Softprom Solutions MapVeracode through Softprom
Distributor
Veracode scans source code and compiled binaries, which matters when the thing to be tested is a build artefact and nobody has the source. Coverage: static analysis mapped to CWE; dynamic testing against running applications and APIs, including ones behind the firewall; open-source dependency and licence checking; container and infrastructure-as-code scanning; and human penetration testing delivered through the same platform. Either side of the scanning sit a proxy that refuses malicious or non-compliant open-source packages before a developer can pull one, and AI-generated patches applied from the command line or the editor.
Countries where Veracode is available through Softprom
- Armenia
- Austria
- Azerbaijan
- Bulgaria
- Georgia
- Germany
- Greece
- Hungary
- Kazakhstan
- Moldova
- Poland
- Romania
- Ukraine
- Uzbekistan
Veracode solutions in the Softprom portfolio
| Solution | Category |
|---|---|
| Dynamic Analysis (DAST)DAST scanning that probes running web applications and APIs, including assets behind the firewall. | Application Security TestingApplication & API Security |
| Static Analysis (SAST)SAST scanning of application source code and compiled binaries, with findings mapped to CWE. | Application Security TestingApplication & API Security |
| Veracode Container and IaC SecurityScans container images and IaC files for vulnerabilities, secrets and misconfigurations from the CLI or CI/CD. | Application Security TestingApplication & API Security |
| Veracode Fix (AI-powered Remediation)AI-generated code patches for Static Analysis findings, applied from the CLI, IDE or a GitHub action. | Application Security TestingApplication & API Security |
| Veracode Package FirewallBlocks malicious, vulnerable, or policy-violating open-source packages before developers can download them. | Software Supply Chain SecurityApplication & API Security |
| Veracode Penetration Testing as a ServiceHuman-led penetration tests of web, mobile, and API targets with findings delivered through the scanning platform. | Penetration Testing & PTaaSExposure & Vulnerability Management |
| Veracode Risk Manager (ASPM)ASPM that ingests findings from other security scanners, deduplicates them and assigns owners for remediation. | Application Security Posture Management (ASPM)Application & API Security |
| Veracode Software Composition Analysis (SCA)SCA scanning of open-source dependencies for known vulnerabilities, malicious packages, and license risk. | Application Security TestingApplication & API Security |
| Veracode Software Supply Chain IntelligenceThreat feed that monitors open-source registries and alerts on newly published malicious packages and campaigns. | Software Supply Chain SecurityApplication & API Security |