. . .Veracode’s approach is a cool spin on existing security technology, according to Gartner analyst John Pescatore.

– CSO Magazine, 2007
Application Security Resources

The latest from Veracode

We invite you to visit our resource section frequently as we update it with links to reports, podcasts, webcasts, white papers and research.

Resources

Product Demo

On-Line Demo
View the demo of Veracode SecurityReview - the standard for on-demand application security testing. The 5 minute demo, in flash format, provides a narrated guide to various aspects of Veracode's On-Demand Assurance Platform.

Whitepapers

Anti-Debugging – A Developers View
Anti-debugging is the implementation of one or more techniques within computer code that hinders attempts at reverse engineering or debugging a target binary. Within this paper we will present a number of the known methods of antidebugging in a fashion that is easy to implement for a developer of moderate expertise.

Protecting Your Organization from Application Backdoors
This whitepaper discusses how binary (compiled code) analysis is the ideal platform for detecting backdoors and conducting the most complete independent security test, validation and verification of applications.

Webcasts

Forrester Survey Briefing – Software Risk in Enterprises
Join Forrester Research’s Principal Analyst Chenxi Wang Ph.D. and Veracode CTO, Chris Wysopal, in a webinar where they will be sharing the complete results from the Application Risk in Business Survey along with their expert commentary on industry best practices.

Is There Lead Paint in Your Offshore Code?
Veracode's Mike Puglia and John Jacott discuss what you need to know about securing applications developed by offshore outsourcing providers.

Podcasts

PCI Primer - Introduction to PCI Compliance
Mike Puglia, Director of Product Marketing at Veracode, provides an overview of PCI compliance for merchants and service providers.

NetworkWorld Podcast - Application Outsourcing
Matt Moynahan, CEO of Veracode, discusses his company's system for examining code (even when its already made into a binary) with Network World's Jason Meserve.

Datasheets

SDLC SecurityReview
Veracode's SDLC SecurityReview enables security teams to conduct security assessments on mission-critical internally developed applications before they ship.

COTS SecurityReview
Veracode’s COTS SecurityReview provides enterprises with an independent security assessment of purchased commercial off-the-shelf software – stopping security risk before it enters the organization.