Veracode
Veracode is an application risk management platform that helps enterprises identify and fix software security flaws across the development lifecycle.
Last updated September 15, 2026
AI crawler reads
No AI crawler has read this profile since Oct 28, 2026.
Overview
Veracode provides an Application Risk Management Platform that identifies risks across the software development lifecycle, automates flaw fixes, and simplifies governance and compliance. The company was founded in 2006 by Chris Wysopal and Christien Rioux, members of the hacker group L0pht that testified before Congress in 1998 to expose software vulnerabilities. Veracode states its platform is used by thousands of organizations, with 2400+ customers and 700 global employees, and reports metrics including 1.5M+ applications scanned, 471T+ code lines analyzed, and 148M+ software flaws fixed. Its offerings include Veracode Fix for AI-driven code remediation across first-party code and open-source dependencies, static analysis (SAST), software composition analysis (SCA), and a Package Firewall for supply chain security. Brian Roche serves as Chief Executive Officer.
History
Veracode traces its origins to the hacker group L0pht, which testified before Congress in 1998 to expose software vulnerabilities. In 2006, L0pht members Chris Wysopal and Christien Rioux founded Veracode. The company states it has evolved from a trusted scanning tool into an application risk management platform used by thousands of organizations. Veracode reports 315+ trillion lines of code scanned, 113+ million software flaws fixed, 97% of customers recommending Veracode, 700 global employees, and 2400+ customers.
Products and positioning
Application risk management platform for enterprises, built for the AI-coding era, emphasizing trusted findings, automated remediation, and governance at enterprise scale.
Application Risk Management Platform
Identifies risks across the software development lifecycle, automates flaw fixes, and simplifies governance and compliance.
Veracode Fix
AI-driven code remediation for first-party code (Fix for SAST) and open-source dependencies (Fix for SCA).
Static Analysis (SAST)
Enhances AI-generated code security, detecting and neutralizing vulnerabilities early in the SDLC across over 100 languages and frameworks.
Software Composition Analysis (SCA)
Safeguards the software supply chain by detecting vulnerabilities in open-source components and AI-driven codebases.
Package Firewall
Provides proactive defense against malicious packages and compliance assurance for open-source licenses.
Sources5 sources
- 1Application Risk Management: Secure Your Softwareveracode.com
- 2About Veracode: Leading the Future of Application Securityveracode.com
- 3AI Code Remediation | Fix Application Vulnerabilities with Veracodeveracode.com
- 4AI Generated Code: Enhancing Security in Developmentveracode.com
- 5Security firm Veracode sponsors $15K hacking competition for universities | EdScoopedscoop.com
Cite this profile: Cite the canonical profile. /brand-wiki/veracode · Editorial policy · How profiles are compiled