Simplifying Software Security: Veracode Enhances Frictionless Experience for Developers
14.9.2022 21:33:00 EEST | Business Wire | Press release
Black Hat (booth #2428) – Veracode, a leading global provider of application security testing solutions, today announced the enhancement of its Continuous Software Security Platform with substantial improvements to its integrated developer experience. New features include extended integrations to support software composition analysis (SCA), a software bill of materials (SBOM) Application Programming Interface (API), and additional language and framework support for static analysis, further enhancing developers’ ability to secure software in the environments where they work.
This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20220809005141/en/
Fig. 1 Veracode “Beat the Heat” security flaw heat map, State of Software Security Report v12 (Graphic: Business Wire)
Brian Roche, Chief Product Officer at Veracode, said, “Modern applications are mostly assembled, not written from scratch. Open-source code makes up a significant proportion of audited code bases—for example, 97 percent of the typical Java application is made up of open-source libraries*—increasing security risk and the need to identify supply chain risk. Our SBOM API, is designed to make it easier for developers to inventory their code base, including third-party components, allowing them to act quickly if new vulnerabilities emerge. Since the launch of our Continuous Software Security Platform in May, we have introduced additional capabilities that meet developers right where they work: in the integrated developer environment (IDE), code repository, and command line interface. These innovations are designed to drive adoption by making the platform even more developer friendly.”
Facilitating DevSecOps
Veracode’s platform supports 100+ languages and frameworks, including those for cloud-native application development and older languages used with legacy assets, like COBOL. Large enterprises have applications across myriad languages and being able to deploy a continuous security testing solution across them simplifies the process, while providing consistent results. The company’s latest State of Software Security (SoSS) 12 research analyzed the most common flaws by language and revealed that a prevalent flaw for one language may not be of any concern for another. For example, cross-site scripting (XSS) is the most common flaw for PHP, at 77 percent, but doesn’t even make the top 10 for C++*. Moreover, flaws change constantly, meaning that even if a flaw isn’t prevalent in a programming language, practitioners should still take active steps to prevent it from impacting their code. Since remediation tactics vary by flaw and programming language, having a broad array of language support in one place makes developers’ jobs easier by freeing up their time to focus on meeting tight deployment deadlines.
Frequent scanning of first- and third-party code mitigates the risk from both proprietary and open-source vulnerabilities, such as Log4j. Veracode’s new developer-centric tools and services are designed to make this a quicker and easier process, particularly with the additional capability of third-party proprietary library scanning.
Peter Evans, Engineering Director at QAD Precision GTTE, said, “Veracode brought a complete platform for us to build security tools into our development pipelines, as well as helped us grow our knowledge to keep getting better at security. Veracode was also a good fit because the platform can scan Java code in the Spring framework where we develop our software. We’ve gone from reviewing code to integrating continuous scans into our daily pipelines. Security threats don’t stand still and Veracode provides us the tools to keep up with the latest vulnerabilities and rules.”
Notable updates to the Veracode Continuous Software Security platform include:
SBOM for SCA
- With government regulations driving standards for securing software supply chains, having an SBOM is increasingly important for organizations. Veracode’s SBOM API in SCA enables developers to easily generate an SBOM in CycloneDX JSON format—one of the approved formats for compliance with the U.S. Executive Order. This helps confirm the code they’re using, or building, is free from vulnerabilities.
IDE and Integrations for SCA
To make software security a seamless experience, Veracode continues to introduce integrations that meet developers where they work.
- The Veracode Azure DevOps Extension has a new “SCA Flaw Importer” to automatically import SCA flaws into Azure DevOps Boards and Work Items
- The soon-to-be-released Veracode for Visual Studio Code extension provides detailed information on vulnerabilities, licence risks, and recommended versions of open-source libraries and transitive dependencies so developers can rapidly respond to any risks
Expanded Frameworks and Languages Support for Static Analysis
- The company is committed to keeping up with the latest language and frameworks with which developers work, adding support for Rails 7.0, Ruby 3.x, and PHP Symfony
Roche concluded, “As a pioneer of application security, we are uniquely positioned to combine unrivalled experience with the latest innovations in cloud development. Unlike on-premise vendors, our SaaS solution is both scalable and elastic, meaning customers are always prepared to meet unexpected demand. Powered by nearly two decades of cumulative data, our platform provides detailed comparative historical reviews against industry benchmarks and peers—a level of insight highly relevant for leadership teams and the board. Our platform also saves developers time by delivering highly accurate results and enabling them to find and fix vulnerabilities in minutes, meaning they can ship code quickly with the confidence that it is secure.”
Developers can learn more about Veracode’s platform, the frictionless developer experience, and how to simply and maturely secure their SDLC by visiting Veracode’s booth #2428 at Black Hat USA.
*Veracode State of Software Security Report v12, February 2022
About Veracode
Veracode is a leading AppSec partner for creating secure software, reducing the risk of security breach, and increasing security and development teams’ productivity. As a result, companies using Veracode can move their business, and the world, forward. With its combination of process automation, integrations, speed, and responsiveness, Veracode helps companies get accurate and reliable results to focus their efforts on fixing, not just finding, potential vulnerabilities.
Learn more at www.veracode.com, on the Veracode blog and on Twitter.
Copyright © 2022 Veracode, Inc. All rights reserved. Veracode is a registered trademark of Veracode, Inc. in the United States and may be registered in certain other jurisdictions. All other product names, brands or logos belong to their respective holders. All other trademarks cited herein are property of their respective owners.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20220809005141/en/
Contact information
Press and Media
Katy Gwilliam
Head of Global PR, Veracode
kgwilliam@veracode.com
+44.7584.341.110
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Komainu Completes Two-Way Digital Asset Transfers for First Abu Dhabi Bank as Institutional Custody Framework Goes Live3.11.2026 11:30:00 EET | Press release
Komainu, a regulated digital asset services provider and custodian backed by Laser Digital and Blockstream, has completed the two-way transfer of a portfolio of digital assets with First Abu Dhabi Bank (FAB) through the institutional digital asset custody framework the two firms have established. The transfers settled instantly. The milestone marks the operationalisation of Komainu’s collaboration with FAB Global Markets, integrating regulated digital asset custody and connectivity capabilities with FAB’s existing infrastructure. The transfers demonstrate the bank’s ability to move digital assets both into and out of the custody environment, validating the infrastructure required to support institutional digital asset activity. The framework has also been designed to support future institutional financing solutions, including lending backed by digital assets held in regulated custody. This provides a foundation for FAB to further integrate digital assets into its financial markets infr
Klarna Expands Partnership With Mollie, Bringing Enhanced Dispute Management and Consumer FX to Merchants Across Europe3.11.2026 11:00:00 EET | Press release
Klarna, the everyday finance network, announced today an expanded agreement with Mollie, one of Europe’s leading payment service providers. Building on their existing partnership, the new contract brings additional Klarna capabilities, including enhanced dispute management and consumer FX, to Mollie’s more than 350,000 merchants. The new features will roll out across all Mollie’s integrations, via direct API, hosted payment page and via their extensive Platform partner plug in ecosystem. Merchants already offering Klarna through Mollie will gain access to these features through their existing integration. Merchants new to Klarna can offer Pay in Full, Pay in 3 interest-free installments and Financing at checkout, and can enable it within minutes. With Mollie’s recent acquisition of GoCardless and coverage across all EEA markets, the expanded agreement extends Klarna’s reach and product offering across the region. “This deepened agreement with Mollie opens up Klarna to merchants across
Bizzmine Unveils More Than 40 Quality, EHS and Compliance Solutions Alongside Major Advances in AI and User Experience3.11.2026 10:47:00 EET | Press release
Bizzmine has announced a major expansion of its intelligent QHSE platform at Digital Summit 2026. The company presented more than 40 ready to use solutions spanning Quality, Environment, Health and Safety (EHS) and Compliance, together with advances in artificial intelligence and a fundamentally renewed user experience. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20261102147396/en/ Bizzmine summit panel discussion The latest developments give organisations a broader range of operational processes to manage in one environment, with connected information, common governance and a clear view of responsibilities and completed work across locations. “What impresses me most is how quickly we can now turn innovation into value for our customers,” said Mark Abbas, CEO of Bizzmine. “In just one year, we have expanded from around 15 solutions to more than 40, got recognized by leading industry analysts for our EHS capabilities, introd
Hightouch Launches Match Booster in Europe, Raising Match Rates Without Compromising Compliance3.11.2026 10:02:00 EET | Press release
Hightouch, the leading agentic marketing platform, today launched Match Booster in the UK, Germany, France, Spain, and Italy. Match Booster helps brands, agencies, media networks, and publishers reach more of their customers on more than 50 ad platforms, including Google, Meta, Amazon, TikTok, and The Trade Desk, by adding to their consented first-party data instead of replacing it. Until now, European advertisers have had two options. They could send first-party data to ad platforms alone and accept the match rates they got. Or they could hand it to a traditional onboarding provider that swaps it for a proprietary ID and drops any customer its graph can’t find, sometimes leaving audiences smaller than they started. Global companies also end up running separate US and EU workflows to meet data residency rules. “Better match rates shouldn’t depend on where your customers live,” said Matthew Lubeck, General Manager, EMEA at Hightouch. “European companies have been told that more reach me
Building on Netherlands NextGen Momentum, Trilliant Showcases Why the Next Generation of AMI is Being Defined by Choice at Enlit Europe 20263.11.2026 10:00:00 EET | Press release
Trilliant, a technology platform partner enabling utilities to gain real-time visibility and optimize performance across an increasingly dynamic energy landscape, will showcase its Power of Choice approach at Enlit Europe 2026, taking place 10–12 November in Vienna, Austria. The company will highlight how intelligent software and device-independent technologies help utilities modernize infrastructure and prepare for evolving grid demands. Trilliant’s participation at Enlit Europe follows its recent selection by Dutch distribution system operators to support the Netherlands’ NextGen smart metering programme. Trilliant’s role includes developing and delivering gateways supported by its transformed UnitySuite® platform, which will be demonstrated during the conference. At Enlit Europe, Trilliant will spotlight its Power of Choice approach, enabling utilities to integrate multiple vendors and technologies without proprietary lock-in while building a foundation for next-generation AMI and g
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom