Skip to content

Veracode

Veracode is an application risk management platform that helps enterprises identify and fix software security flaws across the development lifecycle.

Last updated September 15, 2026

AI crawler reads

No AI crawler has read this profile since Oct 28, 2026.

Overview

Veracode provides an Application Risk Management Platform that identifies risks across the software development lifecycle, automates flaw fixes, and simplifies governance and compliance. The company was founded in 2006 by Chris Wysopal and Christien Rioux, members of the hacker group L0pht that testified before Congress in 1998 to expose software vulnerabilities. Veracode states its platform is used by thousands of organizations, with 2400+ customers and 700 global employees, and reports metrics including 1.5M+ applications scanned, 471T+ code lines analyzed, and 148M+ software flaws fixed. Its offerings include Veracode Fix for AI-driven code remediation across first-party code and open-source dependencies, static analysis (SAST), software composition analysis (SCA), and a Package Firewall for supply chain security. Brian Roche serves as Chief Executive Officer.

History

Veracode traces its origins to the hacker group L0pht, which testified before Congress in 1998 to expose software vulnerabilities. In 2006, L0pht members Chris Wysopal and Christien Rioux founded Veracode. The company states it has evolved from a trusted scanning tool into an application risk management platform used by thousands of organizations. Veracode reports 315+ trillion lines of code scanned, 113+ million software flaws fixed, 97% of customers recommending Veracode, 700 global employees, and 2400+ customers.

Products and positioning

Application risk management platform for enterprises, built for the AI-coding era, emphasizing trusted findings, automated remediation, and governance at enterprise scale.

  • Application Risk Management Platform

    Identifies risks across the software development lifecycle, automates flaw fixes, and simplifies governance and compliance.

  • Veracode Fix

    AI-driven code remediation for first-party code (Fix for SAST) and open-source dependencies (Fix for SCA).

  • Static Analysis (SAST)

    Enhances AI-generated code security, detecting and neutralizing vulnerabilities early in the SDLC across over 100 languages and frameworks.

  • Software Composition Analysis (SCA)

    Safeguards the software supply chain by detecting vulnerabilities in open-source components and AI-driven codebases.

  • Package Firewall

    Provides proactive defense against malicious packages and compliance assurance for open-source licenses.

Sources5 sources

Cite this profile: Cite the canonical profile. /brand-wiki/veracode · Editorial policy · How profiles are compiled