Try our new research platform with insights from 80,000+ expert users

GitLab vs Veracode comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.1
GitLab boosts ROI by enhancing DevOps efficiency, time-saving automation, software security, and user satisfaction through broad project adoption.
Sentiment score
6.5
Veracode enhances code security and quality, saves time and costs, supports compliance, and boosts client trust and retention.
Regarding release frequency, previously we had one to two releases per week, but now we achieve daily or on-demand releases, resulting in a three to five-fold increase in release frequency.
Site Reliability Engineer at a tech vendor with 1,001-5,000 employees
Migrating to GitLab is bringing time-saving benefits, and everything is easier to automate.
IT Manager at a tech company with 5,001-10,000 employees
We have saved time significantly, reducing deployment time from four hours to five minutes per deployment.
IT Software Architect at ANAC - Autorità Nazionale Anticorruzione
The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.
Senior Solutions Architect at IDS Comercial
Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
We did see a return on investment with Veracode, as we segregated our remediation efforts, which reduced our time to delivery as well as the number of engineers needed to help us in delivering a secure solution.
DevSecOps Engineer at a tech services company with 11-50 employees
 

Customer Service

Sentiment score
6.6
GitLab support varies by subscription, with paid users satisfied, while free users often use forums or internal resources.
Sentiment score
7.2
Veracode support is praised for expertise and responsiveness, but some users report delays and unhelpful interactions with complex issues.
We have rarely needed to escalate issues to technical support since GitLab usually runs seamlessly.
AWS DevOps/ Site Reliability Engineer at Tata Consultancy
I have interacted with architects for some advice during the implementation, and they were prompt in their response.
Platform Engineer & Manager at a computer software company with 51-200 employees
I have had meetings where they taught me, explained things, and provided guidance for starting from scratch.
IT Manager at a tech company with 5,001-10,000 employees
Access to the engineering team is crucial for faster feedback on the product fix process.
Principal Architect at a consultancy with 11-50 employees
I have communicated with the technical support of Veracode a couple of times, and this was a really great experience because these professionals know their material.
Application Security Specialist at Herrenknecht
They share detailed information via email, including screenshots or further clarification about the issue.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
 

Scalability Issues

Sentiment score
7.3
GitLab is praised for adaptability, handling diverse workloads and large architectures smoothly, though some on-premises scalability issues remain.
Sentiment score
7.4
Veracode offers impressive scalability, efficiently handling growth and multiple applications, despite some licensing challenges, earning high user ratings.
It has all the features required for our coding and deployment needs, which makes it scalable to our changing requirements.
Senior Application Developer at IBM
We're transitioning to OpenShift for future scalability with increased user numbers.
Platform Engineer & Manager at a computer software company with 51-200 employees
For scaling, other deployment options from GitLab's side need to be adopted.
Manager, Engineering at 7-Eleven
Cloud solutions are easier to scale than on-premise solutions.
Senior Solutions Architect at IDS Comercial
It has a good capacity to scale effectively.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
Implementing these features into our normal CI/CD was good, so I can say that scalability is really good.
Application Security Specialist at Herrenknecht
 

Stability Issues

Sentiment score
8.1
Users praise GitLab for stability and reliability with minimal downtime, highlighting its strong performance and high stability ratings.
Sentiment score
7.8
Veracode is highly reliable with minimal downtime and issues, though occasional scan speed and false positive concerns exist.
I have not encountered any performance or stability issues with GitLab so far.
AWS DevOps/ Site Reliability Engineer at Tata Consultancy
The updates are frequent and demanding, happening at least once a week due to security reasons.
Chief Technology Officer at Acclym
We raised a request with GitLab support, but they were unable to help because they could not find the root cause of what went wrong.
Assistant Manager at a tech vendor with 10,001+ employees
If the Veracode server is down, we experience many issues during the scan.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
I have observed that it is not that reliable in terms of security because Veracode was not able to find some security threats in our application that existed since the product was developed.
Software Development Engineer II at Rocket Software
It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
 

Room For Improvement

GitLab users want better integrations, documentation, project management, intuitive pipelines, enhanced security, user-friendly interface, and simplified pricing.
Veracode users face false positives, outdated UI, integration issues, slow scans, and desire flexible pricing and improved support.
It would be beneficial to have a user-friendly interface for setting up these configurations, instead of just writing YAML files.
IT Manager at a tech company with 5,001-10,000 employees
It is essential to conduct proper testing, such as unit tests and code coverage, within the SDLC pipelines.
Manager, Engineering at 7-Eleven
GitLab can improve its user interface to make conflict resolution more user-friendly.
Senior Application Developer at IBM
If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.
We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
A nice addition would be if it could be extended for scenarios with custom cleansers.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Setup Cost

GitLab offers a free tier, with Premium at $19 and Ultimate at $99 per user monthly, plus optional CI/CD costs.
Veracode's pricing is costly, but its features suit large enterprises; smaller businesses should consider alternatives due to budget constraints.
Even when working in other small organizations, we opted for GitLab as it was cost-efficient.
Senior Application Developer at IBM
The pricing of GitLab is reasonable, aligning with what I consider to be average compared to competitors.
IT Manager at a tech company with 5,001-10,000 employees
The price is high, and it limits user accessibility.
IT Software Architect at ANAC - Autorità Nazionale Anticorruzione
It's not the most expensive solution.
Senior Solutions Architect at IDS Comercial
Overall, Veracode's pricing is lower and more scalable than many alternatives in the market.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
If there's a security gap, you'll never know the cost or effect.
 

Valuable Features

GitLab excels in CI/CD pipelines, usability, integration, and automation, enhancing collaboration, productivity, and efficient DevOps workflows.
Veracode provides comprehensive code analysis, vulnerability management, and integration tools, enhancing security and supporting complex project needs efficiently.
As we implement automated testing and DevSecOps, it speeds up the process by forty to sixty percent.
Platform Engineer & Manager at a computer software company with 51-200 employees
The Ultimate version offers enhanced features for security scanning through DAST and SAST analysis, which have greatly benefitted our project workflow.
IT Software Architect at ANAC - Autorità Nazionale Anticorruzione
By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.
Manager, Engineering at 7-Eleven
It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.
Site Leader (India) at Industrial Scientific
The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.
It fixes issues directly in the IDE while you're doing it.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Categories and Ranking

GitLab
Ranking in Application Security Tools
11th
Ranking in Static Application Security Testing (SAST)
9th
Ranking in Software Composition Analysis (SCA)
4th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
90
Ranking in other categories
Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (11th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (1st)
Veracode
Ranking in Application Security Tools
2nd
Ranking in Static Application Security Testing (SAST)
2nd
Ranking in Software Composition Analysis (SCA)
3rd
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
208
Ranking in other categories
Container Security (8th), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of January 2026, in the Application Security Tools category, the mindshare of GitLab is 2.1%, down from 3.1% compared to the previous year. The mindshare of Veracode is 5.4%, down from 10.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
Veracode5.4%
GitLab2.1%
Other92.5%
Application Security Tools
 

Featured Reviews

BasilJiji - PeerSpot reviewer
System Engineer at a retailer with 10,001+ employees
Role-based workflows have transformed daily deployments and improve team collaboration
GitLab has role-based access control, so when a team member needs to make a code change, they cannot directly apply it to the environment but must put in a merge request. Once a senior reviews the code and approves it, then it is implemented across the environment, making it safer and allowing everyone to experience the process. The best features GitLab offers are version control and automation, which are the major things that stand out to me. When it comes to access, the login is very smooth, with just one login integrated with our Okta, allowing everyone to log in easily. Deployments become much easier, and that is how GitLab helps. The automation features make my work easier because we use a tool called AWX, which is connected to GitLab. Whenever we run a job on AWX, it directly checks the code and uses it. Since the code is not preserved locally but kept in the cloud, it is safe and nobody can tamper with it. When it comes to safety, that is a major thing. Automation features allow the code to be accessed from any tools we use, so the jobs we run are helping tremendously and doing their work perfectly. For pipeline tasks, we have created a significant amount of pipelines, which are all hosted in GitLab. Running the pipelines has become much easier, and they are doing a perfect job, helping tremendously in our day-to-day activities. GitLab has positively impacted my organization because previously we stored code locally on servers, leading to many risks. Since GitLab came into our environment, our integration and deployments became much easier, helping our work become much smoother. Improvements from GitLab have led to better team collaboration because when several people are working, they can all edit the code and submit it as a merge request, and once approved, it reflects directly to the main branch. Many can work at the same time. When it comes to deployments, deploying has become much faster since we started using GitLab, and even if errors occur, we can spot them easily and troubleshoot, which has helped tremendously.
reviewer2703864 - PeerSpot reviewer
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
Onboarding developers successfully while improving code security through IDE integration
Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
879,853 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
13%
Manufacturing Company
11%
Government
11%
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business36
Midsize Enterprise10
Large Enterprise45
By reviewers
Company SizeCount
Small Business70
Midsize Enterprise44
Large Enterprise114
 

Questions from the Community

What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
We are currently using general GitLab, not GitLab Premium.
What needs improvement with GitLab?
GitLab can be improved by being more responsive in the UI and offering better pricing for premium features, which would be useful for small startups. While GitLab's CI/CD is powerful, it is somewha...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What do you like most about Veracode Static Analysis?
I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.
What is your experience regarding pricing and costs for Veracode Static Analysis?
My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.
 

Comparisons

 

Also Known As

Fuzzit
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about GitLab vs. Veracode and other solutions. Updated: December 2025.
879,853 professionals have used our research since 2012.