Veracode is an accepted and respected vendor in our market. Their onboarding team was very helpful and support is responsive. There was a point in time where a bug resulted in extra work on our end while they chased it, which was seemingly mishandled and took longer than expected, which is the reason I cannot give five stars.

It does what it says on the tin for supply chain security but it can be of a heavy lift to manage dat to day. Getting it integrated into Pipelines was fine, but we spend way too much time sifting through vuln reports for dev dependencies that dont actually reach production.