It depends on whether Veracode is recommended or not completely based on the technology they are using. for JAVA applications yes recommended. but for python maybe not much usefull.
SonarQube depends on completely what you configure the Rules. You will have the option of the Profile creation and can be assigned to the Projects. If you configure the project --> under them services configuration it is good to go. Proper configuration is important in the…
Fortify Covers the OWASPTOP 10 and SAN25, As this scanning will be done using Source codes. Hence recommended this. DAST and SAST is available in this tool
VERACODE can go for services good for JAVA applications. SAST is good to compare with DAST is high in cost and not…
