ExtraHop Reveal(x) 360 vs Veracode comparison

Read 204 Veracode reviews

19,095 Views
4,774 Comparison Views

90% willing to recommend

ExtraHop Reveal(x) 360

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Veracode and ExtraHop Reveal(x) 360 compete in the cybersecurity category. ExtraHop holds an edge due to its advanced real-time threat detection capabilities.

Features: Veracode users value its strong code scanning, integrations with development tools, and application security platform. ExtraHop users appreciate its real-time threat detection, network visibility, and extensive response capabilities.

Room for Improvement: Veracode requires improvements in scanning speed, reporting functionality, and specific performance areas. ExtraHop needs better integration with security tools, simplified alert management, and scalability.

Ease of Deployment and Customer Service: Veracode is recognized for its straightforward deployment and responsive support. ExtraHop has a steeper learning curve and mixed feedback on customer service response times.

Pricing and ROI: Veracode's pricing is competitive with clear ROI through improved code security. ExtraHop has higher costs but offers substantial ROI due to enhanced network protection.

To learn more, read our detailed ExtraHop Reveal(x) 360 vs. Veracode Report (Updated: September 2025).

ExtraHop Reveal(x) 360 vs. Veracode

September 2025

Download the complete report

Helped 869,566 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ExtraHop Reveal(x) 360

Ranking in Container Security

30th

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (19th), Network Traffic Analysis (NTA) (9th), Extended Detection and Response (XDR) (23rd)

Veracode

Ranking in Container Security

8th

Average Rating

8.2

Reviews Sentiment

6.9

Number of Reviews

204

Ranking in other categories

Application Security Tools (2nd), Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of October 2025, in the Container Security category, the mindshare of ExtraHop Reveal(x) 360 is 0.3%, up from 0.1% compared to the previous year. The mindshare of Veracode is 3.4%, down from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Market Share Distribution
Product	Market Share (%)
Veracode	3.4%
ExtraHop Reveal(x) 360	0.3%
Other	96.3%

Container Security

Featured Reviews

Maksym Toporkov

Head of Research And Development at Quipu GmbH

A competitive choice for network detection and response with exceptional user interface, ease of implementation and minimal false positives

The NDR feature analyzes network traffic, creating records with connection details. While these records offer insights, there's a limitation in investigating payloads directly. ExtraHop provides an option for an additional server to save payloads, but its temporary storage has constraints. Unlike some competitors, it lacks an automatic payload-saving feature for each detection, presenting an improvement opportunity. Suggested enhancement involves the main sensor prompting payload storage for specific detections, streamlining the investigation process, and contributing to a more efficient workflow. A drawback includes packet storage limitations for payload data, necessitating timely extraction for thorough investigations.

Read full review

Kv Rao

Site Leader (India) at Industrial Scientific

Integrates pipelines smoothly and fortifies code against vulnerabilities

I use Veracode in multiple places including static code analysis, penetration testing, and dynamic code analysis. It is part of our pipeline and integrates well with Bitbucket and Git pipelines The ease of integration with Bitbucket pipelines and Git pipelines is vital for us. Veracode allows us…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is scalable."

"It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for network security and management."

"It is very easy to collect and handle data in ExtraHop Reveal(X) Cloud. Integration with Big Data is also easy. Many of our customers integrate it with Big Data platforms like Splunk or Elastic. It is also easy to handle and easy to understand."

"The main feature that I have found valuable is the solution's ability to find issues in static analysis. Additionally, there are plenty of useful tools."

"It is SaaS hosted. That makes it very convenient to use. There is no initial time needed to set up an application. Scanning is a matter of minutes. You just log in, create an application profile, associate a security configuration, and that's about it. It takes 10 minutes to start. The lack of initial lead time or initial overhead to get going is the primary advantage."

"Veracode is a very good tool, especially from a compliance standpoint."

"The Security Labs [is] where I have the developers training and constantly improving their security, and remembering their security techniques. That way, they are more proactive and make sure things are correct. They're faster because they're doing it in the first place."

"We used Veracode to improve our security posture and speed up the time to market by streamlining the development process, which enhanced collaboration between developers, operations, and security teams."

"It has the ability to scale, and the fact that it doesn't produce a lot of false positives."

"The most valuable feature is the remediation consulting that they give. I feel like any vendor can identify the flaws but fixing the flaws is what is most important. Being able to have those consultation calls, schedule them in the platform, and have that discussion with an applications expert, that process scales well and that is what has allowed a lot more reduction of risk to happen."

"Because it is a SaaS offering, I do not have to support the infrastructure."

More Veracode pros

Cons

"A drawback includes bucket storage limitations for payload data, necessitating timely extraction for thorough investigations."

"They can include integration with SAP. Currently, no vendor provides network performance monitoring in the SAP market. It is a very big market. We have around 400 customers for SAP in Korea. In the USA, there are more than 10,000 customers."

"There needs to be more support."

"The cost of the solution is a little bit expensive. Expensive in the sense that there was a hundred percent increase in cost from last year to this year, which is certainly not justified."

"The area with the most room for improvement is the speed and responsiveness of the query, as it is usually very slow."

"The one thing I'd like to be able to do is schedule dynamic scans. Today we're kicking those off manually, but I believe that it's something have on their roadmap."

"Veracode can be slow at times and has room for improvement, which may cause delays in our products and prolonged static scans."

"I'd like to see an improved component of it work in a DevOps world, where the scanning speed does not impede progress along the AppSec pipeline."

"Sometimes, the scans halt or drop for some reason, and we need to get help from Veracode to fix it."

"The GUI requires significant simplification, as its current complexity creates a steep learning curve for new users."

"All areas of the solution could use some improvement."

More Veracode cons

Pricing and Cost Advice

"When compared to other solutions, it aligns with the market average, indicating a competitive pricing level."

"Licensing cost is on a yearly basis and there are no additional costs, the pricing is straightforward."

"If you're licensing, and you're looking at licensing models, you might want to ask Veracode about their microservice, depending on the company. If you are a microservice architecture, I would suggest asking them about their microservice pricing. I would suggest that you evaluate that with your code and their other licensing model, which is like a lump sum in size of artifacts, and just make sure that you price that out with them, because there might be some tradeoffs that can be made in price."

"It is very reasonably priced compared to what we were paying our previous vendor. For the same price, we are getting much more value and reducing our AppSec costs from 40 to 50 percent."

"For the value we get out of it, coupled with the live defect review sessions, we find it an effective value for the money. We are a larger organization."

"It's very expensive, especially when you are a very small organization. If you're using Veracode at an individual level, for example, you're a developer or you run agents, the pricing might not affect you, but if you're using it at a company level to troubleshoot security issues, the pricing is not quite favorable. It may affect ROI."

"The licensing is fair, it is time-limited (e.g. one year) but there is a size cap for every app. If your applications are big (due third-party libraries, for example) you should discuss this beforehand and explore suitable agreements."

"Veracode is affordable for large organizations, but its pricing may be out of reach for small and medium companies."

"Veracode is costly. They have different license models for different customers. What we had was based on the amount of code that has been analyzed. The license that we had was capped to a certain amount, for example, 5 Gig. There would be an extra charge for anything above 5 Gig."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

869,566 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

Government

Computer Software Company

Comms Service Provider

Financial Services Firm

17%

Computer Software Company

15%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	43
Large Enterprise	112

Questions from the Community

What do you like most about ExtraHop Reveal(x) 360?

It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for...

What needs improvement with ExtraHop Reveal(x) 360?

What advice do you have for others considering ExtraHop Reveal(x) 360?

I recommend prioritizing demos over POCs when engaging with vendors. Organizing POCs involves significant time and resource investments for both parties. Instead, invest time in multiple demo sessi...

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

What do you like most about Veracode Static Analysis?

I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.

What is your experience regarding pricing and costs for Veracode Static Analysis?

When considering pricing, Veracode stands out due to its lower cost per service and more scalable options. It offers nearly five security testing features within its own service, making it a compet...

ExtraHop Reveal(x) vs ExtraHop Reveal(x) 360

Comparisons

Compared 19% of the time

Wiz vs ExtraHop Reveal(x) 360

Compared 15% of the time

Corelight vs ExtraHop Reveal(x) 360

Compared 13% of the time

Darktrace vs ExtraHop Reveal(x) 360

Compared 12% of the time

Stellar Cyber Open XDR vs ExtraHop Reveal(x) 360

Compared 12% of the time

More ExtraHop Reveal(x) 360 Competitors

SonarQube Server (formerly SonarQube) vs Veracode

Compared 15% of the time

Checkmarx One vs Veracode

Compared 9% of the time

GitHub Advanced Security vs Veracode

Compared 7% of the time

OWASP Zap vs Veracode

Compared 4% of the time

OpenText Core Application Security vs Veracode

Compared 4% of the time

More Veracode Competitors

Product Reports

Intrusion Detection and Prevention Software (IDPS)

October 2025

Download ExtraHop Reveal(x) 360 product report

Download Veracode product report

September 2025

Also Known As

ExtraHop Reveal(X) Cloud, Reveal(X) Cloud

Crashtest Security , Veracode Detect

Overview

Cloud is where your business operates, where it innovates, how it enables employees, and how it connects with customers. Adversaries know this, and that's why attacks against cloud assets in IaaS, PaaS, and SaaS environments are increasing. With Reveal(x) 360, you can mitigate the blast radius of advanced threats like ransomware and supply chain attacks with unified security across multicloud and hybrid environments in a single management pane.

ExtraHop Networks

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

Wizards of the Coast

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.