Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Veracode Named a 2025 TrustRadius Top Rated Solution: Here's What Real Users Are Saying

We’re proud to announce that Veracode has been honored as a 2025 Top Rated solution by TrustRadius, a recognition based entirely on authentic reviews from the people who know us best: our customers. This award isn’t just a badge; it’s a testament to the real-world impact Veracode delivers every day, helping teams build and ship secure software with confidence and speed.

Introducing Veracode Package Firewall: Your First Line of Defense Against Software Supply Chain Attacks

Open-source and third-party packages drive innovation but expose your software supply chain to relentless cyberattacks. Veracode’s 2025 State of Software Security (SoSS) report reveals a chilling truth: 70% of critical security debt originates from third-party code.

The Security Posture Improvement Tactic You Need to Know

What’s the one security tactic your team isn’t using – but should be? If your risk register keeps growing, your analysts are stretched thin, and your attack surface feels like it’s multiplying daily, you’re not alone. The challenge isn’t knowing that your security posture needs improvement — it’s knowing how to do it efficiently, consistently, and without burning out your team.

Beyond Compliance: Using ASPM to Align Application Security with Business Objectives

Are you confident that your application security testing (AST) efforts are truly protecting your business, or are they just ticking boxes for compliance? These days, simply meeting regulatory requirements isn’t enough. Security teams face mounting pressure from alert overload, fragmented tools, and an ever-growing backlog of vulnerabilities. Meanwhile, executives demand clear evidence that security investments are driving real business value. So how can security leaders bridge this gap?

Veracode: Application Risk Management for today's AI-driven world

Discover Veracode, the comprehensive application risk management platform designed for today's AI-driven world. This video provides an overview of how Veracode empowers organizations to build and deploy secure software by offering unified visibility, AI-driven prioritization, and integrated tools for detecting and remediating vulnerabilities. Learn about Veracode's key capabilities, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and risk management.

Security Debt in Government Software: The Hidden Risk You Can't Ignore

When we think about software security risks, we often focus on immediate threats—new vulnerabilities discovered in the latest release or zero-day exploits making headlines. But beneath the surface lies a more insidious problem, especially in the public sector: security debt. This hidden risk accumulates quietly, but its impact can be severe, eroding the integrity, resilience, and trustworthiness of government software systems.

Down the Rabbit Hole of Unicode Obfuscation

In the ever-vigilant effort to secure the open-source ecosystem, Veracode’s continuous monitoring systems recently flagged a pair of npm malware packages—solders and @mediawave/lib. The malicious behavior, however, is not at all obvious at first because of a layer of unusual Unicode obfuscation that caught our attention. Our investigation focused on the solders package, which leverages a common yet critical attack vector: a postinstall script in its package.json.

Leveraging AI for Continuous Code Quality Improvement

Maintaining continuous code quality is critical—not only to ensure functionality, but also to safeguard against security vulnerabilities. However, the challenge of balancing speed, complexity, and security is a tough one. Enter AI-powered solutions like Veracode Fix, which are transforming how organizations detect, remediate, and prevent software flaws — all while improving developer productivity and code quality.

The Power of Automated Risk Resolution: Simplifying Security for Your Team

In today’s cybersecurity landscape, security teams face a daunting challenge: managing an ever-growing volume of risks with limited time and resources. Traditional manual risk resolution methods are no longer sufficient. They slow down response times, increase the risk of human error, and strain already stretched teams—ultimately compromising the organization’s security posture. That’s where automated risk resolution comes in.