Bridging the Needs of Security and Development Teams, Veracode Unveils Next-Generation Software Security Platform
Veracode, a leading global provider of application security testing (AST) solutions, today announced its Continuous Software Security Platform, which seamlessly embeds application security into the software development lifecycle (SDLC). The platform streamlines workflows by bringing together development and security teams to provide a broad understanding of risk, remediation guidance, and progress at every stage of the development process.
This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20220504005671/en/
Fig. 1 The Veracode Continuous Software Security Platform (Graphic: Business Wire)
According to Veracode’s latest research, there has been a 20x increase in average scan cadence over the past decade, with most applications tested three times per week, as opposed to three times per year a decade ago. The research also showed a 31 percent increase in organizations using multiple scan types over the last three years alone.
Today, leading organizations recognize the need to leverage multiple methods to assess their software and do so across all stages of the development lifecycle. Gartner® predicts that “by 2025, 70% of organizations will consolidate the number of vendors securing the lifecycle of cloud-native applications to a maximum of three vendors.” ¹ This suggests companies are already looking for a comprehensive platform that provides flexible policy management, a holistic assessment of software risk, and integrated remediation guidance, while simplifying the complexity of managing multiple solutions.
Pervasive but Not Invasive for Developers
With increased pressure to build and deploy software at breakneck speed, development teams require security checks to be seamlessly integrated into the tools where they work so they can find and fix vulnerabilities quickly. Meanwhile, security teams must meet increasingly stringent compliance standards defined by their boards and regulatory bodies. Veracode’s Continuous Software Security Platform is pervasive but not invasive because it provides a frictionless experience for developers by embedding vulnerability analysis with remediation guidance directly into the integrated development environment.
Brian Roche, Chief Product Officer at Veracode, said, “Other vendors in our space have incomplete or disjointed solutions that lack consistent reporting and analysis, leaving customers playing a game of ‘whack a mole’ across different tools. We have continued to evolve our platform to create a seamless and integrated experience for developers, as well as provide security teams with a holistic view of their software security posture from design, through development and deployment. We see this as a win for both development and security teams that will result in the delivery of software that is more secure.”
Veracode Continuous Software Security Platform
The Veracode Continuous Software Security Platform enables users to define and manage security policy, gain a comprehensive view of software security across their application portfolio, and leverage rich analytics to make informed plans, communicate metrics, comply with policy, and meet regulatory requirements. Powered by almost two decades of data, the platform enables organizations to detect, predict, manage, and, ultimately, mitigate their security risk. These intelligent capabilities empower companies to deliver secure code at the speed and scale expected in today’s world.
The new Veracode Continuous Software Security Platform release features several new capabilities including:
- Single-Pane-of-Glass Reporting: Security teams can now access unified reporting directly in the portal for Static Analysis, Dynamic Analysis, Software Composition Analysis, and Manual Penetration Testing. Administrators and developers now have a consolidated view into security risks, as well as flexible policy controls through stronger license management reports to address issues quickly.
- Self-Service Peer Benchmarking: With comprehensive data and anonymized insights across all platform users, customers now have direct access to reports on the portal, which enable them to easily benchmark their DevSecOps program results against others in their industry. Tapping into many years of data and learning, customers can see how their program metrics stack up and establish plans to address their risk.
- Software Bill of Materials (SBOM): Security teams can now generate and export SBOMs on demand with an integrated representational state transfer (REST) API. This returns data for a specific application in CycloneDX SBOM format—a standard designed for use in application security contexts and supply chain component analysis. Additionally, data from the API can be mined and transformed outside of the Veracode Platform.
- Intelligent Remediation: The Continuous Software Security Platform will leverage technology acquired from Jaroona to detect and remediate software vulnerabilities through machine learning. Jaroona, which was recognized by Gartner Research as a “Cool Vendor” in 2021, outperforms traditional approaches by 7x to 10x in terms of accuracy, false negatives, and false positive rates, and reduces the burden on technical resources.
According to Tabrez Naqvi, Director of Information Security and Risk at Cox Automotive, “The security of our products and services is very important to us, and Veracode helps us ensure that we never lose our customers' trust and confidence."
For more information on the Veracode Continuous Software Security Platform visit https://www.veracode.com/platform.
¹Gartner, Inc. ”Predicts 2022: Consolidated Security Platforms Are the Future” by Charlie Winckless, Joerg Fritsch, Peter Firstbrook, Neil MacDonald, Brian Lowans, 1 December 2021
GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.
Veracode is a leading AppSec partner for creating secure software, reducing the risk of security breach, and increasing security and development teams’ productivity. As a result, companies using Veracode can move their business, and the world, forward. With its combination of process automation, integrations, speed, and responsiveness, Veracode helps companies get accurate and reliable results to focus their efforts on fixing, not just finding, potential vulnerabilities.
Copyright © 2022 Veracode, Inc. All rights reserved. Veracode is a registered trademark of Veracode, Inc. in the United States and may be registered in certain other jurisdictions. All other product names, brands or logos belong to their respective holders. All other trademarks cited herein are property of their respective owners.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
For more information, please contact:
About Business Wire
(c) 2018 Business Wire, Inc., All rights reserved.
Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Ricardo Appointed to Support Transformation of the Greater Toronto Rail Network23.5.2022 01:01:00 CEST | Press release
Ricardo Certification has been appointed as the Independent Safety Assessor (ISA) for the forthcoming transformation of rail transit across the Greater Toronto and Hamilton Area (GTHA), Ontario, Canada. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20220522005010/en/ Transformation of the Greater Toronto rail network (Photo: Business Wire) As the ISA, Ricardo will provide independent scrutiny of the programme’s safety documentation during its design phase, ensuring it is in full compliance with relevant standards. Performing these assessments at this early stage will reduce the risk of delays or costly rectification works during the construction, installation and testing phases. The role was awarded by Metrolinx, a crown agency of the government of Ontario that is responsible for GO Transit, the regional network of rail and bus services in GTHA. Richard Gibney, Certification Director, Ricardo Certification said: “We are delig
HCL and UNLEASH Partner to Develop Solutions for Aquatic Ecosystem Conservation20.5.2022 17:59:00 CEST | Press release
HCL Group and UNLEASH, a global innovation program for the UN Sustainable Development Goals (SDGs), announced a year-long collaboration to mobilize youth and develop innovative solutions to promote aquatic ecosystem conservation. These solutions will aim to tackle challenges from Source (mountains & glaciers) to Sink (oceans and seas) and their links to terrestrial ecosystems. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20220520005178/en/ Nature and ocean conservation play a critical role in our survival. Terrestrial and aquatic ecosystems provide us with food, water, oxygen, energy, and medicines. They regulate our climate, provide pollination to crops, and reduce the impact of natural hazards. Despite the vital importance of our planet’s ecosystems, we are experiencing a human-caused deterioration of our natural habitats: human activity has altered almost 75% of the Earth’s terrestrial surface, squeezing wildlife and natu
PPG Showcases Innovations in Paints, Coatings, Specialty Materials That Enhance Sustainability, Efficiency, Mobility20.5.2022 14:00:00 CEST | Press release
PPG (NYSE:PPG) today showcased its latest innovations to media at its production and research and development (R&D) facility in Amsterdam. The event focused on advancements in three key areas – sustainability, efficiency and mobility – reflecting the company’s goals of helping customers lower costs, reduce their environmental footprint and support the global shift to electric vehicles (EVs). This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20220520005101/en/ PPG showcased its latest innovations to media at its production and research and development facility in Amsterdam on May 20. The event focused on advancements in three key areas – sustainability, efficiency and mobility – reflecting the company’s goals of helping customers lower costs, reduce their environmental footprint and support the global shift to electric vehicles. (Photo: Business Wire) Recent PPG innovations highlighted during the event include: PPG CORACHAR® batte
Ecopia AI Partners with Snap Inc. Subsidiary to Pilot 3D Map Content Integration20.5.2022 13:00:00 CEST | Press release
Ecopia AI announced today that it was selected by a Snap Inc. subsidiary to provide high-precision vector mapping data. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20220520005091/en/ Sample of the 3D Vector Map of Buildings and Vegetation Generated by Ecopia AI Leveraging Airbus Imagery (Photo: Business Wire) Ecopia leverages advanced AI-based mapping systems to mine the most up-to-date commercially-available geospatial imagery, accessed through its global partner network, outputting high-precision vector maps. For this initiative, Ecopia turned to Airbus for access to their global premium 30-50cm high-resolution imagery database, which is serving as the input imagery for large-scale map content production. “Ecopia has proven their ability to deliver highly-accurate mapping data at a large-scale with unparalleled speed,” said Snap, Inc subsidiary spokesperson. “Ecopia’s mission is to digitize the world using AI, offering hi
B2Broker Announced Annual Payments for B2Core, MarksMan, and B2Trader Products20.5.2022 10:00:00 CEST | Press release
B2Broker is excited to announce that it now offers an annual payment option for the three core products: MarksMan, B2Core, and B2Trader. With the introduction of this new plan, customers will be provided with a discount and a simpler approach to planning their budget. This change will allow the company to streamline its finances and improve cash flow. The annual plan is already applicable to all three products. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20220520005015/en/ B2Broker Announced Annual Payments for B2Core, MarksMan, and B2Trader Products (Graphic: Business Wire) MarksMan Whether you're a seasoned pro or just getting started in the world of digital assets, MarksMan is the perfect solution. With support for spot and perpetual futures liquidity, along with easy access to liquidity pools on major crypto exchanges, MarksMan has everything you need. There's no better time to test it out than now, with the basic packa