No more typing reviews! Try our Samantha, our new voice AI agent.

Veracode pros and cons

Vendor: Veracode

4.0 out of 5

208 reviews
89% willing to recommend

Pros & Cons summary

Veracode offers comprehensive static and dynamic scanning capabilities, integrating with development tools to identify vulnerabilities across platforms. Software Composition Analysis ensures secure use of third-party libraries, while automation supports CI/CD processes. Users benefit from technical support despite its high cost, false positives, and penetration testing gaps. Static and dynamic analyses impact productivity with slow scans, and support responsiveness requires improvement, affecting engagement and customer satisfaction.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Veracode offers valuable static and dynamic scanning capabilities, enabling users to identify and prioritize security vulnerabilities effectively.

It seamlessly integrates with existing development tools, supporting a wide range of platforms and technologies for efficient security practices.

Software Composition Analysis provides insights into vulnerabilities within third-party libraries, helping to maintain a secure development environment.

Users benefit from robust technical support and consultation services that aid in remediation and enhance security knowledge among developers.

The platform excels in automation, allowing continuous integration and delivery processes to include comprehensive security testing without manual intervention.

CONS

Veracode's pricing is considered expensive, with significant increases from previous years.

False positives occur frequently, leading to more time and effort in handling vulnerabilities.

Veracode lacks penetration testing features and has difficulty scanning C or C++ models.

Support services could improve responsiveness and engagement with customers.

Static analysis and dynamic scans are slow, impacting productivity and CI/CD pipeline integration.

Veracode Pros review quotes

SR

SrikanthRaghavan

Principal Architect at a consultancy with 11-50 employees

May 19, 2025

All three of Veracode's offerings are valuable: SCA, SAST, and DAST. It helps identify security loopholes right in the development phase, allowing developers to get feedback around what kind of vulnerabilities exist as soon as they check in the code or even before that in their IDE.

Read full review

DK

Lead Information Security Analyst at a financial services firm with 10,001+ employees

May 29, 2025

Veracode has impacted our overall security posture because we are from a security background. Every week, we review the dashboards of open findings.

Read full review

reviewer2753535

DevSecOps Engineer at a tech services company with 1,001-5,000 employees

Aug 28, 2025

We used Veracode to improve our security posture and speed up the time to market by streamlining the development process, which enhanced collaboration between developers, operations, and security teams.

Read full review

Free Report: Veracode Reviews and More

Learn what your peers think about Veracode. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.

894,998 professionals have used our research since 2012.

reviewer2700198

IT App Security Senior Analyst at a transportation company with 10,001+ employees

Apr 29, 2025

The most valuable features include the total developer experience, along with regulator exposure and DevOps pipeline. It encompasses everything as an enterprise solution.

Read full review

YS

Software Development Engineer II at Rocket Software

Jan 6, 2026

One benefit is that we have automated the scanning process.

Read full review

reviewer2780568

Senior Infrastructure Specialist at a media company with 10,001+ employees

Nov 24, 2025

Veracode saves us a lot in terms of security, ensuring that external users or others cannot easily hack our system, which is the main motive for using Veracode.

Read full review

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

May 8, 2025

Veracode Fix has affected our time to remediate security flaws in cases where we've been able to use it correctly because the proposals were on point, and it's been great.

Read full review

reviewer2731785

Information Security Strategy at a insurance company with 10,001+ employees

Jun 30, 2025

The integrated IDE tool enables users to get instant feedback in real-time on the code itself, rather than waiting for it to go through the CI/CD pipeline and get the result.

Read full review

reviewer2776002

Lead Application Security Engineer at a university with 501-1,000 employees

Nov 12, 2025

Veracode has positively impacted my organization by helping secure our critical applications, and it has impacted very well.

Read full review

HS

Himadri Subudhi

Works

Apr 2, 2025

The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.

Read full review

Show 10 more reviews (out of 202)

Veracode Cons review quotes

SR

SrikanthRaghavan

Principal Architect at a consultancy with 11-50 employees

May 19, 2025

It would be better if we had a channel for direct communication with the engineering team to speed up the process of providing feedback.

Read full review

DK

Lead Information Security Analyst at a financial services firm with 10,001+ employees

May 29, 2025

The scanning process could be more streamlined as it has certain limitations when performing manual scans.

Read full review

reviewer2753535

DevSecOps Engineer at a tech services company with 1,001-5,000 employees

Aug 28, 2025

When we implement a policy, it can be very difficult to locate.

Read full review

Free Report: Veracode Reviews and More

Learn what your peers think about Veracode. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.

894,998 professionals have used our research since 2012.

reviewer2700198

IT App Security Senior Analyst at a transportation company with 10,001+ employees

Apr 29, 2025

A nice addition would be if it could be extended for scenarios with custom cleansers.

Read full review

YS

Software Development Engineer II at Rocket Software

Jan 6, 2026

In my opinion, Veracode lacks significantly in most parts, including its UI, its reporting, ease of use, and the features that it provides.

Read full review

reviewer2780568

Senior Infrastructure Specialist at a media company with 10,001+ employees

Nov 24, 2025

Veracode has areas for improvement in that the scan takes some time for each Jar depending on the size.

Read full review

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

May 8, 2025

I have contacted the technical support and customer support. With Veracode's technical support, for some issues, it has been really difficult for them to understand the problem, and they ask us to do some tests we've already told them we completed in the first ticket.

Read full review

reviewer2731785

Information Security Strategy at a insurance company with 10,001+ employees

Jun 30, 2025

Veracode needs to shift to a more modern approach because it still feels traditional in its way of doing code scanning compared with others, such as Snyk.

Read full review

reviewer2776002

Lead Application Security Engineer at a university with 501-1,000 employees

Nov 12, 2025

Veracode can be improved with more integrations, more automations, enhanced API features, and more advanced analytics.

Read full review

HS

Himadri Subudhi

Works

Apr 2, 2025

I noticed there is no integration with Bamboo.

Read full review

Show 10 more reviews (out of 202)

Related questions

51

What is the biggest difference between Veracode and Checkmarx?

108

Which gives you more for your money - SonarQube or Veracode?

97

Checkmarx or Veracode. Which should we choose?

29

Would you recommend Veracode? What are some of your use cases?

107

Checkmarx vs SonarQube; SonarQube interoperability with Checkmarx or Veracode

30

What do I scan when changing code in Veracode?

230

If you had to both encrypt and compress data during transmission, which would you do first and why?

163

When evaluating Application Security, what aspect do you think is the most important to look for?

284

What are the threats associated with using ‘bogus’ cybersecurity tools?

253

What are the Top 5 cybersecurity trends in 2022?