Skip to main content

Allowing Veracode domains and IP addresses

If you block internet addresses in your organization, Veracode recommends that you allow Veracode domains and, in some limited cases, IP addresses to ensure there is no disruption in your ability to access Veracode features and products. If you have questions, contact [email protected].

If your organization requires that you allow every domain and subdomain for your users to have access to Veracode, add these URLs and IP addresses to your allowlist to avoid disruption in service, based on the products you use:

All Veracode products - Core user interface URLs

RegionURLs
Commercial
  • https://analysiscenter.veracode.com
  • https://ui.analysiscenter.veracode.com
  • https://login.analysiscenter.veracode.com
  • https://web.analysiscenter.veracode.com
  • https://analytics2.veracode.com
European
  • https://analysiscenter.veracode.eu
  • https://ui.analysiscenter.veracode.eu
  • https://login.analysiscenter.veracode.eu
  • https://web.analysiscenter.veracode.eu
  • https://eu-prod-lookout.analytics.veracode.eu
United States Federal
  • https://analysiscenter.veracode.us
  • https://ui.analysiscenter.veracode.us
  • https://login.analysiscenter.veracode.us
  • https://web.analysiscenter.veracode.us
  • https://beta3-lookout.analytics.veracode.us

All Veracode products - Documentation and assistance URLs

RegionURLs
All regions
  • https://docs.veracode.com
  • https://community.veracode.com
  • https://pendo.veracode.com
  • https://app.pendo.io

Veracode sends anonymized user data to a third-party telemetry service as described in About Telemetry.

All Veracode products - APIs and integrations URLs

RegionURLs
Commercial
  • https://analysiscenter.veracode.com
  • https://api.veracode.com
  • https://tools.veracode.com
  • https://downloads.veracode.com
  • https://hub.docker.com
European
  • https://analysiscenter.veracode.eu
  • https://api.veracode.eu
  • https://tools.veracode.com
  • https://downloads.veracode.com
  • https://hub.docker.com
United States Federal
  • https://analysiscenter.veracode.us
  • https://api.veracode.us
  • https://tools.veracode.com
  • https://downloads.veracode.com
  • https://hub.docker.com

All Veracode products - Access from outside the United States

RegionURLs
All regions
  • *.okta.com
  • *.mtls.okta.com
  • *.oktacdn.com
  • *.okta-emea.com
  • *.mtls.okta-emea.com

All Veracode products - IP address rules

RegionIP addresses
Commercial
  • 162.159.128.36
  • 162.159.129.36
European
  • 104.18.16.181
  • 104.18.17.181
United States FederalNot supported.

Veracode Dynamic Analysis IP addresses

RegionIP addresses
Commercial34.195.146.191
European35.156.203.105
United States Federal3.32.105.199

Veracode DAST Essentials IP addresses

Ensure you include /28.

RegionIP addresses
Commercial44.219.184.144/28
European3.79.58.176/28

Veracode Integration for Jira Cloud URLs

RegionURLs
Commercialhttps://jira-cloud-addon.integrations.veracode.com
EuropeanNot supported.
United States FederalNot supported.

Veracode eLearning URLs

RegionURLs
Commercialhttps://elearning.veracode.com
Europeanhttps://elearning.veracode.eu
United States Federalhttps://elearning.veracode.us

Veracode Manual Penetration Testing URLs

RegionURLs
Commercialpt.analysiscenter.veracode.com
EuropeanNot supported.
United States FederalNot supported.

Veracode Security Labs URLs

RegionURLs
Commercial
  • https://securitylabs.veracode.com
  • https://*.vsl.dev
EuropeanNot supported.
United States FederalNot supported.

Veracode Software Composition Analysis URLs

RegionURLs
Commercial
  • https://sca.analysiscenter.veracode.com
  • https://api.sourceclear.io
  • https://download.sourceclear.com
European
  • https://sca.analysiscenter.veracode.eu
  • https://platform-backend.analysiscenter.veracode.eu
  • https://download.sourceclear.com
United States Federal
  • https://sca.analysiscenter.veracode.us
  • https://platform-backend.analysiscenter.veracode.us
  • https://download.sourceclear.com

If you perform SCA agent-based scans of projects that use Maven or Gradle package managers, you must also allow the following URLs:

  • https://repo.maven.apache.org/maven2/com/srcclr
  • https://repo.maven.apache.org/maven2/com/veracode

About telemetry

Veracode sends anonymized user data to a third-party telemetry service to help Veracode measure and improve its products and support.

The anonymized user data includes:

  • A synthetic, unique user identifier
  • A synthetic, unique identifier for the user organization
  • The browser name and version
  • The last login date before the current session
  • The user roles

The user data does not include name, email, organization name, or any information about applications or findings.