Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Best security tool to have in the organization
What do you like best about the product?
security scanning which can conduct on our sdk'd , ipa's , jar files is something whoich one should appreciate . Because it gives back the exact report with correction required and suggestions .
What do you dislike about the product?
Fro scanning as we upload sdk'd , ipa's ,jar files . When upload is not successfull ,user is not intimated immediately. This causes little confusion for a new comer.
What problems is the product solving and how is that benefiting you?
Instead of relying on free tools , we have adopted Verqacode for static and dynamic scans and we were able to get good results . Which helped us in identifying things in the right time.
- Leave a Comment |
- Mark review as helpful
Code Scanning over Veracode
What do you like best about the product?
It's a tool to make a static code scan and detect the exposed secrets or passwords before the application is released. We can create multiple sandboxes and run various parts of the code individually. Veracode can be easily integrated with CI/CD pipelines, making it easy to trigger the scan.
What do you dislike about the product?
Any meditation of false positive flaws is not straightforward or internal to the team. There is always dependency on the Veracode admin team to mitigate the flows, interrupting the overall workflow.
What problems is the product solving and how is that benefiting you?
We use Veracode for static code scanning to identify the vulnerabilities.
It helps us identify the same and fix the code as per the action plan.
We even conduct secure code review end to end for better code processing.
It helps us identify the same and fix the code as per the action plan.
We even conduct secure code review end to end for better code processing.
Best tool to analyse or found security threats in code
What do you like best about the product?
Help to analyse or found security threats in code.
Performing Security testing get easy
Performing Security testing get easy
What do you dislike about the product?
Bit complex to implement and understand the threats.
Description is to less for many errors.
Scaning take more time to complete the result or report
Description is to less for many errors.
Scaning take more time to complete the result or report
What problems is the product solving and how is that benefiting you?
Security testing to easy by implementing veracode.
It helps to do Vulnerability scanning.
Source code review can also do
It helps to do Vulnerability scanning.
Source code review can also do
Security Platform
What do you like best about the product?
The ease of finding the CVE and possible libraries that needs to be upgrade for security compliance
What do you dislike about the product?
Ease of console usage is a little challenging
What problems is the product solving and how is that benefiting you?
Dynamic Analysis, Penetration testings and Software composition analysis
Veracode Application Security Platform - Best Security Platform
What do you like best about the product?
We can conduct security testing (both static and dynamic) on any given application . For penetration testing this is the best tool.
- In web application scanning we can conduct
a) Website discovery
b) Dynamic DS
c) Dynamic MP
d) Dynamic Analysis
- Manual Penetration testing
- Code scanning
a) Static analysis
b) Source clear software composite analysis
And top of all its scan reporting features
- In web application scanning we can conduct
a) Website discovery
b) Dynamic DS
c) Dynamic MP
d) Dynamic Analysis
- Manual Penetration testing
- Code scanning
a) Static analysis
b) Source clear software composite analysis
And top of all its scan reporting features
What do you dislike about the product?
Scanning progress is highly dependent on speed of internet as a result it creates confusion on the completion
What problems is the product solving and how is that benefiting you?
We used other tools for scanning our application . But the scan reports were generated in specific formats. This problem got solved with Veracode because , different clients associated with us prefer different kinds of reports for automation purpose.
Veracode is helping us in getting scan reports in desired formats
Veracode is helping us in getting scan reports in desired formats
was good overall but back end support was not as effective as expected
What do you like best about the product?
individual code scanning which helps to scan individual code. which is written by each individual and can be scan at the same time
What do you dislike about the product?
backend support isnt good . there should be a proepr backend support that is needed from the veracode support team
What problems is the product solving and how is that benefiting you?
scanning individual code which helps to secure the code in the initial level which decrease the cost of the scanning and security risk
A must-have tool for your security arsenal.
What do you like best about the product?
Over the years, Veracode has made the tools much faster and more thorough. Their Support group is very good, too. It's great to be able to schedule a consultation, and most of their consultants have been fantastic.
What do you dislike about the product?
On the static scan, sometimes a flaw is detected during one scan, not detected during the next, and subsequently detected on a third. The inconsistency makes it hard to track. Also, they do not make it easy to mitigate flaws other than those for a static scan.
What problems is the product solving and how is that benefiting you?
The platform helps identify any security flaws you have in your code. Also keeps developers on their toes with regard to making sure they don't introduce any *new* flaws.
Recommendations to others considering the product:
I've been very pleased with the Veracode Application Security Platform. It's very easy to use, it's quick, and their support if very good. I highly recommend checking it out.
Great platform for static code analysis
What do you like best about the product?
Easy to scan a new application and view results of previous scans, generate reports etc.
What do you dislike about the product?
Nothing, it's really good. We only use it for static code analysis at the moment.
What problems is the product solving and how is that benefiting you?
Providing users with self-service access to high quality automated testing.
Veracode Does It’s Job
What do you like best about the product?
Veracode gives detailed analysis and supports “ignoring of previously reviewed findings”. You can mark findings as “already reviewed”.
What do you dislike about the product?
User interface is a little clumsy. The UI needs a face lift with more modern technology and widgets.
What problems is the product solving and how is that benefiting you?
It “checks the box” for Java code scanning. Security teams love that.
Fun learning experience
What do you like best about the product?
Very user friendlyand easy to navigate.. response time for assistance is great
What do you dislike about the product?
Nothing to report at this time working well
What problems is the product solving and how is that benefiting you?
Risk management
Recommendations to others considering the product:
N/A
showing 1 - 10