Skip to main content

Allowing Veracode domains and IP addresses

If you block internet addresses in your organization, Veracode recommends that you allow Veracode domains and, in some limited cases, IP addresses to ensure there is no disruption in your ability to access Veracode features and products. If you have questions, contact [email protected].

If your organization requires that you allow every domain and subdomain for your users to have access to Veracode, add these URLs and IP addresses to your allowlist to avoid disruption in service, based on the products you use:

All Veracode products - Core user interface URLs​

RegionURLs
Commercial
  • https://analysiscenter.veracode.com
  • https://ui.analysiscenter.veracode.com
  • https://login.analysiscenter.veracode.com
  • https://web.analysiscenter.veracode.com
  • https://analytics2.veracode.com
European
  • https://analysiscenter.veracode.eu
  • https://ui.analysiscenter.veracode.eu
  • https://login.analysiscenter.veracode.eu
  • https://web.analysiscenter.veracode.eu
  • https://eu-prod-lookout.analytics.veracode.eu
United States Federal
  • https://analysiscenter.veracode.us
  • https://ui.analysiscenter.veracode.us
  • https://login.analysiscenter.veracode.us
  • https://web.analysiscenter.veracode.us
  • https://beta3-lookout.analytics.veracode.us

All Veracode products - Documentation and assistance URLs​

RegionURLs
All regions
  • https://docs.veracode.com
  • https://community.veracode.com
  • https://pendo.veracode.com
  • https://app.pendo.io

Veracode sends anonymized user data to a third-party telemetry service as described in About Telemetry.

All Veracode products - APIs and integrations URLs​

RegionURLs
Commercial
  • https://analysiscenter.veracode.com
  • https://api.veracode.com
  • https://tools.veracode.com
  • https://downloads.veracode.com
  • https://hub.docker.com
European
  • https://analysiscenter.veracode.eu
  • https://api.veracode.eu
  • https://tools.veracode.com
  • https://downloads.veracode.com
  • https://hub.docker.com
United States Federal
  • https://analysiscenter.veracode.us
  • https://api.veracode.us
  • https://tools.veracode.com
  • https://downloads.veracode.com
  • https://hub.docker.com

All Veracode products - Access from outside the United States​

RegionURLs
All regions
  • *.okta.com
  • *.mtls.okta.com
  • *.oktacdn.com
  • *.okta-emea.com
  • *.mtls.okta-emea.com

All Veracode products - IP address rules​

RegionIP Addresses
Commercial
  • 162.159.128.36
  • 162.159.129.36
European
  • 104.18.16.181
  • 104.18.17.181
United States FederalN/A

Veracode Dynamic Analysis IP addresses​

RegionIP Addresses
Commercial34.195.146.191
European35.156.203.105
United States Federal3.32.105.199

Veracode Integration for Jira Cloud URLs​

RegionURLs
Commercialhttps://jira-cloud-addon.integrations.veracode.com
EuropeanTBD
United States FederalTBD

Veracode eLearning URLs​

RegionURLs
Commercialhttps://elearning.veracode.com
Europeanhttps://elearning.veracode.eu
United States Federalhttps://elearning.veracode.us

Veracode Manual Penetration Testing URLs​

RegionURLs
Commercialpt.analysiscenter.veracode.com
EuropeanTBD
United States FederalTBD

Veracode Security Labs URLs​

RegionURLs
Commercial
  • https://securitylabs.veracode.com
  • https://*.vsl.dev
EuropeanTBD
United States FederalTBD

Veracode Software Composition Analysis URLs​

RegionURLs
Commercial
  • https://sca.analysiscenter.veracode.com
  • https://api.sourceclear.io
  • https://download.sourceclear.com
European
  • https://sca.analysiscenter.veracode.eu
  • https://platform-backend.analysiscenter.veracode.eu
  • https://download.sourceclear.com
United States Federal
  • https://sca.analysiscenter.veracode.us
  • https://platform-backend.analysiscenter.veracode.us
  • https://download.sourceclear.com

If you perform SCA agent-based scans of projects that use Maven or Gradle package managers, you must also allow the following URLs:

  • https://repo.maven.apache.org/maven2/com/srcclr
  • https://repo.maven.apache.org/maven2/com/veracode

About telemetry​

Veracode sends anonymized user data to a third-party telemetry service to help Veracode measure and improve its products and support.

The anonymized user data includes:

  • A synthetic, unique user identifier
  • A synthetic, unique identifier for the user organization
  • The browser name and version
  • The last login date before the current session
  • The user roles

The user data does not include name, email, organization name, or any information about applications or findings.