Veracode

What the company sells

Veracode sells an application security platform covering static and dynamic testing, software composition analysis, and container and infrastructure-as-code scanning. Thoma Bravo completed its acquisition of Veracode, then owned by Broadcom, in an all-cash transaction in January 2019.

Categories

• Static application security testing (primary category)
• Dynamic application security testing
• Software composition analysis
• Software supply chain security

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Owned by Thoma Bravo since 2019

Website

veracode.com

Products and services

• SAST

  Analyzes source code for security flaws early in the development process.

• DAST

  Identifies runtime vulnerabilities in web applications and APIs by sending simulated attacks.

• SCA

  Scans open-source components for vulnerabilities, tracks license risk, and provides fixes.

• Container/IaC

  Scans containers and infrastructure-as-code files for vulnerabilities, misconfigurations, and embedded secrets.

Sources

1. VeracodeUndated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. Thoma BravoPublished January 2, 2019 · Tier A: the company, a regulator or a filing

Recorded September 27, 2026 from the sources above. Descriptions are in our own words; we do not rank or recommend vendors, and no vendor pays to be listed or to change what we write. Disclosure: until the publisher confirms it has no business relationship with this company, treat one as possible (how the network works). Spot a factual error? Request a correction.