[January 11, 2021]

Veracode Named a Leader in Newest Evaluation of Static Analysis Security Testing by Independent Research Firm

Veracode, Inc., the largest independent global provider of application security testing (AST), today announced it has been named a Leader in The Forrester Wave™: Static Application Security (News - Alert) Testing, Q1 2021. The report states, "Prioritization is a strength, with Veracode's graphical representation of code flaws according to risk and ease of fix unmatched in the market." The Forrester (News - Alert) report noted, "For firms looking for an enterprise-grade SAST tool, Veracode remains a top choice."

Veracode was among the select companies that Forrester invited to participate in The Forrester Wave™: Static Application Security Testing, Q1 2021. In this evaluation, Veracode received the highest scores possible in the remediation guidance and education, product vision, execution roadmap, market approach, and planned enhancements criteria.

"We believe our commitment to empowering software developers to write secure code from the start, without sacrificing speed or innovation, while enabling security teams to manage risk and meet compliance mandates is why Veracode continues to be a market leader," said Sam King, CEO of Veracode. "We're thrilled that Forrester Research (News - Alert) has recognized us in its Static Application Security Testing Wave and believe this report is a validation of our continued vision, innovation, execution, and focus on customer success."

Veracode SAST is a SaaS (News - Alert) solution that empowers customers to both find and fix flaws. It delivers a false positive rate of less than 1.1 percent without manual tuning, which allows developers to focus on fixing real security defects and write code with minimal distraction.

In 2020, Veracode scanned nearly 11 trillion lines of code and helped customers fix more than 16.4 million flaws. Three types of Veracode SAST scans guide developers through different stages of the software development lifecycle (SDLC):

• IDE Scan in the pre-commit stage to help developers find and fix defects in seconds in their peferred development environment. In addition to finding vulnerabilities, it also helps to accelerate remediation and educate developers through positive reinforcement, remediation guidance, and code samples.
• Pipeline Scan in the build stage of development to provide fast, accurate feedback in a median scan time of 90 seconds, so that teams can test every time they commit code in their CI/CD system. This scan is conducted within a development pipeline via an API, with checks against a company's security policy and results directly integrated into the pipeline.
• Policy Scan to test the full application against policy and summarize its security posture in a single report in a matter of minutes. Development teams can also preview compliance in a sandbox environment before communicating results to security and governance teams. This centralized reporting gives security teams broad visibility across their application landscape.

Click here to schedule a demo of Veracode Static Analysis. To learn more about application security from Veracode, please visit: https://www.veracode.com/solutions.

About Veracode

Veracode is the leading AppSec partner for creating secure software, reducing the risk of security breach, and increasing security and development teams' productivity. As a result, companies using Veracode can move their business, and the world, forward. With its combination of process automation, integrations, speed, and responsiveness, Veracode helps companies get accurate and reliable results to focus their efforts on fixing, not just finding, potential vulnerabilities.

Veracode serves more than 2,500 customers worldwide across a wide range of industries. The Veracode solution has assessed more than 24 trillion lines of code and helped companies fix more than 59 million security flaws.

Learn more at https://www.veracode.com/, on the Veracode blog, and on Twitter.

Copyright © 2021 Veracode, Inc. All rights reserved. All other brand names, product names, or trademarks belong to their respective holders.

View source version on businesswire.com: https://www.businesswire.com/news/home/20210111005821/en/

[ Back To TMCnet.com's Homepage ]