Veracode

Cloud-based application security testing platform with SAST, SCA, DAST, and penetration testing

ToolEnterprise Application SecurityCloud

Pricing: Custom enterprise pricing

Updated February 2026.

What is Veracode?

Veracode is an established application security testing platform that offers SAST, SCA, DAST, and penetration testing through a cloud-based service. Founded in 2006, Veracode pioneered the binary-level SAST approach that analyzes compiled code without requiring access to source code, making it suitable for testing third-party and legacy applications. Veracode provides a centralized platform for managing application security risk across large portfolios, with strong reporting for security program management and compliance.

Best for: Security teams managing application security across large application portfolios, especially when binary analysis of third-party or legacy applications is needed

Key Features

→Binary-level SAST without source code access
→Software composition analysis for open-source risks
→Dynamic application security testing (DAST)
→Manual penetration testing services
→Application security program management dashboard
→Policy-based compliance enforcement
→Developer training through Veracode Security Labs
→Integration with major CI/CD platforms

Are you Veracode? Improve this listing with screenshots, case studies and more.

Veracode Comparisons

Veracode vs Semgrep→Veracode vs Black Duck→Veracode vs Mend.io→Veracode vs Checkmarx→Veracode vs GitHub Advanced Security→Veracode vs SonarQube→Veracode vs Trivy→Veracode vs Snyk→

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Veracode — official websitePrimary source
Veracode questions on Stack Overflow
Stack Overflow

Spot an error, or do you represent Veracode? Request a correction.

Quick Info
PricingCustom enterprise pricing
ModelEnterprise license (application-based)
Founded2006
CloudYes
Self-HostedNo
Visit Website →

Last updated: Feb 20, 2026

Veracode Alternatives
View All Alternatives
Snyk
Developer-first application security platform for finding an...SonarQube
Open-source code quality and security analysis platform with...Checkmarx
Enterprise application security platform with deep SAST, SCA...Semgrep
Lightweight, open-source static analysis with intuitive patt...GitHub Advanced Security
GitHub-native security scanning with CodeQL SAST, secret sca...
In the glossary
SAST