Simplifying Software Security: Veracode Enhances Frictionless Experience for Developers
14.9.2022 21:33:00 EEST | Business Wire | Press release
Black Hat (booth #2428) – Veracode, a leading global provider of application security testing solutions, today announced the enhancement of its Continuous Software Security Platform with substantial improvements to its integrated developer experience. New features include extended integrations to support software composition analysis (SCA), a software bill of materials (SBOM) Application Programming Interface (API), and additional language and framework support for static analysis, further enhancing developers’ ability to secure software in the environments where they work.
This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20220809005141/en/
Fig. 1 Veracode “Beat the Heat” security flaw heat map, State of Software Security Report v12 (Graphic: Business Wire)
Brian Roche, Chief Product Officer at Veracode, said, “Modern applications are mostly assembled, not written from scratch. Open-source code makes up a significant proportion of audited code bases—for example, 97 percent of the typical Java application is made up of open-source libraries*—increasing security risk and the need to identify supply chain risk. Our SBOM API, is designed to make it easier for developers to inventory their code base, including third-party components, allowing them to act quickly if new vulnerabilities emerge. Since the launch of our Continuous Software Security Platform in May, we have introduced additional capabilities that meet developers right where they work: in the integrated developer environment (IDE), code repository, and command line interface. These innovations are designed to drive adoption by making the platform even more developer friendly.”
Facilitating DevSecOps
Veracode’s platform supports 100+ languages and frameworks, including those for cloud-native application development and older languages used with legacy assets, like COBOL. Large enterprises have applications across myriad languages and being able to deploy a continuous security testing solution across them simplifies the process, while providing consistent results. The company’s latest State of Software Security (SoSS) 12 research analyzed the most common flaws by language and revealed that a prevalent flaw for one language may not be of any concern for another. For example, cross-site scripting (XSS) is the most common flaw for PHP, at 77 percent, but doesn’t even make the top 10 for C++*. Moreover, flaws change constantly, meaning that even if a flaw isn’t prevalent in a programming language, practitioners should still take active steps to prevent it from impacting their code. Since remediation tactics vary by flaw and programming language, having a broad array of language support in one place makes developers’ jobs easier by freeing up their time to focus on meeting tight deployment deadlines.
Frequent scanning of first- and third-party code mitigates the risk from both proprietary and open-source vulnerabilities, such as Log4j. Veracode’s new developer-centric tools and services are designed to make this a quicker and easier process, particularly with the additional capability of third-party proprietary library scanning.
Peter Evans, Engineering Director at QAD Precision GTTE, said, “Veracode brought a complete platform for us to build security tools into our development pipelines, as well as helped us grow our knowledge to keep getting better at security. Veracode was also a good fit because the platform can scan Java code in the Spring framework where we develop our software. We’ve gone from reviewing code to integrating continuous scans into our daily pipelines. Security threats don’t stand still and Veracode provides us the tools to keep up with the latest vulnerabilities and rules.”
Notable updates to the Veracode Continuous Software Security platform include:
SBOM for SCA
- With government regulations driving standards for securing software supply chains, having an SBOM is increasingly important for organizations. Veracode’s SBOM API in SCA enables developers to easily generate an SBOM in CycloneDX JSON format—one of the approved formats for compliance with the U.S. Executive Order. This helps confirm the code they’re using, or building, is free from vulnerabilities.
IDE and Integrations for SCA
To make software security a seamless experience, Veracode continues to introduce integrations that meet developers where they work.
- The Veracode Azure DevOps Extension has a new “SCA Flaw Importer” to automatically import SCA flaws into Azure DevOps Boards and Work Items
- The soon-to-be-released Veracode for Visual Studio Code extension provides detailed information on vulnerabilities, licence risks, and recommended versions of open-source libraries and transitive dependencies so developers can rapidly respond to any risks
Expanded Frameworks and Languages Support for Static Analysis
- The company is committed to keeping up with the latest language and frameworks with which developers work, adding support for Rails 7.0, Ruby 3.x, and PHP Symfony
Roche concluded, “As a pioneer of application security, we are uniquely positioned to combine unrivalled experience with the latest innovations in cloud development. Unlike on-premise vendors, our SaaS solution is both scalable and elastic, meaning customers are always prepared to meet unexpected demand. Powered by nearly two decades of cumulative data, our platform provides detailed comparative historical reviews against industry benchmarks and peers—a level of insight highly relevant for leadership teams and the board. Our platform also saves developers time by delivering highly accurate results and enabling them to find and fix vulnerabilities in minutes, meaning they can ship code quickly with the confidence that it is secure.”
Developers can learn more about Veracode’s platform, the frictionless developer experience, and how to simply and maturely secure their SDLC by visiting Veracode’s booth #2428 at Black Hat USA.
*Veracode State of Software Security Report v12, February 2022
About Veracode
Veracode is a leading AppSec partner for creating secure software, reducing the risk of security breach, and increasing security and development teams’ productivity. As a result, companies using Veracode can move their business, and the world, forward. With its combination of process automation, integrations, speed, and responsiveness, Veracode helps companies get accurate and reliable results to focus their efforts on fixing, not just finding, potential vulnerabilities.
Learn more at www.veracode.com, on the Veracode blog and on Twitter.
Copyright © 2022 Veracode, Inc. All rights reserved. Veracode is a registered trademark of Veracode, Inc. in the United States and may be registered in certain other jurisdictions. All other product names, brands or logos belong to their respective holders. All other trademarks cited herein are property of their respective owners.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20220809005141/en/
Contact information
Press and Media
Katy Gwilliam
Head of Global PR, Veracode
kgwilliam@veracode.com
+44.7584.341.110
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
GenNx360 Capital Partners Closes Fourth Flagship Fund at $865 Million27.8.2026 15:30:00 EEST | Press release
GenNx360 Capital Partners (“GenNx360” or “the Firm”), a New York City-based private equity firm investing in U.S. lower middle market industrial services and business services companies, today announced the successful closing of GenNx360 Capital Partners IV, L.P. (“Fund IV” or “the Fund”), with $865 million in commitments, exceeding its target. Fund IV is the largest fund raised in GenNx360’s history. Fund IV was supported by a diverse group of existing and new investors including leading pensions, asset managers, insurance companies, foundations, and family offices, reflecting conviction in the firm’s disciplined investment approach, operational value creation model, and tenured, diverse team. Fund IV will continue GenNx360’s differentiated strategy of partnering with lower middle market founders and management teams to scale essential services businesses. Fund IV has made five investments to date across infrastructure services, testing and inspection services, aerospace and defense,
Alipay Ant Forest Turns 700 Million Users’ Daily Green Actions into 700 Million Trees Over a Decade of Technology-enabled Environmental Program27.8.2026 15:02:00 EEST | Press release
Alipay Ant Forest, Ant Group’s green initiative that encourages people to participate in environmental protection through simple, everyday low-carbon actions, today announced that more than 700 million users across China have joined the program as of August 2026. Together, they have helped support the planting of over 700 million trees, contributing to ecological restoration efforts in some of China’s most arid and environmentally fragile regions. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260827995848/en/ Before (2019) and after (2026) comparison of Ant Forest Project No. 464 in Inner Mongolia. Launched in 2016 within the Alipay app, Ant Forest transforms individual environmental choices into collective climate action. When users make greener lifestyle choices, such as taking public transportation, cycling, paying bills online to avoid paper invoices, or choosing digital services, they earn virtual “green energy points”
Omilia Appoints Michael Weiss as Vice President, DACH27.8.2026 15:00:00 EEST | Press release
Omilia, a global leader in Self-Learning Agentic CX, today announced the appointment of Michael Weiss as Vice President, DACH. Weiss will lead Omilia's go-to-market strategy across Germany, Austria, and Switzerland, as the company expands its European footprint, with a focus on regulated sectors where enterprise demand for AI that moves past pilot-stage containment is accelerating. In his new role, Weiss will be responsible for enterprise sales, partner development, and go-to-market execution across DACH, building the team and customer relationships needed to scale Omilia's presence in a market where large, heavily regulated enterprises have historically been slow to move off legacy IVR and first-generation AI. Weiss brings more than two decades of enterprise sales leadership in SaaS, cloud, and customer experience (CX) technology. Most recently, he provided fractional Chief Revenue Officer services through his own advisory practice where he advised CX and cloud communications provider
Visa Expands Support for its Clients and the Industry as Organizations Navigate New AI Era of Cybersecurity27.8.2026 15:00:00 EEST | Press release
Visa (NYSE: V) today announced enhancements to its cybersecurity portfolio to help organizations identify and fix vulnerabilities more effectively. Unveiling the next evolution of the Visa Vulnerability Agentic Harness (VVAH), its open-source, model-agnostic framework, Visa is helping organizations significantly reduce the Mean Time to Adapt (MTTA), the time between discovery and resolution of attack paths, with some resolutions shrinking from weeks to hours. And to help clients navigate this evolving threat landscape, Visa also announced the expansion of its Visa Consulting & Analytics (VCA) Cybersecurity Advisory Practice with new advisory services designed to help clients assess risk, prioritize remediation efforts and strengthen resilience in an evolving threat environment. "AI is compressing the time between vulnerability discovery and exploitation, which means defenders need a faster, more reliable path to action," said Rajat Taneja, President, Technology, Visa. "By advancing VVA
Perma-Pipe Announces Closing of Global Credit Facility of Up to $139 Million27.8.2026 14:47:00 EEST | Press release
Perma-Pipe International Holdings, Inc. (Nasdaq: PPIH) (“Perma-Pipe” or the “Company”), a leading global provider of engineered piping and leak detection solutions for energy, infrastructure and industrial markets, today announced the closing of a new global credit facility with J.P. Morgan consists of a $75.0 million revolving credit facility and a $14.0 million term loan facility, and allows the Company access to an additional $50.0 million in incremental capacity. The new facility replaces and consolidates multiple existing credit facilities maintained by the Company and its subsidiaries across various jurisdictions, creating a more streamlined and centralized financing structure for Perma-Pipe’s global operations. It also provides Perma-Pipe with significantly increased financial capacity, enhanced liquidity and greater flexibility to support working capital requirements, letters of credit, strategic investments and the Company’s continued expansion in key markets. Saleh Sagr, Pres
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom