Tenable.io Container Security vs Veracode comparison

Tenable.io Container Security

Read 208 Veracode reviews

18,744 Views
4,686 Comparison Views

89% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Veracode and Tenable.io Container Security compete in the application security domain, where Tenable.io Container Security seems to have the upper hand due to its advanced features and specialized container security capabilities.

Features: Veracode users value its comprehensive code analysis, security flaw detection, and in-depth code scanning. Tenable.io Container Security offers thorough container vulnerability assessments, integrations with CI/CD pipelines, and specialized container security features.

Room for Improvement: Veracode users suggest enhancements in reporting, better integrations with development tools, and improved scan speed. Tenable.io Container Security users want improvements in performance, a more streamlined setup process, and enhanced user interface.

Ease of Deployment and Customer Service: Veracode is praised for its straightforward deployment and robust customer support. Tenable.io Container Security receives mixed reviews on deployment, with some users finding it complex, but it is noted for responsive customer service.

Pricing and ROI: Veracode is noted for its competitive pricing and solid ROI, making it a cost-effective option for many users. Tenable.io Container Security, despite higher costs, is seen as offering good ROI due to its comprehensive container security features.

To learn more, read our detailed Tenable.io Container Security vs. Veracode Report (Updated: December 2025).

Tenable.io Container Security vs. Veracode

December 2025

Download the complete report

Helped 881,082 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Tenable.io Container Security

Ranking in Container Security

22nd

Average Rating

8.0

Reviews Sentiment

6.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Veracode

Ranking in Container Security

8th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

208

Ranking in other categories

Application Security Tools (2nd), Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of January 2026, in the Container Security category, the mindshare of Tenable.io Container Security is 1.1%, up from 1.1% compared to the previous year. The mindshare of Veracode is 3.1%, down from 4.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Market Share Distribution
Product	Market Share (%)
Veracode	3.1%
Tenable.io Container Security	1.1%
Other	95.8%

Container Security

Featured Reviews

Arun Seetha

Cyber Security Architect at a security firm with 201-500 employees

Detailed container image reports have improved vulnerability insight and support secure operations

Most valuable are the reports that are quite good, particularly the detailed ones for container image scanning. Tenable.io Container Security is giving me the vulnerability information of Docker images and the information about software bill of materials. However, my challenge at this time is that I am using all these solutions with GitLab Ultimate, and it does not support integration, so I am doing some alternate arrangements which are giving me operational complexity because I need to introduce something else instead of GitLab Ultimate. That is the primary concern regarding the benefits of real-time visibility into my containerized application security status.

Read full review

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

Onboarding developers successfully while improving code security through IDE integration

Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Tenable.io detects misconfiguration when you deploy a Docker or Kubernetes container. It's much better to remedy these issues during deployment instead of waiting until the container is already in the production environment."

"Nessus scanner is very effective for internal penetration testing."

"It is a scalable solution. Scalability-wise, it is a good solution."

"Most valuable are the reports that are quite good, particularly the detailed ones for container image scanning."

"The strong security provided by the product in the container environment is its most valuable feature."

"The solution shows you the exploitable vulnerabilities and helps you prioritize."

"Currently, I haven't implemented the solution due to its deprecation by the site. However, I can highlight some benefits of Tenable Cloud Security, a cybersecurity solution with various features for scanning vulnerabilities in both cloud environments and on-premises container security."

"The tool's most valuable feature is scanning, reporting, and troubleshooting."

More Tenable.io Container Security pros

"One of the features they have is Software Composition Analysis. When organizations use third-party, open source libraries with their application development, because they're open source they quite often have a lot of bugs. There are always patches coming out for those open source applications. You really have to stay on your toes and keep up with any third-party libraries that might be integrated into your application. Veracode's Software Composition Analysis scans those libraries and we find that very valuable."

"What I found most valuable in Veracode is that it gives me a part-by-part report of the entire EAR file and lets me set up the application for a limited time. Once that expires, Veracode allows you to automatically renew it, which is one of the features I find remarkable in Veracode."

"It allows us to prove our security levels to vendors, and additionally helps us with our HIPAA security policies."

"The user interface is quick, familiar, and user-friendly and makes navigation to other software very easy."

"Veracode supports a broad range of code technologies, and it can analyze large applications. Fortify takes a long time and may not be able to generate the report for larger applications. We don't have these constraints with Veracode."

"Veracode Security Labs are fantastic. My team loves getting the hands-on experience of putting in a flaw and fixing it. It's interactive. We've gotten decent support from the sales and software engineers, so the initial support was excellent. They scheduled a consultation call to dive deep and discuss why we see these findings and codes. That was incredibly helpful."

"That it is a cloud-based solution is very valuable to us. We don't need that hardware running our scans and hosting the environment to be scanned. Also, the technology, the static scanning versus dynamic scanning produces a much better result, a more accurate result."

"It has provided what we were looking for in such an application, meaning static application security testing functionality. That was what we were interested in."

More Veracode pros

Cons

"Tenable.io Container Security should improve integration modules. It should also improve stability."

"They need to work on auto-remediation so it's easier for the security team to act quickly when certain assets or resources are deployed. The latest version has a CIS benchmark that you need to meet for containers in the cloud, but more automation is needed."

"The support is tricky to reach, so we would like better-oriented technical support enabled."

"The initial setup is highly complex."

"I feel that in certain areas this product has false positives which the company should work on. They should also try to include business logic vulnerabilities in the scanner testing. Finally, the vulnerability assessment feature should be increased to other hardware devices, apart from firewalls."

"The stability and setup phase of the product are areas with shortcomings where improvements are needed."

"The solution’s pricing could be improved."

"I believe integration plays a crucial role for Tenable, particularly in terms of connecting with other products and various container solutions like Docker or Kubernetes. It seems that in future updates, enhanced integration is something I would appreciate. Currently, there is integration with Docker, but when it comes to Kubernetes or other container solutions, it appears to be a challenge, especially with on-prem scanners."

More Tenable.io Container Security cons

"I think for us the biggest improvement would be to have an indicator when there's something wrong with a scan."

"We have encountered occasional issues with scalability."

"Veracode can be improved in terms of software composition analysis and related vulnerabilities."

"Their scanning engine is sometimes a little bit slow. They can improve the scan time."

"I would like Veracode to also have the ability to fix these flaws in a future release."

"The number of false positives could be reduced a lot. For each good result, we are getting somewhere around 15 to 20 false positives."

"In the last month or so, I had a problem with the APIs when doing some implementations. The Veracode support team could be more specific and give me more examples. They shouldn't just copy the URL for a doc and send it to me."

"They should improve on the static scanning time."

More Veracode cons

Pricing and Cost Advice

"I rate the product’s pricing a six out of ten."

"It's best to be an institutional buyer and directly contact the sales team as they can provide over-the-top discounts for bulk orders."

"The product does not operate on a pay-per-license model."

"I rate the tool's pricing a three out of ten."

"The solution's pricing is neither cheap nor very expensive."

"I have not examined Veracode's pricing in detail, but from an industry perspective, I see that there is a tendency toward Veracode, which suggests competitive pricing."

"Veracode's pricing is competitive."

"If I compare the pricing with other software tools, then it is quite competitive. Whatever the price is, they have always given us a good discount."

"The price of Veracode Static Analysis could improve."

"The price of Veracode Static Analysis is expensive. There is an annual fee to use the solution and the company is upfront with the pricing model and fees."

"Licensing is pretty flexible. It's a little bit weird, it's by the size of the binary, which is a strange way to license a product. So far they've been pretty flexible about it."

"Veracode has been fair. We use their SaaS solution and it's just an annual subscription."

"Pricing/licensing is complicated."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

881,082 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

16%

Manufacturing Company

14%

Government

Retailer

Financial Services Firm

17%

Computer Software Company

13%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	2
Midsize Enterprise	3
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	44
Large Enterprise	115

Questions from the Community

What is your experience regarding pricing and costs for Tenable.io Container Security?

The solution's pricing is neither cheap nor very expensive.

What needs improvement with Tenable.io Container Security?

The solution’s pricing could be improved.

What advice do you have for others considering Tenable.io Container Security?

We were able to integrate Tenable.io Container Security into our CI/CD pipeline. We were running on GitHub Enterprise. We could integrate and scan our pipelines and containers and automate that who...

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

What do you like most about Veracode Static Analysis?

I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.

What is your experience regarding pricing and costs for Veracode Static Analysis?

My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.

Trivy vs Tenable.io Container Security

Comparisons

Compared 17% of the time

Red Hat Advanced Cluster Security for Kubernetes vs Tenable.io Container Security

Compared 11% of the time

Qualys VMDR vs Tenable.io Container Security

Compared 9% of the time

Prisma Cloud by Palo Alto Networks vs Tenable.io Container Security

Compared 8% of the time

Wiz vs Tenable.io Container Security

Compared 7% of the time

More Tenable.io Container Security Competitors

SonarQube vs Veracode

Compared 12% of the time

Checkmarx One vs Veracode

Compared 8% of the time

GitHub Advanced Security vs Veracode

Compared 5% of the time

Coverity Static vs Veracode

Compared 4% of the time

OWASP Zap vs Veracode

Compared 3% of the time

More Veracode Competitors

Product Reports

Tenable.io Container Security

January 2026

Download Tenable.io Container Security product report

Download Veracode product report

January 2026

Also Known As

Tenable FlawCheck, FlawCheck

Crashtest Security , Veracode Detect

Overview

Tenable.io Container Security is a container security platform that delivers end-to-end visibility of Docker container images, providing vulnerability assessment, malware detection, and policy enforcement before and after deployment. It also integrates into your DevOps pipeline to eliminate security blind spots without slowing down software development. In addition, Tenable.io Container Security provides proactive visibility and security so your organization can solve the security challenges of containers at the speed of DevOps.

Tenable.io Container Security Features

Tenable.io Container Security has many valuable key features. Some of the most useful ones include:

Dashboard visibility: With Tenable.io Container Security, IT security managers gain at-a-glance visibility into container image inventory as well as security. Security teams can view vulnerability, malware, and other security data for all container images, and the distribution of vulnerabilities across images by CVSS score and risk level. The product also shows each image’s OS, OS version, and architecture.

Malware protection: The Tenable.io Container Security solution is unique because it is one of the only container security solutions that assesses container image source code for malware. It is designed with a custom-built malware detection engine to help ensure images are malware-free and to analyze container image source code.

Policy enforcement: If an image is created that exceeds the organization’s risk threshold, Tenable.io Container Security notifies developers immediately, with layer-specific information provided to help remediate issues rapidly. In addition, when using the solution, policy violations can trigger alerting or can optionally block specific images from being deployed. Policies can be applied globally or only to images in specific repositories.

Image syncing from third-party registries: The solution helps your organization gain instant insight into container security risks by synchronizing your existing registry images into Tenable.io Container Security. It integrates with Docker Registry, Docker Trusted Registry, JFrog Artifactory and Amazon EC2 Container Registry.

DevOps toolchain integration: In DevOps environments, Tenable.io Container Security can embed security testing into the software development tooling without blocking or disrupting existing software workflows or development processes.

Tenable.io Container Security Benefits

There are many benefits to implementing Tenable.io Container Security. Some of the biggest advantages the solution offers include:

Accurate, in-depth visibility: The platform helps you understand the individual layers of container images so you can gain an accurate view of cyber risk, reduce false positives, and provide detailed remediation guidance.

Securely accelerate DevOps: With Tenable.io Container Security, you can assess container images for vulnerabilities and malware as fast as 30 seconds from within the DevOps toolchain to avoid slowing down code velocity.

Enforce security policies: Tenable.io Container Security works to block new container builds that exceed your organizational risk thresholds to ensure containers are compliant with your security policies prior to deployment.

Decrease remediation costs: Tenable.io Container Security can help your organization dramatically reduce remediation costs by discovering and fixing software defects during development before application release.

Protect running containers: By implementing Tenable.io Container Security, you can gain visibility into running containers, which helps you to detect new vulnerabilities and security issues that may show up after deployment.

Tenable

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

ServiceMaster

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.