Veracode Alternatives

The overall experience with CheckmarX has been truly exceptional. The vendor has been very supportive of us throughout the implementation and post-implementation phases, addressing our concerns promptly and smoothly. They also consistently share updates and newly added features, taking time to explain them clearly to our team. CheckmarX's SAST solution is reliable and suited for development and security teams looking to integrate security seamlessly into their process. More importantly, it plays a critical or crucial role in strengthening our application security by identifying vulnerabilities in the early development cycle, reducing risk, and ensuring that our product or application is secure and compliant.

Our overall experience with Fluid Attacks has been extremely positive. Their platform is very user-friendly and intuitive, allowing for centralized vulnerability management and risk tracking. Another key differentiator is their team. The staff is always attentive and available to answer any questions or concerns, providing personalized support that makes our work as developers much easier. It's a service that not only detects vulnerabilities but also truly contributes to achieving our business objectives by enabling us to deliver secure software continuously.

We have engaged AppKnox for our app vulnerability assessment and VAPT requirements, and the overall experience has been structured and professional. Their team has been responsive from onboarding through report delivery and retesting. AppKnox's automated vulnerability assessment (SAST/DAST/API) combined with manual penetration testing produced detailed, actionable reports that helped our engineering team prioritize and remediate issues efficiently. Revalidation after fixes was handled promptly.

HCL AppScan has significantly enhanced our application security testing process and it's become an essential part of our day-to-day activities. It provides comprehensive and customizable AST reports, enabling us to scan apps throughout the development lifecycle and identify vulns early. The platform is robust and supports scans at scale.

We use GitLab mainly for source code management, CI/CD pipelines, and collaboration between development teams. Having repository management, pipelines, and issue tracking in one platform helps simplify the development workflow and reduces the need for multiple separate tools. The CI/CD integration works well and is flexible enough for different deployment scenarios. Merge request and branch management features also help improve collaboration during development. Initial setup was relatively straightforward, although optimizing runners and pipelines required some tuning depending on the environment. One challenge is that some advanced features have a learning curve, especially for teams that are new to DevOps practices. Pipeline troubleshooting can also become difficult when configurations grow more complex.

After moving some of our toolsets around, we had a gap related to web app scanning. We slide Invicti into place and it has been an awesome product, with no major issues. It was straightward to set up, and it's easily been a "fire and forget" kind of tool, as we automate pulling the reports.

The project manager and technical resource dedicated to our account is amazing. They anticipate our needs, assist us with implementation, answer every question asked, and are extremely professional.

Good quality software and very good communication with the support team to address issues.