Veracode

Veracode is an application security testing and remediation platform covering SAST, SCA and DAST, with AI-assisted fixes. Veracode's pricing page, read directly, returned platform marketing rather than a price table, with only Request a Demo and Contact Us links, so treat it as contact sales. One review says none of its products, including Veracode Fix and Package Firewall, has a public price except Security Labs on AWS Marketplace. Third-party estimates run from roughly $15,000 a year for basic tiers and $100,000 or more for enterprise packages, up to about $50,000 to $300,000 a year per Vendr transaction data, and one estimate puts the Fix add-on at $10,000 to $30,000 a year. All of those are unofficial.

On AI, one source says Veracode Fix works only with findings from Veracode's own Pipeline Scan and Platform, and that Fix for SCA was announced in March 2026 and remains in early access. Package Firewall, from the Phylum acquisition, adds ML-powered malicious package detection for npm and PyPI, per another review. The review pages call out binary SAST, Phylum SCA and DAST as the core of the platform. I found nothing about ownership changes in 2026. Because Fix only works on Veracode findings, evaluate whether AI remediation lock-in matters to you.

Veracode suits enterprises that want long-established application security testing with remediation help. Compare Checkmarx, Aikido Security and Socket. Browse the Cybersecurity tools directory for more.

Application security testing

SAST, SCA, DAST.

AI-assisted code fixes

Veracode Fix.

Is pricing public?

No, request a demo.

What is Veracode Fix?

AI-assisted remediation.

What is Package Firewall?

Malicious package blocking for npm and PyPI.

Typical cost?

Estimates $15K-$300K a year.