Ixia BreakingPoint vs Veracode comparison

Read 208 Veracode reviews

29,480 Views
15,330 Comparison Views

89% willing to recommend

Ixia BreakingPoint

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Veracode and Ixia BreakingPoint compete in the cybersecurity market. Veracode is favored for its affordability and user satisfaction, while Ixia BreakingPoint is chosen for its advanced features despite higher costs.

Features: Veracode offers robust security testing, seamless integration, and efficient vulnerability management. Ixia BreakingPoint provides extensive threat simulations, real-world testing environments, and advanced attack modeling.

Room for Improvement: Veracode needs to enhance scanning speed, improve report customization, and expand its testing capabilities. Ixia BreakingPoint requires improvements in easing its learning curve, increasing the responsiveness of customer support, and simplifying its interface.

Ease of Deployment and Customer Service: Veracode is known for its easy deployment and responsive customer service. Ixia BreakingPoint, although having a complex setup, benefits from supportive customer service during deployment issues.

Pricing and ROI: Veracode is considered affordable and offers good ROI with its scalable solutions. Ixia BreakingPoint, while pricier, justifies its cost with its focus on complex testing environments and specialized features.

To learn more, read our detailed Ixia BreakingPoint vs. Veracode Report (Updated: September 2026).

Ixia BreakingPoint vs. Veracode

Download the complete report

Helped 914,889 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Ixia BreakingPoint

Ranking in Static Application Security Testing (SAST)

33rd

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

No ranking in other categories

Veracode

Ranking in Static Application Security Testing (SAST)

3rd

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

208

Ranking in other categories

Application Security Tools (3rd), Container Security (13th), Software Composition Analysis (SCA) (2nd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (3rd)

Mindshare comparison

As of September 2026, in the Static Application Security Testing (SAST) category, the mindshare of Ixia BreakingPoint is 0.7%, up from 0.4% compared to the previous year. The mindshare of Veracode is 4.8%, down from 7.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST) Mindshare Distribution
Product	Mindshare (%)
Veracode	4.8%
Ixia BreakingPoint	0.7%
Other	94.5%

Static Application Security Testing (SAST)

Featured Reviews

Sai Prasad

Staff QA Engineer at Virsec

Works better for testing traffic, mix profile, and enrollment scenarios than other solutions

Once, when I raised a ticket regarding a hardware or software issue, the solution's support team visited our company to discuss and find out ways to solve the problem. Sometimes, they asked us to send several photos from the back and front end to identify the issue. It was time-consuming as we were occupied with some other testing simultaneously. Instead, it would have been great if they could have visited our company and rectified the problem.

Read full review

reviewer2753535

DevSecOps Engineer at a tech services company with 1,001-5,000 employees

Integrates security into the development process and improves team collaboration

Veracode helps organizations develop software by reducing the risk of security vulnerabilities through developer enablement and applications focused on governance. You can utilize different levels of processes to achieve better performance or a more scalable service. Since I started working with it in 2022, I’ve found it to be cost-effective as well. Overall, Veracode is a user-friendly security tool. It includes features such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA). During the development phase, we can identify vulnerabilities in the application. This process occurs in the staging environment during development. When we're ready to go to production, we conduct a final check. Essentially, this tool helps identify vulnerabilities during the code development stage, including both high-level vulnerabilities and those related to open-source software composition. We utilize specific methodologies for this purpose. Additionally, it offers a feature that allows us to set up policies based on client requirements. This means we can customize the tool to meet the specific needs of our clients, ensuring that they receive the appropriate level of security in their applications. Veracode is user-friendly as well. Compared to other tools, their scans take 15 minutes or under. If you have a large scale of libraries or data, it might take longer, but based on my personal experience, the scan usually runs within fifteen minutes. For my case study using the Veracode tool, I worked on an internal project following industry standards. We used Veracode to improve our security posture and speed up the time to market by streamlining the development process. This enhanced collaboration between developers, operations, and security teams. The automated scanning process helped identify and fix vulnerabilities earlier in the development process. We maintained compliance with regulatory requirements, avoided fines, and built customer trust by integrating security into the development process. When we conduct this scan, we receive data on a list of vulnerabilities. This information improved our communication and increased transparency, which leads to better reports about the efforts being put in. This results in a more effective and efficient collaboration process, making it user-friendly for all involved. When considering costs, if we resort to manual processes, it can be time-consuming. Therefore, we utilize automated scans to identify and fix security issues. This allows us to address vulnerabilities early in the development process, as we discussed previously. This applies both to our in-house code and third-party libraries, using Software Composition Analysis (SCA) agent-based scans. In the future, we will also implement SCA agent-based scans as a separate feature within Veracode, which can help organizations avoid the expensive and time-consuming consequences of security issues. Furthermore, we have seen an increase in compliance, helping to maintain adherence to regulatory requirements and industry standards, thereby avoiding fines and reputational damage associated with noncompliance. Additionally, by integrating security into the development process, we enhance customer trust in our organization and its products.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"There is a virtual version of the product which is scaled to 100s of virtual testing blades."

"The most valuable feature of Ixia BreakingPoint is the ransomware and malware database for simulated attacks."

"The DDoS testing module is useful and quick to use."

"I like that we can test cloud applications."

"We use Ixia BreakingPoint for Layer 7 traffic generation. That's what we like."

"What Ixia BreakingPoint brings to the end customer is the use case."

"The solution has many protocols and options, making it very flexible."

"BPS VE evaluation was used for testing LTE Network elements with a focus on user plane testing BPS VE along with its UI and new concepts to reduce the complexity of manual testing to a large extent."

More Ixia BreakingPoint pros

"It's hard to say that any single feature is the most essential. There are many errors and vulnerabilities in software today in the standard libraries for different vendors because. We don't need to reinvent the wheel every time because we're using standard libraries, and it's important to know that your security isn't compromised because you are using libraries with vulnerabilities."

"The solution can scan old databases and old code written 20 years back."

"What I found most valuable in Veracode is that it gives me a part-by-part report of the entire EAR file and lets me set up the application for a limited time. Once that expires, Veracode allows you to automatically renew it, which is one of the features I find remarkable in Veracode."

"It helps us gain confidence that the applications we're putting out in the hands of millions and millions of people have that industrial-strength quality to them; that we don't need to worry about as much as we used to."

"Overall, it does a very good job of preventing vulnerable code from going into production."

"Compared to when we started versus now, we have done a phenomenal job, year on year our security debt has been continuously decreasing by 10 to 12 percent."

"The dependency graph visualization provides the ability to see nested dependencies within libraries for pinpointing vulnerabilities."

"Our development team use this solution for static code analysis and pen testing."

More Veracode pros

Cons

"The solution originally was hard to configure; I'm not sure if they've updated this to make it simpler, but if not, it's something that could be streamlined."

"I would appreciate some preconfigured network neighborhoods, which are predefined settings for testing networks."

"The price could be better."

"Currently BPS VE's REST API was just developed (some specific functionalities are implemented) and can be improved for better control over the tool using scripts, which help in test automation."

"The quality of the traffic generation could be improved with Ixia BreakingPoint, i.e. to get closer to being accurate in what a real user will do."

"The production traffic simulations are not realistic enough for some types of DDoS attacks."

"They should improve UI mode packages for the users."

"The flash GUI has room for improvement."

More Ixia BreakingPoint cons

"Sometimes, the scans halt or drop for some reason, and we need to get help from Veracode to fix it."

"It's taking too much time to do a quality scan."

"One feature I would like would be more selectivity in email alerts. While I like getting these, I would like to be able to be more granular in which ones I receive."

"It should include more informational, low level, vulnerability summaries and groupings. Large related groups of low level vulnerabilities may amount to a design flaw or another avenue for attack."

"The static scans on Java lack microservices architecture scanning. We have developed an in-house pattern for this and the scans can't take care of it as a single entity."

"There are certain shortcomings in Veracode's static analysis engine. I would improve Veracode's static analysis engine to make it capable of identifying vulnerabilities with low false positives."

"I found that there were far too many warnings and some false positives."

"Security can always be improved."

More Veracode cons

Pricing and Cost Advice

"The price of the solution is expensive."

"There is no differentiation in licenses for Breaking Point. For one license, you will get all the features. There is no complexity in that."

"We have a one year subscription license for $25,000 US Dollars."

"The price is high. We pay for the license monthly."

"The solution is expensive."

"or us, the pricing is somewhere around $12,000 a year. I'm unsure as to what new licenses now cost."

"It is an expensive solution, but it's the best solution available on the market. If you want something at the top, you have to pay a bit more than the average."

"The pricing is a bit high."

"We're very comfortable with their model. We think they're a good value. We worked very closely with Veracode on understanding their license model, understanding what comprises the fee and what does not. With their assistance in design, we decomposed our application in a way where we are scanning a very significant amount of code without wasting their capacity and generating redundant reported issues. You scan in profiles, per se. And we work with them, in their offices, to design the most effective approach. So the advice I would have for customers is, you can get up and live fast, but work closely with Veracode to refine the method you use for scanning and the way you compile the applications. There's a concept called entry-point scanning, and that's probably not used well by the rest of their customers. We see our licensing as a good value because we leverage it heavily."

"I'm unfamiliar with the solution's pricing, but it must be worth the cost from a company perspective, as we have been using it for years and have no plans to move away from it."

"To my knowledge, licensing for Veracode Static Analysis is paid yearly by my company."

"For enterprises, Veracode has done a fairly good job, but its pricing is not suitable for startups. The microservice distributed architecture for a startup is very small. I had to do a lot of discussions on the pricing initially. I previously worked in an enterprise organization where I used Veracode, and that's how I got to know about Veracode, but that was a big organization with more than a thousand employees. So, the cost is very different for them because the size of the application is different. Its pricing makes sense there, but when we try to onboard this solution for the startup ecosystem, pricing is not friendly. Because I knew the product and I knew its value, I onboarded it, but I don't think any other startup at our scale will onboard it."

"Compared to the typical software composition analysis solutions, Veracode is not so costly, although the static analysis part of it is a little costlier."

"If you're licensing, and you're looking at licensing models, you might want to ask Veracode about their microservice, depending on the company. If you are a microservice architecture, I would suggest asking them about their microservice pricing. I would suggest that you evaluate that with your code and their other licensing model, which is like a lump sum in size of artifacts, and just make sure that you price that out with them, because there might be some tradeoffs that can be made in price."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

914,889 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

16%

Comms Service Provider

13%

Outsourcing Company

13%

Construction Company

Financial Services Firm

14%

Manufacturing Company

12%

Outsourcing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	7
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	70
Midsize Enterprise	46
Large Enterprise	114

Questions from the Community

Ask a question

Earn 20 points

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

See all answers

What is the biggest difference between Veracode and Checkmarx?

According to my experience of using both the tools in different organizations Veracode is a Cloud-native, managed AppSec platform with strong focus on ease of use, it is SaaS delivery, and provide...

See all answers

What is your experience regarding pricing and costs for Veracode Static Analysis?

My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.

See all answers

Comparisons

OWASP Zap vs Ixia BreakingPoint

Compared 14% of the time

Appvance AIQ Platform vs Ixia BreakingPoint

Compared 14% of the time

OpenText Core Application Security vs Ixia BreakingPoint

Compared 8% of the time

SonarQube vs Ixia BreakingPoint

Compared 8% of the time

GitLab vs Ixia BreakingPoint

Compared 4% of the time

More Ixia BreakingPoint Competitors

SonarQube vs Veracode

Compared 5% of the time

Checkmarx One vs Veracode

Compared 5% of the time

HCL AppScan vs Veracode

Compared 3% of the time

GitLab vs Veracode

Compared 2% of the time

Invicti vs Veracode

Compared 2% of the time

More Veracode Competitors

Product Reports

Static Application Security Testing (SAST)

Download Ixia BreakingPoint product report

Download Veracode product report

Also Known As

No data available

Crashtest Security , Veracode Detect

Overview

Ixia BreakingPoint delivers comprehensive Layer 7 traffic generation and DDoS testing, enabling users to simulate applications like Facebook and Netflix, test IDP scenarios, and utilize extensive ransomware and malware databases for thorough attack simulations.

Ixia BreakingPoint is known for its advanced capabilities in network and security testing, offering Layer 7 traffic generation, DDoS testing, and cloud application validation. It supports multiple protocols, enabling organizations to conduct stress testing, security validation, and traffic simulation effectively. Users find it valuable for evaluating SDWAN solutions and performing traffic impact analysis on applications and infrastructures. Its realistic configuration flow supports collaboration with virtualization teams, and deployment requires minimal personnel involvement, with a growing focus on virtual platforms.

What are the standout features of Ixia BreakingPoint?

Layer 7 Traffic Generation: Simulates a wide range of applications for thorough testing.
DDoS Testing Modules: Offers robust denial-of-service attack simulations.
Application Simulation: Supports popular services like Facebook and Netflix.
IDP Scenario Testing: Provides flexibility across multiple protocols.
Ransomware and Malware Databases: Enhances attack simulation realism.

What benefits should users look for in reviews?

Realistic Configuration: Supports effective collaboration and accurate testing outcomes.
Minimal Personnel Deployment: Efficient use of resources in virtual platforms.
Advanced Security Validation: Thorough assessment of network defenses.
Traffic Impact Analysis: Evaluates the effects on valid applications and infrastructure.

Ixia BreakingPoint finds applications across industries, prominently in network security testing and validation. Organizations utilize it to stress test their infrastructures, simulate user traffic, and validate security measures like IDS, anti-malware, anti-DDoS, and anti-ransomware capabilities. It aids in application security certification, firewall policy verification, and evaluating legacy protocols within cyber ranges, ensuring robust network and backend security measures.

Keysight Technologies

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

Corsa Technology

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.

Ixia BreakingPoint vs. Veracode