Try our new research platform with insights from 80,000+ expert users

Veracode pros and cons

Vendor: Veracode

4.0 out of 5

208 reviews
89% willing to recommend

Pros & Cons summary

Veracode delivers fast, comprehensive scanning to quickly detect software vulnerabilities, enhancing application security. Its cloud-based platform integrates with various tools for automated vulnerability management. Static and dynamic analysis identifies vulnerabilities early, ensuring secure deployments. Developers gain insight into vulnerabilities and effective remediation strategies. Technical support offers expert guidance. However, improved programming language support, reduced false positives, better pipeline integration, optimized scan times, and enhanced documentation are needed enhancements.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Veracode provides fast and comprehensive scanning capabilities that help detect a wide range of software vulnerabilities quickly, improving application security.

Veracode's cloud-based platform supports seamless integration with multiple tools and platforms, enabling automated vulnerability management in the software development lifecycle.

Veracode's robust static and dynamic analysis aids in identifying and mitigating vulnerabilities early in development, ensuring secure code deployment.

Veracode enables developers to comprehend vulnerabilities and apply remediation strategies effectively, reducing the risk of insecure software in production environments.

Veracode's technical support and security consultation services are highly regarded for providing timely assistance and expert guidance to enhance developers' security practices.

CONS

Veracode needs to improve its support for more programming languages and frameworks.

Veracode reports a high number of false positives, which should be reduced.

Better integration with development pipelines and more flexible APIs are required for Veracode.

Veracode's scanning process is time-consuming, especially for large applications, and should be optimized.

Documentation and technical support from Veracode need enhancements for better user assistance.

Veracode Pros review quotes

GG

Gustavo_Gonzalez

Technical Program Manager at a engineering company with 10,001+ employees

Jan 19, 2017

The coverage of the last vulnerabilities reported.

Read full review

General Manager - Application Security at a tech consulting company with 51-200 employees

Oct 8, 2017

Wide range of platforms and technology assessments.

Read full review

Technical Director at a financial services firm with 1,001-5,000 employees

Nov 26, 2017

The benefits are quick discovery and understanding of software vulnerabilities that we are putting in our own code. By discovering them quickly enough, we can triage them and determine the best ways to remediate them and prevent them from happening in the future.

Read full review

Free Report: Veracode Reviews and More

Learn what your peers think about Veracode. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

880,435 professionals have used our research since 2012.

Senior Information Security Program Manager at a financial services firm with 10,001+ employees

Nov 26, 2017

The ability on static scans to be able to do sandbox scans which do not generate metrics.

Read full review

Global Application Security at a pharma/biotech company with 10,001+ employees

Jan 7, 2018

It has the ability to scale, and the fact that it doesn't produce a lot of false positives.

Read full review

Product Manager at GMS

Jan 15, 2018

It helps me to detect vulnerabilities.

Read full review

Application & Product Security Manager at a insurance company with 1,001-5,000 employees

Mar 6, 2018

Also, our customers benefited from the added security assurance of our applications, as they’ve been able to identify OWASP top-10 application vulnerabilities without a manual tester.

Read full review

SK

Siddharth Kundalkar

Director Software Engineering at a tech services company with 51-200 employees

Mar 7, 2018

All the features provided by Veracode are valuable, including static scan, dynamic scan, and MPT (Manual Penetration Testing).

Read full review

VP of Services at a tech vendor with 51-200 employees

Mar 8, 2018

We use it to get our scan results and see where our software is vulnerable or not vulnerable.

Read full review

CISSP, CISM at a tech services company with 1,001-5,000 employees

Mar 8, 2018

For our rapid, secure DevOps cycle, we have integration of the Vericode API into our build tool, and Greenlight into our IDE.

Read full review

Show 10 more reviews (out of 196)

Veracode Cons review quotes

GG

Gustavo_Gonzalez

Technical Program Manager at a engineering company with 10,001+ employees

Jan 19, 2017

To be able to upload source codes without being compiled. That’s one feature that drives us to see other sources.

Read full review

General Manager - Application Security at a tech consulting company with 51-200 employees

Oct 8, 2017

It needs to reach the level of Checkmarx's and Fortify Software's capabilities and service levels, or may further loosen the market share.

Read full review

Technical Director at a financial services firm with 1,001-5,000 employees

Nov 26, 2017

I'd like to see an improved component of it work in a DevOps world, where the scanning speed does not impede progress along the AppSec pipeline.

Read full review

Free Report: Veracode Reviews and More

Learn what your peers think about Veracode. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.

880,435 professionals have used our research since 2012.

Senior Information Security Program Manager at a financial services firm with 10,001+ employees

Nov 26, 2017

I would love to be able to do a dynamic sandbox scan. I think that that would allow us to really get a lot more buy-in from the software development teams.

Read full review

Global Application Security at a pharma/biotech company with 10,001+ employees

Jan 7, 2018

It does nearly everything, but penetration testing.

Read full review

Product Manager at GMS

Jan 15, 2018

All areas of the solution could use some improvement.

Read full review

Application & Product Security Manager at a insurance company with 1,001-5,000 employees

Mar 6, 2018

It needs better APIs, reporting that I can easily query through the APIs and, preferably, a license model that I can predict.

Read full review

SK

Siddharth Kundalkar

Director Software Engineering at a tech services company with 51-200 employees

Mar 7, 2018

We use Ruby on Rails and we still don't have any support for that from Veracode.

Read full review

VP of Services at a tech vendor with 51-200 employees

Mar 8, 2018

The user interface can sometimes be a little challenging to work with, and they seem to be changing their algorithm on what is an issue. I understand why they do it, but it sometimes causes more work on our end.

Read full review

CISSP, CISM at a tech services company with 1,001-5,000 employees

Mar 8, 2018

It would help if there were a training module that would explain how to more effectively integrate the SAST product into the build tool, Jenkins or Bamboo.

Read full review

Show 10 more reviews (out of 196)

Related questions

61

What is the biggest difference between Veracode and Checkmarx?

50

Which gives you more for your money - SonarQube or Veracode?

36

Checkmarx or Veracode. Which should we choose?

11

Would you recommend Veracode? What are some of your use cases?

93

Checkmarx vs SonarQube; SonarQube interoperability with Checkmarx or Veracode

10

What do I scan when changing code in Veracode?

132

If you had to both encrypt and compress data during transmission, which would you do first and why?

40

When evaluating Application Security, what aspect do you think is the most important to look for?

91

What are the Top 5 cybersecurity trends in 2022?

125

What are the threats associated with using ‘bogus’ cybersecurity tools?