Veracode Application Risk Platform

Veracode was founded in 2006 by Chris Wysopal and Christien Rioux, per its About page, and lists its corporate marketing headquarters at 65 Blue Sky Drive, Burlington, Massachusetts, US. It supplies application security testing and risk management so software teams find and fix flaws before release.

The platform covers SAST, DAST, SCA, container security, Package Firewall, Fix (AI code remediation) and Risk Manager (ASPM) for unified visibility. Services include penetration testing as a service and security training. Customers named include Manhattan Associates, HDI Global SE and Cox Automotive.

• SAST: static analysis of source and binaries.
• DAST and PTaaS: dynamic testing and penetration testing as a service.
• SCA and Package Firewall: dependency and open source package risk control.
• Fix: AI-assisted code remediation.
• Risk Manager (ASPM): unified application risk view.
• Container security and eLearning security labs.

A Vietnamese bank can scan internal apps with SAST and DAST and keep PCI DSS evidence. A software exporter can add pipeline scans and Package Firewall to control open source risk.

• Multiple test types (SAST, DAST, SCA, containers) under one platform.
• AI-assisted fix suggestions to shorten remediation.
• The site cites a 1.1% false-positive rate and 1.5M+ applications scanned (vendor claims).
• Content on compliance topics such as PCI DSS, DORA and HIPAA.

AI-generated code adds volume that traditional review cannot absorb, and the Veracode 2026 GenAI Code Security Report addresses the resulting gap. Vietnamese banks and software exporters need audit-ready testing evidence for standards such as PCI DSS.

Founded 2006; corporate marketing headquarters in Burlington, Massachusetts, EMEA headquarters in London. Simon Adell joined as CFO in June 2025. Named a 2025 TrustRadius Top Rated Solution.