Select a Veracode product

Veracode offers products to identify security issues in your code, assess application security, and provide security training.

Choose a product that fits your application security needs:

Veracode Platform

The Veracode Platform is the central hub for managing your application security program, including administration, security testing, and scan results.

• Veracode Static Analysis – Scan your code and review scan results.
• Veracode Software Composition Analysis (SCA) – Identify vulnerabilities in third-party components, including open-source and commercial code.
• Veracode Dynamic Analysis – Scan live web applications and REST APIs. You can also run DAST Essentials for lightweight scans.
• Veracode Discovery – Analyze your web application perimeter and perform focused searches for web applications.
• Veracode Analytics – Monitor application security trends and track how your organization uses Veracode.
• Veracode Manual Penetration Testing – Work with Veracode penetration testers to simulate real-world attacks on your web applications.

Learn the basics of the Veracode Platform.

Veracode integrations

Veracode offers integrations to add security testing to IDEs, build systems, and ticketing tools. You can also automate security tasks using the Veracode APIs.

• Veracode APIs – Automate security tasks, including administration, code scanning, and scan results.
  • To get started, see the quickstart.
• Veracode SCA agent-based scan – Integrate Veracode Software Composition Analysis (SCA) into your continuous integration (CI) tools and desktop environments.
  • To get started, see the quickstart.
• IDE integrations:
  • Veracode Scan plugins and extensions – Upload code, run Static Analysis and SCA scans, apply Veracode Fix AI-generated patches, and resolve open-source vulnerabilities.
  • Static Analysis-only plugins and extensions – Upload code for Static Analysis and review results within your IDE.
  • Veracode Greenlight – Scan and review results directly in your IDE.
• CI/CD integrations:
  • CI/CD integrations – Upload code for scanning and review results inside your build pipeline.
  • Pipeline Scan – Embed security testing directly in your development pipeline.
• Other integrations:
• Ticketing and issue tracking integrations – Import and manage security findings in Agile and defect-tracking tools.
• Archer integration– Assess the Governance, Risk, and Compliance (GRC) status of your applications.

Veracode Fix

Use Veracode Fix to apply AI-generated code patches to security flaws without writing code.

Veracode CLI

Use the Veracode CLI to automate security tasks.

Veracode developer training

Veracode offers training to help developers:

• Get started with security testing.

• Learn about Veracode products.

• Resolve security findings in code.

• Training options:

  • Veracode Security Labs – Learn practical security skills through interactive labs.
    • To get started, see the quickstart.
  • Veracode eLearning – Take course-based training to develop security skills and fix vulnerabilities.