Veracode Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines the application security testing (AST) market as consisting of providers of products that enable organizations to assess applications for the presence and management of risk. These products identify risk by evaluating source code, performing runtime tests and inspecting supply chain components. AST products can be integrated throughout development workflows for continuous assessment or be used to perform ad hoc evaluations. They enable organizations to manage application risks by providing an integrated set of capabilities for risk identification, prioritization and triage, policy evaluation and enforcement, and remediation assistance. Market offerings are available in on-premises, SaaS and hybrid delivery models. Organizations leverage AST products to assess applications for the presence of security vulnerabilities and other risks (e.g., legal and operational) throughout their life cycle. These assessments are used to measure and manage the risks within individual applications, application components or groups of applications in the context of their business criticality and other key attributes (e.g., environment, sensitive data handling, etc.). AST products further enable organizations to evaluate software for compliance with internal policies as well as regulatory requirements established by governments or authoritative industry groups.

Active

Find the top Application Security Testing Tools with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Application Security Testing

Veracode

Engineer

My overall experience with Veracode has been very positive. The platform helps us strengthen application security across multiple stages of development by identifying issues early in the SDLC. The integration pipeline made security testing more efficient and reduced manual efforts for developers. Overall, it has been a reliable and valuable solution for improving secure development practices.

<50M USD

3B - 10B USD

50M - 250M USD

250M - 500M USD

30B + USD

1B - 3B USD

500M - 1B USD

10B - 30B USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 5,000 - 50,000 Employees

Information Security Specialist

Veacode for secure code scanning worked as a basic tool that allowed to easily integrate code scanning on repositories and pipelines, lacking some in-depth detection.

Software Developer

Our overall experience with Veracode has been very positive. The platform helps us strengthen application security across multiple stages of development by identifying vulnerabilities early in the SDLC. Integration with CI/CD pipelines makes security testing more efficient and reduces manual efforts for developers. The dashboard and reporting features provide good visibility into security posture and remediation progress. Overall, it has been a reliable and valuable solution for improving secure development practices.

Checkmarx

Qualys

Rapid7

Black Duck

OpenText (Micro Focus)

Other...

NTT Application Security

SonarSource

Invicti

GitHub

Snyk

GitLab

PortSwigger

Tenable

Contrast Security

Sonatype

HCLTech

LevelBlue

JFrog

CAST

Hewlett Packard Enterprise (HPE)

Netsparker--

Mend.io

Symantec (Appthority)

Synopsys (Cigital)

AdaCore

Edgescan

SiteLock

Veracode is a software security firm focused on identifying flaws and vulnerabilities across all stages of the software development lifecycle. The foundation of Veracode's approach lies in its Software Security Platform, which uses advanced AI algorithms trained on vast datasets of code. This allows for faster and more precise identification and rectification of security flaws. Veracode's mission is to evolve the concept of software security, ensuring it stays aligned with the dynamic needs of today's software development processes.

Veracode is intelligent software security. The Veracode Software Security Platform continuously finds flaws and vulnerabilities at every stage of the modern software development lifecycle. Prompted by powerful AI trained by trillions of lines of code, Veracode customers fix flaws faster with high accuracy. 

Trusted by security teams, developers, and business leaders from thousands of the world‚Äôs leading organizations, Veracode is the pioneer, continuing to redefine what intelligent software security means.

Veracode is intelligent software security. The Veracode Software Security Platform continuously finds flaws and vulnerabilities at every stage of the modern software development lifecycle. Prompted by powerful AI trained by trillions of lines of code, Veracode customers fix flaws faster with high accuracy. 

Trusted by security teams, developers, and business leaders from thousands of the world’s leading organizations, Veracode is the pioneer, continuing to redefine what intelligent software security means.

Reviews

Ratings Overview

Overall experience with

Favorable Review

CI/CD Integration Streamlines Automated Security Testing and Provides Transparency

Critical Review

Flexibility in Integration Noted, Yet Detection Gaps Remain in Veracode

Likes and dislikes about

likes

dislikes