. . .Veracode’s approach is a cool spin on existing security technology, according to Gartner analyst John Pescatore.
– CSO Magazine, 2007

The latest from Veracode

We invite you to visit our resource section frequently as we update it with links to reports, podcasts, webcasts, white papers and research.

Datasheets

Veracode SDLC SecurityReview

Veracode SDLC SecurityReview enables security teams to conduct security assessments on mission-critical internally developed applications before they ship

Download this Datasheet

Veracode COTS SecurityReview

Veracode COTS SecurityReview provides enterprises with an independent security assessment of purchased commercial off-the-shelf software – stopping security risk before it enters the organization.

Download this Datasheet

Veracode Outsourcing SecurityReview

Veracode Outsourcing SecurityReview delivers a simple, cost-effective, and automated security audit that ensures enterprises receive secure code from offshore development partners.

Download this Datasheet

Veracode Software Security Rating System

Veracode offers the industry’s first standards-based rating of security levels in software: the Veracode Software Security Ratings System.

Download this Datasheet

Veracode PCI SecurityReview

Veracode's PCI SecurityReview automates and shortens the process for achieving compliance with the application security requirements of PCI-DSS.

Download this Datasheet

Veracode PA-DSS & PABP Solutions

Veracode's PA-DSS and Visa PABP Solutions help payment application vendors meet Visa's Payment Application Best Practices (PABP) and the newly created PCI PA-DSS standard.

Download this Datasheet

Veracode FISMA Compliance Solution

Veracode's FISMA Compliance Solution helps federal agencies meet application security testing requirements of the Federal Information Security Management Act of 2002.

Download this Datasheet

Veracode GLBA Compliance Solution

Veracode's GLBA Compliance Solution helps financial institutions meet application security testing requirements of the Gramm-Leach-Bliley Act.

Download this Datasheet

Veracode HIPAA Compliance Solution

Veracode's HIPAA Compliance Solution helps health care institutions meet security and privacy requirements of the Health Insurance Portability and Accountability Act.

Download this Datasheet

Veracode SOX Compliance Solution

Veracode's SOX Compliance Solution helps public companies protect the integrity of their financial data to comply with the Sarbanes-Oxley Act of 2002.

Download this Datasheet

Veracode Corporate Overview

Veracode is the industry’s first provider of on-demand application security testing solutions.

Download this Datasheet

Veracode's Security Approach

At Veracode, securing our clients’ information is our top priority. Our state-of-the-art security infrastructure allows you to use our on-demand service with the peace of mind that comes from knowing your data is in safe custody.

Download this Datasheet

Site Map | Responsible Disclosure Policy | Privacy Policy | Contact Us

Veracode offers the first on-demand, application security solution that provides automated application security testing through an easy-to-use, software-as-a-service delivery model. By providing code analysis and web application security testing as a service, organizations have no software or hardware to purchase, install, maintain or upgrade.

With Veracode, enterprises can use application security assessment to achieve code security and implement testing into their secure software development life cycle at key development milestones. For enterprises that want to improve SDLC security without sacrificing profitability or competitiveness, Veracode offers SecurityReview®. SecurityReview combines static, dynamic, and manual testing capabilities and scans code after it has been compiled—at the binary level or "byte" code level rather than the source level, as other solutions do. This offers two distinct advantages: One, binary code analysis is more efficient, so vulnerabilities can be found more quickly and with fewer false positives. And two, binary code analysis is the most complete application security testing method because all code can be scanned regardless of origin.

Information on other topics related to application security assurance, dynamic application security testing, XSS, SQL Injection, IT risk management, static code analysis, and offshore development are also available on this site.