Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

A dynamic application security testing solution that combines robust analytics with exceptional usability. This web application assessment leverages cutting-edge technologies such as HTML5 and Ajax. It can replicate the vulnerability exploitation process by tracking events, while automatically scanning subdirectories linked to a web application's URL. The system identifies security flaws from the URLs it crawls and performs open-source web library vulnerability assessments. Additionally, it integrates with Sparrow's analytical tools to address the shortcomings found in traditional DAST methods. The TrueScan module enhances detection capabilities through IAST integration, and its web-based interface allows for seamless access without the need for installation. The centralized management system facilitates the organization and sharing of analysis results effectively. By utilizing browser event replay technology, it further identifies vulnerabilities in web applications. This solution also addresses the constraints of dynamic analysis through its collaboration with Sparrow SAST and RASP, while the IAST functionality via TrueScan enhances the overall security assessment process even further. As a comprehensive tool, it exemplifies the future of web application security testing.

Description

Veracode provides a holistic and scalable solution to manage security risk across all your applications. Only one solution can provide visibility into the status of all types of testing, including manual penetration testing, SAST, DAST and SCA.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Active Directory No 
Azure DevOps Server No 
BMC AMI Data No 
Bitbucket No 
Cisco Vulnerability Management No 
CodeShip No 
Eclipse IDE No 
F5 BIG-IP Advanced WAF No 
Imperva WAF No 
Jenkins No 
JupiterOne No 
Legit Security No 
Nucleus No 
OpsLevel No 
Rezilion No 
RiskApp No 
SD Elements No 
Scuba Database Vulnerability Scanner No 
Tromzo No 
Visual Studio No 

Integrations

Active Directory Yes 
Azure DevOps Server Yes 
BMC AMI Data Yes 
Bitbucket Yes 
Cisco Vulnerability Management Yes 
CodeShip Yes 
Eclipse IDE Yes 
F5 BIG-IP Advanced WAF Yes 
Imperva WAF Yes 
Jenkins Yes 
JupiterOne Yes 
Legit Security Yes 
Nucleus Yes 
OpsLevel Yes 
Rezilion Yes 
RiskApp Yes 
SD Elements Yes 
Scuba Database Vulnerability Scanner Yes 
Tromzo Yes 
Visual Studio Yes 

Pricing Details

one-time payment
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Sparrow

Founded

2018

Country

South Korea

Website

www.sparrowfasoo.com/en/product/dast

Vendor Details

Company Name

Veracode

Founded

2006

Country

United States

Website

www.veracode.com

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration No 
Training Resources No 
Vulnerability Detection No 
Vulnerability Remediation No 

Product Features

Application Security

Analytics / Reporting Yes 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration Yes 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Static Code Analysis

Analytics / Reporting Yes 
Code Standardization / Validation Yes 
Multiple Programming Language Support Yes 
Provides Recommendations Yes 
Standard Security/Industry Libraries Yes 
Vulnerability Management Yes 

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Alternatives

AppScan Reviews

AppScan

HCLSoftware

Alternatives

PT Application Inspector Reviews

PT Application Inspector

Positive Technologies
Invicti Reviews

Invicti

Invicti Security