Veracode is an enterprise application risk management platform providing SAST, DAST, SCA, container scanning, IaC scanning, and a software-supply-chain Package Firewall, integrated into IDEs and CI/CD. It emphasizes compliance-first AppSec, mapping findings to frameworks like SOC 2, ISO 27001, and PCI DSS, and holds FedRAMP Moderate authorization. It is a SaaS-delivered commercial product sold via custom quotes, aimed at regulated enterprises.
sastdastcompliance-firstenterprise-appsec
Overview
- Founded
- 2006
- Pricing tier
- High
- Startup-friendly
- No
- Enterprise-ready
- Yes
App & code security (SAST/SCA)
- SAST
- Yes
- SCA
- Yes
- Secret scanning
- No
- DAST
- Yes
- Container scanning
- Yes
- IaC scanning
- Yes
- CI/CD integration
- Yes
- Open-source
- No
- Self-hostable
- No
- Free tier
- No
Categories & compliance
Categories
Compliance
SOC2FedRAMPStateRAMPISO27001PCI-DSS