Try our new research platform with insights from 80,000+ expert users

Venn Software vs Veracode comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Venn Software
Ranking in Application Security Tools
46th
Average Rating
9.4
Number of Reviews
3
Ranking in other categories
Remote Access (37th), Secure Access Service Edge (SASE) (33rd)
Veracode
Ranking in Application Security Tools
2nd
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
208
Ranking in other categories
Static Application Security Testing (SAST) (2nd), Container Security (8th), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of January 2026, in the Application Security Tools category, the mindshare of Venn Software is 0.4%, up from 0.0% compared to the previous year. The mindshare of Veracode is 5.4%, down from 10.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
Veracode5.4%
Venn Software0.4%
Other94.2%
Application Security Tools
 

Featured Reviews

reviewer2110356 - PeerSpot reviewer
Growth Specialist at Digitrends Soultions
Great for hybrid workers, minimizes latency and delivers great performance
We haven't encountered major issues with the solution. We are really happy that we decided to purchase Venn Software, although they are quite new. The initial setup is seamless. It's not overly complex. In our experience, for the most part, the solution is reliable. We haven't experienced any bugs or glitches. That said, the performance could be a bit better. We'd like to see a bit more done with the deployment capabilities. The solution needs to offer better local or regional support to cater to offshore users.
reviewer2703864 - PeerSpot reviewer
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
Onboarding developers successfully while improving code security through IDE integration
Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Since the software is launched directly from the computer, not remotely delivered, it has minimized latency and response time."
"It allows us to improve our security and prevent company files and data leaks."
"We don't need to go to the physical office, and it only requires minimal supervision or assistance from our IT Team."
"The integration with DevOps pipelines is seamless."
"The most valuable feature is the SAST capability and its integration into the Veracode pipelines."
"Veracode is a very good tool, especially from a compliance standpoint."
"Informs me of code security vulnerabilities. Bamboo build automation with Veracode API calls are used.​"
"The SCA, agent-based analysis, is valuable. SAST and DAST take time, while this is quite fast. It gives the results very quickly. We have implemented it into our CI/CD pipeline."
"We have found the static analysis to be useful in Veracode Static Analysis. However, we are in the process of testing."
"Veracode supports a broad range of code technologies, and it can analyze large applications. Fortify takes a long time and may not be able to generate the report for larger applications. We don't have these constraints with Veracode."
"We used Veracode to improve our security posture and speed up the time to market by streamlining the development process, which enhanced collaboration between developers, operations, and security teams."
 

Cons

"It would be better to have the back end more efficient."
"Currently, Venn only uses two platforms/applications: Windows and Mac. It would be great if they could also add more platforms since some BYOD employees might be using an application other than Windows or Mac - for example, Linux."
"We'd like to see a bit more done with the deployment capabilities."
"Veracode's ability to fix flaws is less sophisticated than that of its competitors."
"Sometimes, I get feedback from a developer saying, "They are scanning a Python code, but getting feedback around Java code." While the remediation and guidelines are there, improvement is still required, e.g., you won't get the exact guidelines, but you can get some sort of a high-level insights."
"The pricing for qualified startups such as Neo4j could be improved."
"When it comes to the speed of the pipeline scan, one of the things we have found with Veracode is that it's very fast with Java-based applications but a bit slow with C/C++ based applications. So we have implemented the pipeline scan only for Java-based applications not for the C/C++ applications."
"It can be a bit complex because it takes a lot of time to have it complete the task."
"Scanning large amounts of code can be a time-consuming process and there is scope for improvement."
"We tried to create an automatic scanning process for Veracode and integrate it into our billing process, but it was easier to adopt it to repositories based on GIT. Until now, our source control repository was Azure DevOps Server (Microsoft TFS) to managing our resources. This was not something that they supported. It took us some sessions together before we successfully implemented it."
"Veracode scans provide a higher number of false positives."
 

Pricing and Cost Advice

Information not available
"The Veracode price model is based on application profiles, which is how you package your components for scanning."
"It is expensive. It depends on the use case, but it is very hard to find a pricing page on their website. Instead, they need to analyze your use case, but without knowing the entire project and how you're going to be using Veracode, how many scans you're going to do, if yours is a small business, it is very expensive and it affects ROI."
"Veracode is costly. They have different license models for different customers. What we had was based on the amount of code that has been analyzed. The license that we had was capped to a certain amount, for example, 5 Gig. There would be an extra charge for anything above 5 Gig."
"The cost has been a barrier to wider use here. I think my team is the only one at the university. Other folks might like to use it, but it's pretty pricey. You could see what else is in the market, but I hear that's the price for most solutions. You might not find a better deal in the market, or it might be an incomplete solution. I mean, for the level of interaction we get with Veracode staff, it's been pretty good."
"The pricing is really fair compared to a lot of other tools on the market."
"They have just streamlined the licensing and they have a number of flexible options available, so overall it is quite good, albeit pricey."
"Users in some forums mentioned that pricing for this solution can be quite high."
"When I looked at the pricing, it was definitely a value. In terms of the service and what it's checking, the cost was very reasonable, particularly because we could have multiple code bases as part of a project."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
879,853 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
University
11%
Manufacturing Company
8%
Computer Software Company
6%
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business70
Midsize Enterprise44
Large Enterprise114
 

Questions from the Community

Ask a question
Earn 20 points
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What do you like most about Veracode Static Analysis?
I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.
What is your experience regarding pricing and costs for Veracode Static Analysis?
My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.
 

Also Known As

No data available
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

Venn is currently being used by 700+ organizations. The newest version of our secure workspace is selling not only to our existing customer base but to new companies like Voya, ModSquad, TTech and many others.
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about Venn Software vs. Veracode and other solutions. Updated: December 2025.
879,853 professionals have used our research since 2012.