← Back to Discover

Veracode

Application security platform covering static, dynamic and composition analysis, containers and risk management, with AI-driven prioritization and AI-assisted code remediation.

Code & secrets securityCloud & app security
Visit website ↗

What it does

Veracode describes an Application Risk Management Platform that finds risks across the software development lifecycle, automates fixes, and supports governance and compliance. It is pitched at organizations whose code is written with AI assistance as well as by hand. The product range includes Risk Manager for unified risk visibility, SAST, DAST, software composition analysis, Package Firewall, container security, and Fix, its AI code remediation product. Services include penetration testing as a service and consulting, and training comes as eLearning and hands-on security labs. The site frames the platform for different readers: security teams get unified visibility, developers get remediation guidance and AI-driven fixes inside the tools they already use, and leaders get governance and reporting. It also highlights defense for AI-generated code and supply chain protection. Access is through a demo request or a login, and no prices are listed.

Capabilities

  • Static (SAST) and dynamic (DAST) application testing
  • Software composition analysis for open-source dependencies
  • Fix, an AI code remediation product for security flaws
  • Risk Manager for unified application risk visibility
  • Container security and Package Firewall
  • Penetration testing, consulting and security training

When to use it

  • Your security team wants consistent application testing across the development lifecycle.
  • You need to review risk in code produced with AI assistants.
  • Developers need remediation guidance inside their existing workflow.