Microsoft Defender for Cloud vs Veracode comparison

Microsoft Defender for Cloud

Read 204 Veracode reviews

19,783 Views
4,946 Comparison Views

90% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jul 13, 2025

Veracode and Microsoft Defender for Cloud both compete in the cybersecurity solutions category, focusing on different aspects of security. Microsoft Defender for Cloud may hold an advantage due to its focus on regulatory compliance and integration with Microsoft services, making it suitable for hybrid and multi-cloud environments.

Features: Veracode specializes in static and dynamic code analysis, providing valuable insights into code vulnerabilities. It supports a wide range of programming languages, allowing developers to integrate security checks early in the development process. Veracode also offers robust API capabilities for seamless integration within the software development lifecycle. Microsoft Defender for Cloud, on the other hand, provides threat detection and regulatory compliance features. It integrates smoothly with other Microsoft services and offers comprehensive security monitoring of hybrid and multi-cloud infrastructures.

Room for Improvement: Veracode could enhance its product by reducing false positives and improving support for newer languages and API integrations. Users also seek a more intuitive interface and faster scan times. Microsoft Defender for Cloud could benefit from more granular alerts and tighter integration with non-Microsoft systems. Enhanced reporting transparency and better support for complex multi-cloud environments are areas both solutions could improve.

Ease of Deployment and Customer Service: Veracode offers extensive cloud integration capabilities, though some users report challenges with its interface navigation and integration complexities. The customer support is generally effective, though there can be delays. Microsoft Defender for Cloud is praised for easy deployment, leveraging Azure’s capabilities, and robust cloud-native solutions. Its customer service is attentive, but timeliness in support response can vary.

Pricing and ROI: Veracode's pricing aligns with its comprehensive feature set, making it appealing for large enterprises but potentially cost-prohibitive for smaller businesses. The solution demonstrates value in reducing development costs through early vulnerability detection. Microsoft Defender for Cloud offers cost-effective solutions with scalable pricing included in Azure plans, making it ideal for existing Microsoft cloud users. Its flexible licensing options contribute positively to cost-effectiveness and ROI, with its integration into the broader Azure ecosystem providing additional value.

To learn more, read our detailed Microsoft Defender for Cloud vs. Veracode Report (Updated: July 2025).

Microsoft Defender for Cloud vs. Veracode

July 2025

Download the complete report

Helped 867,370 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

7.3

Microsoft Defender for Cloud boosts security and efficiency, integrates with Azure, reduces costs, prevents breaches, and offers proactive defense.

Sentiment score

6.6

Veracode enhances security, reduces costs, and boosts efficiency, with varied ROI perceptions, but some struggle to quantify it financially.

Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.

For more quotes and insights, download the Microsoft Defender for Cloud report

Endpoint management at a government with 10,001+ employees

Identifying potential vulnerabilities has helped us avoid costly data losses.

SaulPatino

Manager at CBTS

The biggest return on investment is the rapid improvement of security posture.

Martin Welen

Cloud architect at Atea

The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.

AlejandroMosso

Senior Solutions Architect at IDS Comercial

Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

For more quotes and insights, download the Veracode report

Customer Service

Sentiment score

6.5

Microsoft Defender for Cloud support is responsive at higher levels, but experiences vary with mixed satisfaction due to delays.

Sentiment score

7.2

Veracode's customer service is praised for expertise and responsiveness, though variability and time zones can affect efficiency.

Since security is critical, we prefer a quicker response time.

SaulPatino

Manager at CBTS

The support team was very responsive to queries.

reviewer2564271

Programme Manager- Cyber Fusion- Group CISO at a financial services firm with 10,001+ employees

They understand their product, but much like us, they struggle with the finer details, especially with new features.

For more quotes and insights, download the Microsoft Defender for Cloud report

Endpoint management at a government with 10,001+ employees

Access to the engineering team is crucial for faster feedback on the product fix process.

SrikanthRaghavan

Principal Architect at a consultancy with 11-50 employees

I have communicated with the technical support of Veracode a couple of times, and this was a really great experience because these professionals know their material.

Andrei Kriukov

Application Security Specialist at Herrenknecht

They share detailed information via email, including screenshots or further clarification about the issue.

reviewer2753535

DevSecOps Engineer at a tech services company with 1,001-5,000 employees

For more quotes and insights, download the Veracode report

Scalability Issues

Sentiment score

7.7

Microsoft Defender for Cloud is scalable, integrating across environments effortlessly, suitable for all enterprise sizes with flexible performance.

Sentiment score

7.4

Veracode efficiently scales, supports large applications and users, integrates seamlessly, providing fast results with minimal challenges or performance issues.

We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.

Vibhor Goel

Senior Cloud Platform Engineer at Deutsche Börse

It has multiple licenses and features, covering infrastructures from a hundred to five hundred virtual machines, without any issues.

Syed Abid

Snr. Infrastructure Architect (Data Centre) at LogicEra

Defender won't replace our endpoint XDR, but it will likely adapt and support any growth in the Microsoft Cloud space.

For more quotes and insights, download the Microsoft Defender for Cloud report

Endpoint management at a government with 10,001+ employees

Cloud solutions are easier to scale than on-premise solutions.

AlejandroMosso

Senior Solutions Architect at IDS Comercial

It has a good capacity to scale effectively.

Brintha Prabakar

Lead Automation Quality Engineer in Leading UK Bank at Tata Consultancy

Implementing these features into our normal CI/CD was good, so I can say that scalability is really good.

Andrei Kriukov

Application Security Specialist at Herrenknecht

For more quotes and insights, download the Veracode report

Stability Issues

Sentiment score

7.6

Microsoft Defender for Cloud is stable and reliable, with minimal issues mainly during updates, ensuring strong user satisfaction.

Sentiment score

7.8

Veracode is highly stable with minimal downtime, effective workload handling, and no significant operational issues reported by users.

Defender's stability has been flawless for us.

reviewer2595948

Engineer at a computer software company with 201-500 employees

Microsoft Defender for Cloud is very stable.

Martin Welen

Cloud architect at Atea

Microsoft sometimes changes settings or configurations without transparency.

Vibhor Goel

Senior Cloud Platform Engineer at Deutsche Börse

For more quotes and insights, download the Microsoft Defender for Cloud report

If the Veracode server is down, we experience many issues during the scan.

Brintha Prabakar

Lead Automation Quality Engineer in Leading UK Bank at Tata Consultancy

It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

For more quotes and insights, download the Veracode report

Room For Improvement

Microsoft Defender for Cloud users seek better automation, clarity, integration, AI features, and comprehensive analytics for improved security management.

Veracode needs improvements in false positives, interface, speed, reporting, tool integration, language support, cost, APIs, and documentation.

Microsoft, in general, could significantly improve its communication and support.

For more quotes and insights, download the Microsoft Defender for Cloud report

Endpoint management at a government with 10,001+ employees

It would be beneficial to streamline recommendations to avoid unnecessary alerts and to refine the severity of alerts based on specific environments or environmental attributes.

John Tzamtzis

Works at Coca-Cola HBC

The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.

Javier_Rodriguez

Cloud Consultant at i-Community AG

If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.

Himadri Subudhi

Works

We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.

Brintha Prabakar

Lead Automation Quality Engineer in Leading UK Bank at Tata Consultancy

A nice addition would be if it could be extended for scenarios with custom cleansers.

reviewer2700198

IT App Security Senior Analyst at a transportation company with 10,001+ employees

For more quotes and insights, download the Veracode report

Setup Cost

Microsoft Defender for Cloud is scalable, offering free and paid versions with costs averaging $15 monthly per server.

Veracode's pricing is high, valued for features, but complex and costly for small organizations, justified for large enterprises.

Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.

reviewer2564271

Programme Manager- Cyber Fusion- Group CISO at a financial services firm with 10,001+ employees

We appreciate the licensing approach based on employee count rather than a big enterprise license.

Antonio Andres

Manager, Microsoft Technology Alliance at Silverfort

Microsoft Defender for Cloud is pricey, especially for Kubernetes clusters.

reviewer2595279

Project Cloud Center of Excellence Leader at a manufacturing company with 10,001+ employees

For more quotes and insights, download the Microsoft Defender for Cloud report

It's not the most expensive solution.

AlejandroMosso

Senior Solutions Architect at IDS Comercial

Overall, Veracode's pricing is lower and more scalable than many alternatives in the market.

reviewer2753535

DevSecOps Engineer at a tech services company with 1,001-5,000 employees

If there's a security gap, you'll never know the cost or effect.

Himadri Subudhi

Works

For more quotes and insights, download the Veracode report

Valuable Features

Microsoft Defender for Cloud enhances security with AI-based threat detection, multi-cloud support, and a unified portal for comprehensive management.

Veracode offers static code analysis, integrates with development tools, provides remediation guidance, and enhances security while ensuring scalability and compliance.

The most valuable feature for me is the variety of APIs available.

reviewer2564271

Programme Manager- Cyber Fusion- Group CISO at a financial services firm with 10,001+ employees

This feature significantly aids in threat detection and enhances the user experience by streamlining security management.

Javier_Rodriguez

Cloud Consultant at i-Community AG

The most valuable feature is the recommendations provided on how to improve security.

Martin Welen

Cloud architect at Atea

For more quotes and insights, download the Microsoft Defender for Cloud report

It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.

Kv Rao

Site Leader (India) at Industrial Scientific

The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.

Himadri Subudhi

Works

It fixes issues directly in the IDE while you're doing it.

reviewer2700198

IT App Security Senior Analyst at a transportation company with 10,001+ employees

For more quotes and insights, download the Veracode report

Categories and Ranking

Microsoft Defender for Cloud

Ranking in Container Security

7th

Average Rating

8.0

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Vulnerability Management (7th), Container Management (8th), Cloud Workload Protection Platforms (CWPP) (1st), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Data Security Posture Management (DSPM) (5th), Microsoft Security Suite (7th), Compliance Management (5th)

Veracode

Ranking in Container Security

8th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

204

Ranking in other categories

Application Security Tools (2nd), Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Application Security Posture Management (ASPM) (2nd)

Mindshare comparison

As of September 2025, in the Container Security category, the mindshare of Microsoft Defender for Cloud is 6.5%, down from 7.3% compared to the previous year. The mindshare of Veracode is 3.5%, down from 4.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Market Share Distribution
Product	Market Share (%)
Microsoft Defender for Cloud	6.5%
Veracode	3.5%
Other	90.0%

Container Security

Featured Reviews

Vibhor Goel

Senior Cloud Platform Engineer at Deutsche Börse

A single tool for complete visibility and addressing security gaps

Currently, issues are structured in Microsoft Defender for Cloud at severity levels of high, critical, or warning, but these severity levels are not always right. For example, Microsoft might consider a port being open as critical, but that might not be the case for our company. Similarly, it might suggest closing some management ports, but you might need them to be able to log in, so the severity levels for certain things can be improved. Even though Microsoft Defender for Cloud provides a way to temporarily disable certain alerts or notifications without affecting our security score, it would be better to have more granularized control over these recommendations. Currently, we cannot even disable certain alerts or notifications. There should be an automated mechanism to design Azure policies based on the recommendations, possibly with AI integration. Instead of an engineer having to write a policy to fix security gaps, which is very time-consuming, there should be an inbuilt capability to auto-remediate everything and have proper control in place. Additionally, enabling Defender for Cloud at the resource group level, rather than only at the subscription level, would be beneficial.

Read full review

Kv Rao

Site Leader (India) at Industrial Scientific

Integrates pipelines smoothly and fortifies code against vulnerabilities

I use Veracode in multiple places including static code analysis, penetration testing, and dynamic code analysis. It is part of our pipeline and integrates well with Bitbucket and Git pipelines The ease of integration with Bitbucket pipelines and Git pipelines is vital for us. Veracode allows us…

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

867,370 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Government

Financial Services Firm

16%

Computer Software Company

16%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	26
Midsize Enterprise	8
Large Enterprise	44

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	43
Large Enterprise	112

Questions from the Community

How is Prisma Cloud vs Azure Security Center for security?

Azure Security Center is very easy to use, integrates well, and gives very good visibility on what is happening across your ecosystem. It also has great remote workforce capabilities and supports a...

What do you like most about Microsoft Defender for Cloud?

The entire Defender Suite is tightly coupled, integrated, and collaborative.

What is your experience regarding pricing and costs for Microsoft Defender for Cloud?

The pricing is pretty standard.

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

What do you like most about Veracode?

The SAST and DAST modules are great.

What is your experience regarding pricing and costs for Veracode?

The product’s price is a bit higher compared to other solutions. However, the tool provides good vulnerability and database features. It is worth the money.

AWS GuardDuty vs Microsoft Defender for Cloud

Comparisons

Compared 27% of the time

Wiz vs Microsoft Defender for Cloud

Compared 12% of the time

Prisma Cloud by Palo Alto Networks vs Microsoft Defender for Cloud

Compared 8% of the time

Microsoft Defender XDR vs Microsoft Defender for Cloud

Compared 4% of the time

Orca Security vs Microsoft Defender for Cloud

Compared 3% of the time

More Microsoft Defender for Cloud Competitors

SonarQube Server (formerly SonarQube) vs Veracode

Compared 16% of the time

Checkmarx One vs Veracode

Compared 9% of the time

GitHub Advanced Security vs Veracode

Compared 7% of the time

OpenText Core Application Security vs Veracode

Compared 4% of the time

OWASP Zap vs Veracode

Compared 4% of the time

More Veracode Competitors

Product Reports

Microsoft Defender for Cloud

August 2025

Download Microsoft Defender for Cloud product report

Download Veracode product report

August 2025

Also Known As

Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender

Crashtest Security , Veracode Detect

Interactive Demo

Microsoft

Demo not available

Overview

Microsoft Defender for Cloud is a comprehensive security solution that provides advanced threat protection for cloud workloads. It offers real-time visibility into the security posture of cloud environments, enabling organizations to quickly identify and respond to potential threats. With its advanced machine learning capabilities, Microsoft Defender for Cloud can detect and block sophisticated attacks, including zero-day exploits and fileless malware.

The solution also provides automated remediation capabilities, allowing security teams to quickly and easily respond to security incidents. With Microsoft Defender for Cloud, organizations can ensure the security and compliance of their cloud workloads, while reducing the burden on their security teams.

Microsoft

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

Microsoft Defender for Cloud is trusted by companies such as ASOS, Vatenfall, SWC Technology Partners, and more.

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.