Cymulate vs Veracode comparison

Cancel
You must select at least 2 products to compare!
Cymulate Logo
199 views|150 comparisons
100% willing to recommend
Veracode Logo
347 views|199 comparisons
90% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Cymulate and Veracode based on real PeerSpot user reviews.

Find out in this report how the two Penetration Testing Services solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Cymulate vs. Veracode Report (Updated: March 2024).
769,662 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The reporting capabilities are very good.""The most valuable feature for us is the zero-day."

More Cymulate Pros →

"When we do have errors, Veracode is always available, their consultants, to help us either mitigate the error, or provide technical assistance on pointing exactly where the problem is and how we could probably fix it. I'm always amazed at how knowledgeable they are.""The user interface is excellent, the code review process is quick and provides great analytics to understand our code better, and the SAST scan is high-speed.""The most valuable feature of Veracode Static Analysis is the scanning.""Regarding Software Composition Analysis, an exceptional feature is that during a SAST scan, SCA is seamlessly conducted in the background.""The most valuable feature is the SAST capability and its integration into the Veracode pipelines.""Tech support is outstanding. Best in class. Absolutely. They bend over backwards to help us. We'll come up with questions and within minutes, we'll get answers. It's amazing. It's truly amazing.""It has improved the quality of code being delivered for test and its vulnerability resolutions timeline has improved.""The source composition analysis component is great because it gives our developers some comfort in using new libraries."

More Veracode Pros →

Cons
"The product must provide consultancy for initial setup.""The reporting process requires significant improvement as it often takes longer than expected and the quality is lacking."

More Cymulate Cons →

"Veracode's ability to fix flaws is less sophisticated than that of its competitors.""Some features could be improved in terms of user-friendliness.""The training lab is not very user-friendly and takes a long time to set up.""The scanning could be improved, because some scans take a bit of time.""I would like to see more technical support for some of the connectors, some more detailed diagrams or run-books on how to install some of stuff; more hand-holding in the sense of understanding our environment.""Scanning large amounts of code can be a time-consuming process and there is scope for improvement.""It needs better controls to include/exclude specific sections when creating a report that can be shared externally with customers and prospects.""There are many times when their product goes to check my code and it dies, and I don't know why. I've contacted support and they're not really helpful with this particular problem. I go to the logs and I look at what I can but I can't tell why the check process has essentially just died in the middle of checking."

More Veracode Cons →

Pricing and Cost Advice
  • "The product is affordable."
  • "Cymulate's services are expensive."
  • More Cymulate Pricing and Cost Advice →

  • "Its complexity makes it quite expensive, but it’s all worth it, with all the engineering in the background."
  • "The pricing is pretty high."
  • "The worst part about the product is that it does not scale at all. Also, microservices apps will cost you a fortune."
  • "I think licensing needs to be changed or updated so that it works with adjustments. Pricing is expensive compared to the amount of scanning we perform."
  • "It's worth the value"
  • "Pricing seems fair for what is offered, and licensing has been no problem. All developers are able to get the access they need."
  • "It can be expensive to do this, so I would just make sure that you're getting the proper number of licenses. Do your analysis. Make sure you know exactly what it is you need, going in."
  • "The licensing and prices were upfront and clear. They stand behind everything that is said during the commercial phase and during the onboarding phase. Even the most irrelevant "that can be done" was delivered, no matter how important the request was."
  • More Veracode Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Penetration Testing Services solutions are best for your needs.
    769,662 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:The most valuable feature for us is the zero-day.
    Top Answer:Cymulate's services are expensive for CE EU region . In some cases, it may be more cost-effective to hire a local competitor or ethical hacker for a year to perform frequent testing rather than… more »
    Top Answer:The management at Cymulate is inconsistent and unreliable, particularly in the sales process. Changes happen abruptly, with sudden shifts in personnel and strategy. The turnover rate for key… more »
    Top Answer:SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use… more »
    Top Answer:The SAST and DAST modules are great.
    Top Answer:The product’s price is a bit higher compared to other solutions. However, the tool provides good vulnerability and database features. It is worth the money.
    Ranking
    Views
    199
    Comparisons
    150
    Reviews
    2
    Average Words per Review
    765
    Rating
    9.0
    Views
    347
    Comparisons
    199
    Reviews
    101
    Average Words per Review
    976
    Rating
    8.1
    Comparisons
    Pentera logo
    Compared 39% of the time.
    Picus Security logo
    Compared 21% of the time.
    XM Cyber logo
    Compared 9% of the time.
    SafeBreach logo
    Compared 8% of the time.
    AttackIQ logo
    Compared 5% of the time.
    SonarQube logo
    Compared 27% of the time.
    Checkmarx One logo
    Compared 14% of the time.
    Fortify on Demand logo
    Compared 7% of the time.
    Snyk logo
    Compared 6% of the time.
    OWASP Zap logo
    Compared 4% of the time.
    Also Known As
    Crashtest Security , Veracode Detect
    Learn More
    Overview

    For companies that want to manage their security posture against the evolving threat landscape: Cymulate SaaS-based Extended Security Posture Management (XSPM) deploys within an hour, enabling security professionals to continuously challenge, validate and optimize their cyber-security posture end-to-end across the MITRE ATT&CK framework.

    The platform provides out-of-the-box, expert and threat intelligence-led risk assessments that are simple to deploy and use for all maturity levels, and constantly updated. It also provides an open framework to create and automate red and purple teaming by generating penetration scenarious and advanced attack campaigns tailored to their unique environments and security politices. Cymulate allowes professionals to manage, know and control their dynamic environment. 

    Veracode is a leading application security platform that helps organizations to develop and deliver secure software. Veracode's solution provides comprehensive capabilities for static analysis, dynamic analysis, software composition analysis, and manual penetration testing.

    Veracode's static analysis solution scans source code for various security vulnerabilities, including common web application attack vectors, injection flaws, cross-site scripting, and insecure direct object references. Veracode's dynamic analysis solution simulates real-world attacks to identify vulnerabilities that may not be detectable by static analysis alone. Veracode's software composition analysis solution scans open-source and third-party components for known vulnerabilities. Veracode's manual penetration testing service is performed by experienced security professionals who use a variety of techniques to identify vulnerabilities in software applications.

    Many organizations, including Fortune 500 companies, government agencies, and startups, use Veracode's solution. Veracode's customers rely on Veracode to help them to improve the security of their software applications and to reduce the risk of data breaches and other security incidents.

    Here are some of the benefits of using Veracode:

    • Veracode provides capabilities for static analysis, dynamic analysis, software composition analysis, and manual penetration testing to help organizations identify and fix security vulnerabilities in their software applications early in the development process.
    • Veracode helps organizations reduce the risk of data breaches and other security incidents by identifying and fixing security vulnerabilities in their software application. 
    • Veracode helps organizations to comply with industry regulations. Many industries have regulations that require organizations to implement security measures to protect their customers' data. Veracode's solution can help organizations to comply with these regulations by providing them with the tools and resources they need to identify and fix security vulnerabilities in their software applications.
    Sample Customers
    Euronext, YMCA, Telit, Nemours 
    Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
    Top Industries
    VISITORS READING REVIEWS
    Financial Services Firm18%
    Computer Software Company15%
    Manufacturing Company6%
    Comms Service Provider5%
    REVIEWERS
    Computer Software Company26%
    Financial Services Firm23%
    Insurance Company9%
    Comms Service Provider6%
    VISITORS READING REVIEWS
    Financial Services Firm18%
    Computer Software Company15%
    Manufacturing Company8%
    Government6%
    Company Size
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise13%
    Large Enterprise66%
    REVIEWERS
    Small Business31%
    Midsize Enterprise20%
    Large Enterprise49%
    VISITORS READING REVIEWS
    Small Business17%
    Midsize Enterprise13%
    Large Enterprise70%
    Buyer's Guide
    Cymulate vs. Veracode
    March 2024
    Find out what your peers are saying about Cymulate vs. Veracode and other solutions. Updated: March 2024.
    769,662 professionals have used our research since 2012.

    Cymulate is ranked 15th in Threat Intelligence Platforms with 2 reviews while Veracode is ranked 2nd in Penetration Testing Services with 194 reviews. Cymulate is rated 9.0, while Veracode is rated 8.2. The top reviewer of Cymulate writes "An affordable solution that improves an organization’s security posture and provides excellent reporting capabilities". On the other hand, the top reviewer of Veracode writes "Helps to reduce false positives and prevent vulnerable code from entering production, but does not support incremental scanning ". Cymulate is most compared with Pentera, Picus Security, XM Cyber, SafeBreach and AttackIQ, whereas Veracode is most compared with SonarQube, Checkmarx One, Fortify on Demand, Snyk and OWASP Zap. See our Cymulate vs. Veracode report.

    See our list of best Penetration Testing Services vendors.

    We monitor all Penetration Testing Services reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.