# Veracode

Veracode is a cybersecurity company based in the United States, founded in 2006. It has 6 products listed on CybersecTools.

> Application risk management platform for secure software development

Source: https://cybersectools.com/companies/veracode · Updated October 2026

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security)
- Type: Product vendor
- Headquarters: United States
- Founded: 2006
- Products listed: 6
- Website: [veracode.com](https://www.veracode.com/)

## What does Veracode do?

Veracode was founded in 2006 by Chris Wysopal and Christien Rioux, members of the hacker group L0pht that testified before Congress in 1998 about software vulnerabilities. The company has evolved from a scanning tool into an application risk management platform.

Veracode provides application security testing and risk management solutions that help organizations build, buy, and run secure software. The platform enables organizations to identify and remediate security flaws in their applications throughout the software development lifecycle. The company has scanned over 315 trillion lines of code and helped fix more than 113 million software flaws across its customer base.

The company serves over 2,400 customers globally, including organizations such as BMW, Garmin, MIT, the U.S. Nuclear Regulatory Commission, and various enterprises across multiple industries. Veracode employs approximately 700 people worldwide and maintains operations from its headquarters in Burlington, Massachusetts.

Veracode's platform integrates security testing capabilities into development workflows, allowing development and security teams to identify vulnerabilities in both custom-built and third-party software components. The company's approach focuses on enabling organizations to address application security risks at scale, from initial development through production deployment.

Categories: [Application Security](https://cybersectools.com/categories/application-security), [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence), [GRC](https://cybersectools.com/categories/grc)

## Veracode products

- [Veracode Application Risk Management](https://cybersectools.com/tools/veracode): AI-powered platform for identifying, fixing, and governing application security risks (commercial)
- [Veracode Comprehensive Application Risk Management](https://cybersectools.com/tools/veracode-comprehensive-application-risk-management): Application risk management platform with SAST, DAST, SCA, and AI remediation (commercial)
- [Veracode Application Risk Management Platform](https://cybersectools.com/tools/veracode-application-risk-management-platform): Veracode ASPM and AppSec testing platform (SAST, DAST, SCA, IaC) with AI remediation (commercial)
- [Veracode Secure Your Software Supply Chain](https://cybersectools.com/tools/veracode-secure-your-software-supply-chain): Software supply chain security platform with SCA, package firewall & threat intel (commercial)
- [Veracode Secure SDLC](https://cybersectools.com/tools/veracode-secure-sdlc): Platform for securing SDLC with SAST, DAST, SCA, container security & ASPM (commercial)
- [Veracode Risk Manager](https://cybersectools.com/tools/veracode-risk-manager): ASPM platform that unifies security findings and prioritizes remediation actions (commercial)

---

More on Veracode: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=company-md