Comparison

Prisma Cloud vs Veracode

No leader: the top candidate Prisma Cloud has only 0.12 confidence (low), below the 0.35 needed to declare a winner. The attribute-by-attribute breakdown below, with a source and date on every value, is the honest way to compare them.

Machine formatsJSONMarkdownGraphQLor send Accept: application/json
Prisma Cloud65
Veracode59
Score
Vioscale score
Prisma Cloud65 / 100low · 12%updating
Veracode59 / 100low · 11%updating
Pricing
Model
Prisma Cloudcommercial
Veracodecommercial
Reliability
Status page
Prisma Cloud
Veracode
Market
Availability
Veracode

Capabilities

Feature-by-feature on the axes that matter for devsecops tools. “-” means undocumented, not absent.

Scan types
SAST (static analysis)
Prisma Cloud
Veracode
DAST (dynamic analysis)
Prisma Cloud
Veracode
SCA / dependency scanning
Prisma Cloud
Veracode
Secret scanning
Prisma Cloud
Veracode-
Container / image scanning
Prisma Cloud
Veracode
IaC misconfiguration scanning
Prisma Cloud
Veracode-
Governance
OSS licence compliance
Prisma Cloud-
Veracode-
SBOM generation (SPDX/CycloneDX)
Prisma Cloud-
Veracode-
Remediation
Automated fix / upgrade PRs
Prisma Cloud-
Veracode
Prioritisation
Reachability / exploitability prioritisation
Prisma Cloud
Veracode-
Deployment
Hosting
Prisma CloudCloud only
VeracodeCloud only
Integration
First-class CI / pipeline integration
Prisma Cloud
Veracode-
In-editor / IDE scanning
Prisma Cloud-
Veracode-
Licensing
OSS engine available
Prisma Cloud-
Veracode-

What each one is

The product in its own terms, so the numbers below have context.

Prisma Cloud

Prisma Cloud provides comprehensive security for cloud-native applications and infrastructure. It delivers continuous visibility into cloud assets, enforces compliance against 75+ standards with automated remediation, and protects against threats through static analysis, dynamic detection, and real-time attack blocking.

Independently observed

Veracode

Veracode provides unified application security posture management with tools for detecting, analyzing, and remediating application vulnerabilities across the software development lifecycle.

Independently observed

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Deployment
Cloud / SaaS
Prisma Cloud
Veracode

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.