The Verified by Veracode Logo Program is quality indicator for the security level of applications and software components developed in-house or purchased from a third-party. Independent software vendors and enterprises gain insight into the security quality of software similar to that provided by Moody's®, Standard and Poor's® or Consumer Reports® for other products. Veracode’s ratings are completely transparent and based on industry-standards. Software that receives top ratings, i.e. at a minimum is rated at the “A” level for high assurance levels can be actively promoted by the producing software vendor.

• The application has received the highest possible rating with multiple testing techniques being applied, i.e. static binary application security testing, dynamic application security testing and manual penetration testing. All three techniques are typically conducted for applications with the highest assurance levels.
• The application has received the highest possible rating with both automated testing techniques being applied, i.e. static binary application security testing and dynamic application security testing.
• The application has received the highest possible rating for static binary application security testing, which provides a strong baseline security foundation.

Veracode’s Verified by Veracode Logo program provides key benefits to both enterprises and software developers.

• Obtain detailed insight into the security risk of their commercial software products
• Use the rating to kick-start a secure SDLC process
• Protect their brand from potential security risks
• Proactively execute an actionable remediation roadmap
• Differentiate and market security as a key feature and selling point from competitive offerings

• Gain insight and transparency into internally developed custom applications
• Minimize unbounded risk associated with third-party software and service providers
• Establish mitigating controls by creating thresholds for purchased software, before it is deployed in-house
• Provide a consistent security benchmark when comparing multiple applications and/or multiple versions of the same application over time
• Develop a security procurement governance model that delivers permanent and persistent success for the business through excellence in procurement