Static application security testing that finds vulnerabilities in source, binary and hybrid code across 100+ languages and frameworks, with results in the IDE and CI/CD pipeline.
Static analysis of application code within a wider platform that includes DAST, SCA, container/IaC scanning and policy
Categories: SAST
Detect vulnerabilities with CWE-aligned findings and patented Crosscheck path analysis
Suppress findings in security-irrelevant contexts using Security-Sensitive Context filtering
Categories: SAST
Scan raw source code directly without compilation
Scan binaries and hybrid source-plus-binary code when source is unavailable
Categories: SAST
Scan first-party and third-party code in 100+ languages and frameworks, including legacy, mobile and cloud-native stacks
Categories: SAST
Delivery method: Integration
Start a scan, review security findings and triage results from Eclipse, IntelliJ, Visual Studio, VS Code and other IDEs
Categories: SAST
Delivery method: Integration
Integrate scans into CI/CD pipelines such as Jenkins and Azure DevOps
Stop the pipeline when findings violate policy
Categories: SAST
Static application security testing of source, binary and hybrid code
Categories: Cybersecurity
Prioritize vulnerabilities, identify owner and root cause of each issue, and suggest next best action through Veracode Risk Manager
Categories: Cybersecurity
Define security policies and measure application compliance with pass/fail results and auditable reporting
Categories: Cybersecurity
User experiences, moderated before publication. Review policy
Be the first to share your experience with Veracode Static Analysis.
softosaur