Try our new research platform with insights from 80,000+ expert users

Contrast Security Protect vs Veracode comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Contrast Security Protect
Ranking in Application Security Tools
30th
Average Rating
8.4
Reviews Sentiment
5.8
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Veracode
Ranking in Application Security Tools
2nd
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
204
Ranking in other categories
Static Application Security Testing (SAST) (2nd), Container Security (8th), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Application Security Posture Management (ASPM) (2nd)
 

Mindshare comparison

As of September 2025, in the Application Security Tools category, the mindshare of Contrast Security Protect is 0.7%, up from 0.4% compared to the previous year. The mindshare of Veracode is 8.0%, down from 10.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
Veracode8.0%
Contrast Security Protect0.7%
Other91.3%
Application Security Tools
 

Featured Reviews

Akshay Waghmare - PeerSpot reviewer
A stable DevSecOps product that gives fewer false positives
We use the product for DevSecOps.  The product gives a few false positives. We get 99 percent true positives.  Contrast Security Protect needs to improve integration.  I have been using the product for a year.  Contrast Security Protect is stable.  The solution is scalable. My company has ten…
Kv Rao - PeerSpot reviewer
Integrates pipelines smoothly and fortifies code against vulnerabilities
I use Veracode in multiple places including static code analysis, penetration testing, and dynamic code analysis. It is part of our pipeline and integrates well with Bitbucket and Git pipelines The ease of integration with Bitbucket pipelines and Git pipelines is vital for us. Veracode allows us…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product gives a few false positives. We get 99 percent true positives."
"Protect provides us with more in-depth visibility into ongoing attacks."
"The solution has excellent real-time capabilities."
"The capability to identify vulnerable code is the most valuable feature of Veracode."
"For use cases where our company buys a product with the source code, but only the final executables or the binaries, only Veracode is able to work on that type of tool."
"The benefits are quick discovery and understanding of software vulnerabilities that we are putting in our own code. By discovering them quickly enough, we can triage them and determine the best ways to remediate them and prevent them from happening in the future."
"With the pipeline scanner, it's easier for developers to scan their products, as they don't have to export anything from their computers. They can do everything with the command line on their computer."
"Veracode is a valuable tool in our secure SDLC process."
"The most valuable features include the total developer experience, along with regulator exposure and DevOps pipeline. It encompasses everything as an enterprise solution."
"Each time I raise a ticket regarding something, they are very quick about the responses and get connected instantly."
"It's straightforward, and it does not require a lot of time. It's a straightforward platform that you can use for performing scans or mitigating issues. It has a very good user interface. FAQs are also helpful in case you are not familiar with it."
 

Cons

"There's room for improvement in the initial setup."
"Contrast Security Protect needs to improve integration."
"Protect's reporting GUI is very basic. To get all statuses from the APIs, we needed to write our own KPI dashboard to provide reports."
"Improve Mobile Application Dynamic Scanning DAST - .ipa and .apk"
"The cost of the solution is a little bit expensive. Expensive in the sense that there was a hundred percent increase in cost from last year to this year, which is certainly not justified."
"There needs to be better API integration to the development team's pipeline, which is something that is missing and needs to be improved."
"We connected with Veracode's support a couple of times, and we got a different answer each time."
"I've seen slightly better static analysis tools from other companies when it comes to speed and ease of use."
"We have some constraints interacting with Veracode self-support. I'm not talking about their technical support. I'm talking about self-support. We sometimes have a hard time communicating with them."
"I am expecting some AI-related features in it. Also, if someone is using AI-generated code, Veracode should be able to detect that."
"Maybe the boards could be made easier to understand or easier to customize."
 

Pricing and Cost Advice

Information not available
"Veracode's price is reasonable."
"Veracode provides value for the cost, with no additional charges apart from the standard licensing fee."
"Costs are reasonable. No special infrastructure is required and the license model is good."
"No issues, the pricing seems reasonable."
"The pricing is fair. You get a lot out of the product."
"Veracode is affordable for large organizations, but its pricing may be out of reach for small and medium companies."
"The licensing and prices were upfront and clear. They stand behind everything that is said during the commercial phase and during the onboarding phase. Even the most irrelevant "that can be done" was delivered, no matter how important the request was."
"There is a fee to scale up the solution which I consider expensive."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
867,497 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
26%
Manufacturing Company
13%
Insurance Company
7%
Computer Software Company
7%
Financial Services Firm
16%
Computer Software Company
16%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business69
Midsize Enterprise43
Large Enterprise112
 

Questions from the Community

What do you like most about Contrast Security Protect?
The product gives a few false positives. We get 99 percent true positives.
What needs improvement with Contrast Security Protect?
Contrast Security Protect needs to improve integration.
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What do you like most about Veracode?
The SAST and DAST modules are great.
What is your experience regarding pricing and costs for Veracode?
The product’s price is a bit higher compared to other solutions. However, the tool provides good vulnerability and database features. It is worth the money.
 

Also Known As

Contrast Protect
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

Williams-Sonoma, Autodesk, HUAWEI, Chromeriver, RingCentral, Demandware.
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about Contrast Security Protect vs. Veracode and other solutions. Updated: September 2025.
867,497 professionals have used our research since 2012.