Application Security Testing l Automated l On-Demand

About Veracode

Veracode at a Glance


Founded:	March 2006 – Privately held
Investors:	Veracode has received $19.5 million in funding from lead investors .406 Ventures, Atlas Venture and Polaris Venture Partners as well as from strategic investors Symantec and Macrovision.
Management:	Matt Moynahan, CEO Christien Rioux, Co-Founder and Chief Scientist Chris Wysopal, Co-Founder and Chief Technology Officer Susan Ledoux, CFO Seksom Suriyapa, Sr. VP of Business Development Mike Cote, VP of Engineering Sam King, VP of Service Delivery Ashish Larivee, VP of Product Management Bernd Leger, VP of Marketing Eric Poley, VP of Sales Chris Eng, Senior Director of Security Research
Board:	Matt Moynahan, Veracode Chris Wysopal, Veracode Maria Cirino, .406 Ventures Jeff Fagnan, Atlas Venture Dave Litwack Simeon Simeonov, Polaris Venture Partners
Overview:	Veracode is the world’s leader for on-demand application security testing solutions. Veracode SecurityReview is the industry’s first solution to use patented binary code analysis and dynamic web analysis to uniquely assess any application security threats including vulnerabilities and malicious code. SecurityReview performs the only complete and independent security audit across any internally developed applications, third-party commercial off-the-shelf software and offshore code without exposing a company’s source code. Delivered as an on-demand service, Veracode delivers the simplest and most-cost effective way to implement security best practices, reduce operational cost and achieve compliance without requiring any hardware, software or training.
Solutions:	Veracode SDLC SecurityReview - enables security and audit professionals to conduct security assessments on mission-critical internally developed applications before they ship Veracode PCI SecurityReview –automates and shortens the process for achieving compliance with the application security requirements of PCI-DSS, Visa PABP and PA-DSS in a simple and cost-effective way Veracode COTS SecurityReview - helps enterprises and government agencies quantify and manage security risks of commercial off-the-shelf software before it is deployed in-house Veracode Outsourcing SecurityReview - provides a simple, cost-effective, and automated security audits that ensures enterprises receive secure code from offshore development partners
Awards:	Gartner Cool Vendor 2008 Tomorrow’s Technology Today Award (InfoSecurity Product Guide, 2008) Readers’ Choice Award (Information Security Magazine, 2008) Northeast Top 100 Private company (AlwaysOn, 2008 Top 10 Security Company to Watch (Network World, 2007) 10 Hot Security Startups (Dark Reading, 2007)
Media Contact:	Rachel Labas Lois Paul & Partners 781.782.5787 This e-mail address is being protected from spam bots, you need JavaScript enabled to view it

Site Map | Responsible Disclosure Policy | Privacy Policy | Contact Us

Veracode offers the first on-demand, application security solution that provides automated application security testing through an easy-to-use, software-as-a-service delivery model. By providing code analysis and web application security testing as a service, organizations have no software or hardware to purchase, install, maintain or upgrade.

With Veracode, enterprises can use application security assessment to achieve code security and implement testing into their secure software development life cycle at key development milestones. For enterprises that want to improve SDLC security without sacrificing profitability or competitiveness, Veracode offers SecurityReview®. SecurityReview combines static, dynamic, and manual testing capabilities and scans code after it has been compiled—at the binary level or "byte" code level rather than the source level, as other solutions do. This offers two distinct advantages: One, binary code analysis is more efficient, so vulnerabilities can be found more quickly and with fewer false positives. And two, binary code analysis is the most complete application security testing method because all code can be scanned regardless of origin.

Information on other topics related to application security assurance, SOA security, dynamic application security testing, IT risk management, static code analysis, and software security vulnerability are also available on this site.