VeraCode: cybersecurity software

Veracode is a legacy SAST vendor that has done a good job expanding into other categories. They are a great choice for organizations using more legacy or waterfall type development methods, but still don't have an intuitive interface or workflows for modern dev teams.

What VeraCode is

Veracode is a legacy SAST vendor that has done a good job expanding into other categories. They are a great choice for organizations using more legacy or waterfall type development methods, but still don't have an intuitive interface or workflows for modern dev teams. The vendor site is www.veracode.com. This profile is an entry in the oneNorma directory, not a vendor landing page.

What VeraCode covers

VeraCode is in the catalog for these capabilities. Categories: DAST, SAST, SCA, Container Vulnerability, and ASPM. Catalog tags: Best for Enterprise.

How to evaluate VeraCode in a security program

Use VeraCode as a stack candidate, not as diligence evidence. The oneNorma score for VeraCode is 3.8/10 (percentile 9). If the real gap is in DAST, SAST, SCA, Container Vulnerability, and ASPM, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.veracode.com publishes. Contrast it with pentesting and Security Cloud & Compliance.

Classification

Categories

DASTSASTSCAContainer VulnerabilityASPM

Tags

Best for Enterprise

Capabilities by category

SAST

EnterpriseAutofix

DAST

Crawler

Container Vulnerability

Scanner

ASPM

Scanning

Frequently asked questions

What is VeraCode?

Veracode is a legacy SAST vendor that has done a good job expanding into other categories. They are a great choice for organizations using more legacy or waterfall type development methods, but still don't have an intuitive interface or workflows for modern dev teams. Site: www.veracode.com.

Which categories does VeraCode fall into?

VeraCode appears in the oneNorma directory under DAST, SAST, SCA, Container Vulnerability, and ASPM. Use those labels to compare it with other vendors for the same problem, not as an official ranking.

Does oneNorma resell or implement VeraCode?

No. The VeraCode profile (www.veracode.com) is for inventory and comparison. oneNorma delivers offensive and compliance evidence (pentesting, cloud compliance), not a vendor license.

Other cybersecurity vendors

More profiles from the vendor directory.