# Veracode

> Veracode sells a cloud-based application risk management platform that combines security testing, open-source dependency analysis, AI-assisted remediation, risk prioritization, and developer education. Its customers include enterprise security and engineering teams in regulated industries and software businesses.

- **Founded:** 2006
- **Headquarters:** Burlington, United States
- **Founders:** Chris Wysopal (Co-founder; Chief Security Evangelist (formerly CTO)), Christien Rioux (Co-founder; founding Chief Scientist)
- **Products:** Static Analysis (SAST), Dynamic Analysis (DAST), Software Composition Analysis (SCA), Veracode Fix, Veracode Risk Manager
- **Notable:** Eleven-time Leader in the Gartner Magic Quadrant for Application Security Testing, as stated on its platform page., FedRAMP authorization announced in July 2022., The 2026 State of Software Security report analyzed 1.6 million unique applications.

## Products & services

- **Static Analysis (SAST)** — Analyzes application code for security flaws; binary analysis is a longstanding part of its approach.
- **Dynamic Analysis (DAST)** — Tests running web applications and APIs using simulated attacks.
- **Software Composition Analysis (SCA)** — Identifies vulnerable open-source dependencies and license risks.
- **Veracode Fix** — Suggests AI-assisted code changes to remediate supported security flaws.
- **Veracode Risk Manager** — Consolidates application and cloud findings, prioritizes risk, and identifies owners and root causes.
- **Package Firewall** — Blocks malicious packages and policy-violating dependencies before they enter development workflows.
- **Software Supply Chain Intelligence** — Threat intelligence on open-source package risks.
- **Container and IaC Security** — Scans containers and infrastructure-as-code for vulnerabilities, misconfigurations, and secrets.
- **Security Labs and eLearning** — Hands-on security exercises and secure coding education.
- **Penetration Testing as a Service** — Subscription-based manual security testing for flaws automated scanners can miss.

## Achievements

- Eleven-time Leader in the Gartner Magic Quadrant for Application Security Testing, as stated on its platform page.
- FedRAMP authorization announced in July 2022.
- The 2026 State of Software Security report analyzed 1.6 million unique applications.
- Veracode-sponsored 2024 Forrester Consulting model estimated 184% ROI over three years for a composite organization; not a guaranteed customer return.

## Latest updates

- **2026-07** — The company’s GenAI Code Security Report reported an average 56% security pass rate across more than 100 tested AI models over four years; a benchmark result rather than a production incident rate.
- **2026-07** — Veracode announced its Marketplace for partner integrations, with findings and context connected to its application risk platform.
- **2026-02** — The 2026 State of Software Security report found security debt in 82% of analyzed organizations.

## Links

- Website: https://www.veracode.com/
- LinkedIn: https://www.linkedin.com/company/veracode
- Twitter/X: https://twitter.com/Veracode
- GitHub: https://github.com/veracode
- YouTube: https://www.youtube.com/user/VeracodeInc
- Instagram: https://www.instagram.com/veracode
- Facebook: https://www.facebook.com/VeracodeInc

---

Profile page: https://yespress.io/veracode
Published by YesPress — https://yespress.io
Last updated: 2026-10-21