improvement in Falcon Cloud Security is the support portal."

"The CrowdStrike dashboard currently lacks a username field."

"It would be more convenient if there was an easier way to install CrowdStrike, perhaps through better integration with Active Directory."

"There is room for improvement in the solution's ability to handle Linux systems."

"For the past six months, we have been facing some issues. Because it is a cloud-based infrastructure, it has been getting slower."

"The tool is expensive."

"The CrowdStrike partner portal documentation could be improved to provide proper instructions for integrating their products."

More CrowdStrike Falcon Cloud Security cons

"I think if they could improve the operations around accepted vulnerabilities, we would see improvements in our productivity."

"It can take time to find options if you don’t use the interface a lot. At some point, a bit of interface restyling may help."

"Veracode scans provide a higher number of false positives."

"I do expect large applications with millions of lines of code to take a while, but it would be nice if there was a possibility to be able to have a baseline initial scan. I know that Veracode touts that there are Pipeline Scans that are supposed to take 90 seconds or less, and we've tried to do that ourselves with our ERP application. However, it actually times out after two hours of scanning. If the static scan itself or another option to run a lower tier scan can be integrated earlier on into our SDLC, it would be great. Right now, it takes so long that we usually leave it till a bit later in the cycle, whereas if it ran faster, we could push it to the time when a developer will be checking in code. That would make us feel a lot more confident that we'd be able to catch things almost instantaneously."

"The only areas that I'm concerned with are some of the newer code libraries, things that we're starting to see people dabble with. They move quickly enough to get them into the Analysis Engine, so I wouldn't even say it is a complaint. It is probably the only thing I worry about: Occasionally hitting something that is built in some other obscure development model, where we either can't scan it or can't scan it very well."

"I would like to see expanded coverage for supporting more platforms, frameworks, and languages."

"There might be room for improvement in the in-app guidance and the tips and tricks for the developer about how to progress. We would like more insight into the development environment, where they would get guidance on how to avoid flaws."

"Veracode should provide more flexibility in its pricing and licensing modules so that it could be more affordable for all types of projects and not only for very active mission-critical projects."

More Veracode cons

Pricing and Cost Advice

"The pricing is fair for what you get. I'd rate them a solid nine out of ten in terms of pricing."

"Its price is moderate."

"I am not the one who handled the pricing. A different team worked on it, but it is pretty expensive."

"It's an expensive package but does what it says it will do."

"CrowdStrike Falcon is very expensive."

"CrowdStrike Falcon Cloud Security is very expensive for us. Last month, we had a big issue that took much time and money to resolve. It slowed down our business and required our management team to get involved. We had a problem similar to the "Blue Screen of Death" issue many US companies faced. This incident used up many of our IT resources in just a few months. That's why we're looking for a replacement tool now."

"It's an expensive product"

"It is expensive, but it adds value."

More CrowdStrike Falcon Cloud Security pricing and cost advice

"It's very expensive, especially when you are a very small organization. If you're using Veracode at an individual level, for example, you're a developer or you run agents, the pricing might not affect you, but if you're using it at a company level to troubleshoot security issues, the pricing is not quite favorable. It may affect ROI."

"It's too expensive for the European market. That is why, in a big bank with 400 applications, we are able to use it only for 10 of them. But the other solutions are also expensive, so it wasn't a differentiator."

"The cost has been a barrier to wider use here. I think my team is the only one at the university. Other folks might like to use it, but it's pretty pricey. You could see what else is in the market, but I hear that's the price for most solutions. You might not find a better deal in the market, or it might be an incomplete solution. I mean, for the level of interaction we get with Veracode staff, it's been pretty good."

"When I looked at the pricing, it was definitely a value. In terms of the service and what it's checking, the cost was very reasonable, particularly because we could have multiple code bases as part of a project."

"I recommend going for a one-year licensing with CA, because currently they are the leaders in this field with more features and a much better turn around time with a cheaper position, but there are a lot of new companies coming up in the market and they are building up their platforms."

"From a cost perspective, it seems okay, although we will probably evaluate alternatives next time it's up for renewal because for us, it's a relatively high cost, and we want to make sure that we are using our resources most appropriately."

"I know that Veracode is a semi-pricey solution. If you are serious about security, I would recommend that you use an open-source option to learn how the scanning process works and then look into Veracode if you want to really step up your game and have an all-in-one solution."

"Licensing is pretty flexible. It's a little bit weird, it's by the size of the binary, which is a strange way to license a product. So far they've been pretty flexible about it."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

856,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

14%

Manufacturing Company

Insurance Company

Computer Software Company

17%

Financial Services Firm

16%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about CrowdStrike Falcon Cloud Security?

It's easy to gather insights and conduct analysis about existing threats.

What is your experience regarding pricing and costs for CrowdStrike Falcon Cloud Security?

It's an expensive product. The solution costs around $60 for a single user on a yearly basis. I would rate the pricing a four out of ten.

What needs improvement with CrowdStrike Falcon Cloud Security?

I am not part of the current monitoring team, so I do not know how they feel about the tool. I am sharing information related to the tool based on the feedback and on my experience deploying it fou...

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

What do you like most about Veracode?

The SAST and DAST modules are great.

What is your experience regarding pricing and costs for Veracode?

The product’s price is a bit higher compared to other solutions. However, the tool provides good vulnerability and database features. It is worth the money.

Wiz vs CrowdStrike Falcon Cloud Security

Comparisons

Compared 16% of the time

AWS GuardDuty vs CrowdStrike Falcon Cloud Security

Compared 13% of the time

Prisma Cloud by Palo Alto Networks vs CrowdStrike Falcon Cloud Security

Compared 10% of the time

Sysdig Falco vs CrowdStrike Falcon Cloud Security

Compared 5% of the time

Snyk vs CrowdStrike Falcon Cloud Security

Compared 3% of the time

More CrowdStrike Falcon Cloud Security Competitors

SonarQube Server (formerly SonarQube) vs Veracode

Compared 19% of the time

Checkmarx One vs Veracode

Compared 10% of the time

GitHub Advanced Security vs Veracode

Compared 7% of the time

Fortify on Demand vs Veracode

Compared 4% of the time

Snyk vs Veracode

Compared 4% of the time

More Veracode Competitors

Product Reports

CrowdStrike Falcon Cloud Security

June 2025

CrowdStrike Falcon Cloud Security report

Download CrowdStrike Falcon Cloud Security product report

Download Veracode product report

May 2025

Also Known As

CrowdStrike Falcon ASPM

Crashtest Security , Veracode Detect

Overview

CrowdStrike Falcon Cloud Security is a platform of cloud security solutions aimed at protecting organizations from breaches while simplifying cloud security management. The unified platform combines several cloud security functionalities for comprehensive protection. Built on the CrowdStrike Falcon Platform, it leverages the powerful agent and technology used in CrowdStrike's renowned endpoint protection solutions, extending its capabilities seamlessly to cloud environments.

CrowdStrike Falcon Cloud Security is designed to be a shield for the cloud infrastructure. One of its key strengths is its ability to monitor cloud workloads for potential breaches and attacks. It doesn't matter if you're running virtual machines, containers, or a combination of both across different cloud providers – Falcon Cloud Security offers visibility and protection. Additionally, it works tirelessly to pinpoint misconfigurations or vulnerabilities in your cloud setup, proactively stopping issues before they become full-blown security incidents. Compliance becomes easier too, as it can check if your deployments meet the requirements of various industry standards and regulations.

If you heavily utilize containers and Kubernetes, Falcon Cloud Security has you covered. It delves deep into container images and running containers to spot weaknesses and potential threats, helping you secure your containerized applications from the moment they're developed to when they're up and running. Finally, it tackles the often messy world of permissions in the cloud. Falcon Cloud Security analyzes identities and their attached permissions, ensuring that the principle of least privilege is followed and sensitive data isn't exposed due to overly broad access rights.

In essence, CrowdStrike Falcon Cloud Security aims to simplify the complexities of cloud security by consolidating tools, providing a centralized view of your risks and threats, and delivering advanced protection that blends seamlessly with your development processes.

Based on the interviews we conducted with CrowdStrike Falcon Cloud Security users, overall, the sentiment is positive. Users praise the solution's efficacy in detecting and preventing threats, its ease of use, scalability, stability, and integration with existing systems. There were also mentions of areas for improvement, such as the pricing, the user interface, and customer support.

CrowdStrike

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

Information Not Available

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.