Try our new research platform with insights from 80,000+ expert users

Prisma Cloud by Palo Alto Networks vs Veracode comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 26, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
Prisma Cloud enhances security, saves time, improves compliance, and reduces costs, although exact financial benefits are hard to quantify.
Sentiment score
6.6
Veracode enhances code security and quality, saves time and costs, supports compliance, and boosts client trust and retention.
It eliminates the need for additional hardware, making it a financially and technically sound investment.
Partner at Quasys
Reputation and data security are the two most important things to a financial institution.
Works at a comms service provider with 1-10 employees
We may have prevented a security breach with remediation of the findings.
Security Solutions Architect - Cloud Security Consultant at a consultancy with 10,001+ employees
The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.
Senior Solutions Architect at IDS Comercial
Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
We did see a return on investment with Veracode, as we segregated our remediation efforts, which reduced our time to delivery as well as the number of engineers needed to help us in delivering a secure solution.
DevSecOps Engineer at a tech services company with 11-50 employees
 

Customer Service

Sentiment score
7.0
Prisma Cloud's customer service is praised for expertise but criticized for inconsistent response times and regional support variations.
Sentiment score
7.2
Veracode support is praised for expertise and responsiveness, but some users report delays and unhelpful interactions with complex issues.
They can respond with technical documentation or pass on the case to the next level because it requires the development of a new feature or changing a feature due to a bug.
Technical Lead at a consultancy with 11-50 employees
Anywhere we raise a tech case, they revert back within an hour.
Cloud Security Engineer at a tech vendor with 201-500 employees
Support is not just good; it's excellent.
IT engineer at a tech vendor with 10,001+ employees
Access to the engineering team is crucial for faster feedback on the product fix process.
Principal Architect at a consultancy with 11-50 employees
I have communicated with the technical support of Veracode a couple of times, and this was a really great experience because these professionals know their material.
Application Security Specialist at Herrenknecht
They share detailed information via email, including screenshots or further clarification about the issue.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
 

Scalability Issues

Sentiment score
7.6
Prisma Cloud offers scalable solutions, efficiently managing deployments, despite occasional operational complexities and licensing influences on scalability perception.
Sentiment score
7.5
Veracode offers impressive scalability, efficiently handling growth and multiple applications, despite some licensing challenges, earning high user ratings.
Scalability is a strong aspect; we have never experienced issues with it.
IT engineer at a tech vendor with 10,001+ employees
Scalability-wise, I rate the solution a nine out of ten.
Technology Specialist - Cloud Security at a tech services company with 11-50 employees
We haven't had any issues scaling the solution.
Senior Cloud Security Engineer at impelsys
Cloud solutions are easier to scale than on-premise solutions.
Senior Solutions Architect at IDS Comercial
It has a good capacity to scale effectively.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
Implementing these features into our normal CI/CD was good, so I can say that scalability is really good.
Application Security Specialist at Herrenknecht
 

Stability Issues

Sentiment score
8.0
Prisma Cloud is praised for high stability, though minor disruptions and data retrieval challenges occur in complex environments.
Sentiment score
7.8
Veracode is highly reliable with minimal downtime and issues, though occasional scan speed and false positive concerns exist.
I would rate it a ten out of ten for stability.
Cloud Security Engineer (Team lead) at a tech services company with 201-500 employees
It provides excellent stability capabilities.
IT engineer at a tech vendor with 10,001+ employees
Most of the time, when the client requires data, it is not available.
Technology Specialist - Cloud Security at a tech services company with 11-50 employees
If the Veracode server is down, we experience many issues during the scan.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
 

Room For Improvement

Prisma Cloud requires enhanced documentation, user interface, automation, integration features, pricing, support, updates, and improved access and monitoring.
Veracode users face false positives, outdated UI, integration issues, slow scans, and desire flexible pricing and improved support.
Prisma Cloud is an excellent tool.
Technical Engineer at a tech services company with 1,001-5,000 employees
We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts.
Cyber Security Architect at a comms service provider with 10,001+ employees
Even though documentation was available, it took a while for a new person to understand what integration meant, what will be achieved after the integration, or how the integration needed to be done on the Azure or AWS side.
Technical Architect at a tech services company with 1,001-5,000 employees
If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.
We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
A nice addition would be if it could be extended for scenarios with custom cleansers.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Setup Cost

Prisma Cloud offers comprehensive features and robust security but presents challenges with its complex and potentially expensive licensing model.
Veracode's pricing is costly, but its features suit large enterprises; smaller businesses should consider alternatives due to budget constraints.
The cost was not on the higher side.
Technical Architect at a tech services company with 1,001-5,000 employees
If you are using a single tool like Prisma Cloud, with a single license, you can monitor all environments, such as Google Cloud, Azure, AWS, and Oracle Cloud.
Cloud Security Delivery Associate Manager at Accenture
Prisma Cloud isn't cheap.
IT engineer at eSec Forte
It's not the most expensive solution.
Senior Solutions Architect at IDS Comercial
Overall, Veracode's pricing is lower and more scalable than many alternatives in the market.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
If there's a security gap, you'll never know the cost or effect.
 

Valuable Features

Prisma Cloud enhances multi-cloud security with automated forensics, compliance monitoring, and integration in CI/CD pipelines for threat prevention.
Veracode provides comprehensive code analysis, vulnerability management, and integration tools, enhancing security and supporting complex project needs efficiently.
Prisma Cloud excels by offering a comprehensive solution within a single dashboard. This unified approach addresses all our requirements, making it the most advantageous aspect of this tool.
IT engineer at a tech vendor with 10,001+ employees
There is a wide range of integrations, and the compatibility with various cloud providers is very useful.
Technical Director at Cascade Solutions
It provides a single pane of glass.
enterprise architect at a tech services company with 1-10 employees
It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.
Site Leader (India) at Industrial Scientific
The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.
It fixes issues directly in the IDE while you're doing it.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Categories and Ranking

Prisma Cloud by Palo Alto N...
Ranking in Container Security
1st
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
113
Ranking in other categories
Web Application Firewall (WAF) (8th), Cloud Security Posture Management (CSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (2nd), Data Security Posture Management (DSPM) (2nd)
Veracode
Ranking in Container Security
8th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
207
Ranking in other categories
Application Security Tools (2nd), Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of January 2026, in the Container Security category, the mindshare of Prisma Cloud by Palo Alto Networks is 9.0%, down from 14.0% compared to the previous year. The mindshare of Veracode is 3.1%, down from 4.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Market Share Distribution
ProductMarket Share (%)
Prisma Cloud by Palo Alto Networks9.0%
Veracode3.1%
Other87.9%
Container Security
 

Featured Reviews

reviewer2776578 - PeerSpot reviewer
Cyber Security Architect at a comms service provider with 10,001+ employees
Image scanning has supported consistent security practices during cloud deployment
On a scale of ten, we would say people are happy with Prisma Cloud by Palo Alto Networks for the part we use. People are okay with it. We probably would give an eight. We don't give ten because if we don't use the other parts of Prisma Cloud by Palo Alto Networks, it's because it was difficult to implement from an operational point of view. We could have deployed the runtime monitoring with Prisma Cloud by Palo Alto Networks, but within our organization at our company, it was very difficult to find who would be the owner for the alerts. People have other tools and in the end, we don't use the full capabilities of a product that we pay for. It's partially related to the difficulty to integrate Prisma Cloud by Palo Alto Networks runtime in our company's support process. We don't use the real-time monitoring part of Prisma Cloud by Palo Alto Networks. We don't know about the automated remediation feature of Prisma Cloud by Palo Alto Networks.
reviewer2703864 - PeerSpot reviewer
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
Onboarding developers successfully while improving code security through IDE integration
Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
879,672 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
14%
Manufacturing Company
9%
Insurance Company
6%
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business36
Midsize Enterprise22
Large Enterprise56
By reviewers
Company SizeCount
Small Business70
Midsize Enterprise44
Large Enterprise114
 

Questions from the Community

What is your primary use case for Prisma Cloud by Palo Alto Networks?
Prisma Cloud helps support DevSecOps methodologies, making those responsibilities easier to manage.
What Cloud-Native Application Protection Platform do you recommend?
We like Prisma Cloud by Palo Alto Networks, since it offers us incredible visibility into our entire cloud system. We are able to easily see where our container vulnerabilities lie and and where cl...
What do you think of Aqua Security vs Prisma Cloud?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valuable feature and their speed of integration is very good. The initial setup was ...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What do you like most about Veracode Static Analysis?
I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.
What is your experience regarding pricing and costs for Veracode Static Analysis?
My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.
 

Also Known As

Prisma Public Cloud, RedLock Cloud 360, RedLock, Twistlock, Aporeto
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

Amgen, Genpact, Western Asset, Zipongo, Proofpoint, NerdWallet, Axfood, 21st Century Fox, Veeva Systems, Reinsurance Group of America
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about Prisma Cloud by Palo Alto Networks vs. Veracode and other solutions. Updated: December 2025.
879,672 professionals have used our research since 2012.