Check out your Company Bowl for anonymous work chats.
Hear from Dionabel Espinola, Veracode Customer Success Manager, talking about the three must-haves when choosing where to work. This video was created in partnership with PowerToFly as part of our commitment to Diversity and Inclusion.
VERACODE NAMED A LEADER IN 2021 GARTNER MAGIC QUADRANT FOR APPLICATION SECURITY TESTING FOR EIGHTH CONSECUTIVE TIME
Veracode, the largest independent global provider of application security testing (AST) solutions, today released new research that finds seven in 10 applications have a security flaw in an open source library on initial scan, highlighting how use of open source can introduce flaws, increase risk, and add to security debt.
Veracode, the largest independent global provider of application security testing (AST) solutions, has achieved the Amazon Web Services (AWS) DevOps Competency status. The designation recognizes that Veracode provides proven technical proficiency and customer success to help organizations implement continuous integration and delivery practices on AWS. As a fully cloud-based solution, Veracode provides a centralized view into application status across all testing types including SAST, DAST, SCA and IAST – allowing organizations to immediately find and fix security flaws.
Veracode and Enterprise Strategy Group (ESG) unveiled new research today that finds nearly half of organizations regularly and knowingly ship vulnerable code despite using application security tools. Among the top reasons cited for pushing vulnerable code were pressure to meet release deadlines (54%) and finding vulnerabilities too late in the software development lifecycle (45%). Respondents said that the lack of developer knowledge to mitigate issues and lack of integration between AppSec tools were two of the top challenges they face with implementing DevSecOps. However, nearly nine of ten companies said they would invest further in AppSec this year.
Veracode, the largest global provider of application security testing (AST), has announced a new GitHub Action to provide developers with an easy and familiar way to ensure that the code they are writing is secure – as they write it. The action enables developers to perform Veracode’s Static Policy Scan workflow, initiate a pipeline scan, and consume pipeline scan results all within GitHub’s code scanning UI.
Veracode, the largest global provider of application security testing (AST) solutions, today announced it has been named a Customers’ Choice in the October 2020 Gartner Peer Insights ‘Voice of the Customer’: Application Security Testing. As of Oct. 14, 2020, on the Gartner Peer Insights website, Veracode has the highest number of Gartner Peer Insights reviews of any vendor in the AppSec Testing market over the past 12 months. Veracode received 110 reviews, with an aggregate score of 4.6 out of 5 stars, and 91 percent of reviewers indicated a ‘willingness to recommend’ Veracode for application security testing. Earlier this year, Veracode was positioned in the Leaders quadrant for the seventh consecutive time in the Gartner Inc. 2020 Magic Quadrant for Application Security Testing.
Veracode, the largest global provider of application security testing (AST) solutions, today announced the State of Software Security (SOSS) Volume 11 revealing the majority of applications contain at least one security flaw and fixing those flaws typically takes months. This year’s analysis of 130,000 applications found that it takes about six months for teams to close half the security flaws they find.
Veracode, the largest global provider of application security testing (AST) solutions, today released findings revealing that the financial services industry has the best flaw fix rate across six industries and leads a majority of industries in uncovering flaws within open source components. Fixing open source flaws is critical because the attack surface of applications is much larger than developers expect when open source libraries are included indirectly.
Veracode, the largest global provider of application security testing (AST) solutions, unveiled new research demonstrating that government and education entities often deploy applications with high flaw density. The research found that the majority of organizations in those disciplines work with larger applications that contain older codebases compared to other sectors. However, there are signs that developers in these sectors are modernizing their approach to find and fix flaws faster to improve software security.