Veracode and NGINX App Protect compete in the application security category. NGINX App Protect appears to have an upper hand due to superior real-time threat mitigation and traffic management despite higher costs.
Features: Veracode offers seamless integration with development workflows, thorough vulnerability assessments, and comprehensive static and dynamic analysis capabilities. NGINX App Protect provides robust DDoS protection, efficient traffic management capabilities, and real-time threat mitigation.
Room for Improvement: Veracode could improve its dynamic analysis speed, enhance reporting details, and quicken its analysis processes. NGINX App Protect needs better documentation, more intuitive configuration options, and streamlined setup processes to enhance user-friendliness.
Ease of Deployment and Customer Service: Veracode's cloud-based deployment is easy with a quick setup, though customer service has mixed reviews. NGINX App Protect excels in both cloud and on-premises deployment, but users face a steep learning curve and seek more responsive support. Veracode's ease contrasts with NGINX App Protect's flexibility and complexity.
Pricing and ROI: Veracode has a higher initial setup cost but provides good ROI due to comprehensive security features and scalability. NGINX App Protect, while costly upfront, is considered worth the investment for its powerful real-time protection. Veracode is cost-effective for extensive analysis needs, while NGINX App Protect is preferred for strong dynamic threat defense.
The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.
Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.
They were quick and efficient when we had issues.
Access to the engineering team is crucial for faster feedback on the product fix process.
They are very responsive and quick to help with queries within our scope.
They respond very quickly since security is something critical.
Cloud solutions are easier to scale than on-premise solutions.
It has a good capacity to scale effectively.
It is a quality solution, and I would rate its stability as eight out of ten.
If the Veracode server is down, we experience many issues during the scan.
It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.
There was more information from F5 regarding hardware requirements and specifications to deploy the service.
If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.
We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.
A nice addition would be if it could be extended for scenarios with custom cleansers.
It's not the most expensive solution.
If there's a security gap, you'll never know the cost or effect.
Pricing-wise, I find it a bit expensive because it's based on the number of users requesting access to Veracode.
The most valuable feature is the ability to operate in a DevOps environment and to be configured through API and pipeline by the developers themselves.
Detecting bots and blocking IPs have proven effective for securing applications.
It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.
The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.
It fixes issues directly in the IDE while you're doing it.
NGINX App Protect application security solution combines the efficacy of advanced F5 web application firewall (WAF) technology with the agility and performance of NGINX Plus. The solution runs natively on NGINX Plus and addresses some of the most difficult challenges facing modern DevOps environments:
NGINX App Protect offers:
Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.
Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.
What are the key features of Veracode?
What benefits should users consider in Veracode reviews?
Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.
Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.
We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
