No more typing reviews! Try our Samantha, our new voice AI agent.

Uptycs vs Veracode comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Uptycs
Ranking in Container Security
50th
Average Rating
8.0
Reviews Sentiment
5.7
Number of Reviews
1
Ranking in other categories
Endpoint Protection Platform (EPP) (62nd), Endpoint Detection and Response (EDR) (69th), Cloud Workload Protection Platforms (CWPP) (32nd), Extended Detection and Response (XDR) (42nd), Cloud Security Posture Management (CSPM) (44th), Cloud-Native Application Protection Platforms (CNAPP) (23rd), Cloud Detection and Response (CDR) (16th)
Veracode
Ranking in Container Security
8th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
208
Ranking in other categories
Application Security Tools (3rd), Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of April 2026, in the Container Security category, the mindshare of Uptycs is 0.4%, up from 0.2% compared to the previous year. The mindshare of Veracode is 2.8%, down from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Mindshare Distribution
ProductMindshare (%)
Veracode2.8%
Uptycs0.4%
Other96.8%
Container Security
 

Featured Reviews

reviewer2301639 - PeerSpot reviewer
Engineer 4- Security Operations at a tech services company with 11-50 employees
Great features, good support, and lots of functionality
I'm an end-user. We use the solution on multiple clouds. I'd advise users to validate which product and metrics will help them the most. The solution has multiple functionalities. Don't go in blindly. Know what you want to get out of the product. I'd rate the solution eight out of ten based on the scalability potential.
reviewer2703864 - PeerSpot reviewer
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
Onboarding developers successfully while improving code security through IDE integration
Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"They have multiple great features."
"The most valuable feature is the seamless automation of Veracode via the pipeline, in comparison to other solutions like Fortify SSC, which are complex to integrate through the pipeline."
"The best feature of Veracode is that we can do static and dynamic scans."
"Our customers have benefited by being able to have a little bit more assurance from us, from a trusted authority, that our code is properly flaw-free and remediated."
"Made our company aware of any potential code security vulnerabilities."
"Veracode is a cloud-based platform, where they manage all the back-end, and they do a lot of analysis during the scans, and they do a lot of post-scan reconciliation."
"In summary, I think that this is a good tool and I recommend it for helping with security in software development."
"Overall, it does a very good job of preventing vulnerable code from going into production."
"I appreciate the integration provided by Veracode that seamlessly integrates with our CI/CD tools and allows us to integrate with IPA as well."
 

Cons

"We end up facing a lot of issues after upgrades."
"It is not as fast as Snyk."
"Sometimes the scans are not done quickly, but the solutions that it provides are really good."
"I think for us the biggest improvement would be to have an indicator when there's something wrong with a scan."
"In the next release, I would like a proper way of packaging files for scanning and the packing of IOS apps and API Dynamic scan methodology."
"The cost of the solution is a little bit expensive. Expensive in the sense that there was a hundred percent increase in cost from last year to this year, which is certainly not justified."
"Another problem we have is that, while it is integrated with single sign-on—we are using Okta—the user interface is not great. That's especially true for a permanent link of a report of a page. If you access it, it goes to the normal login page that has nothing that says "Log in with single sign-on," unlike other software as a service that we use. It's quite bothersome because it means that we have to go to the Okta dashboard, find the Veracode link, and log in through it. Only at that point can we go to the permanent link of the page we wanted to access."
"The reports on offer are too verbose."
"The solution does not support Dynamic Application Security Testing."
 

Pricing and Cost Advice

Information not available
"The solution is expensive."
"It's very expensive, especially when you are a very small organization. If you're using Veracode at an individual level, for example, you're a developer or you run agents, the pricing might not affect you, but if you're using it at a company level to troubleshoot security issues, the pricing is not quite favorable. It may affect ROI."
"If I compare the pricing with other software tools, then it is quite competitive. Whatever the price is, they have always given us a good discount."
"Veracode has been fair. We use their SaaS solution and it's just an annual subscription."
"Veracode is one of the more expensive solutions in the market, but it is worth the expense because of the eLearning and the security consultations; everything is included in the license."
"It is pricey. There is a lot of value in the product, but it is a costly tool."
"For our company, the price is reasonable for the benefits that we get."
"It's worth the value"
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
885,667 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
21%
Construction Company
14%
Computer Software Company
8%
University
6%
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business69
Midsize Enterprise45
Large Enterprise114
 

Questions from the Community

Ask a question
Earn 20 points
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What do you like most about Veracode Static Analysis?
I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.
What is your experience regarding pricing and costs for Veracode Static Analysis?
My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.
 

Comparisons

 

Also Known As

No data available
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

Comcast, Crossbeam, Flexport, Greenlight Financial, Lookout Security, PayNearMe
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about Wiz, Palo Alto Networks, SentinelOne and others in Container Security. Updated: March 2026.
885,667 professionals have used our research since 2012.