# Prisma Cloud vs Veracode

**Leader by vioscaleAI score:** Veracode

| Attribute | Prisma Cloud | Veracode |
|---|---|---|
| **vioscaleAI score** | 53.3 (25% (low)) | 73 (52% (medium)) |
| deployment.options | `{"cloud":true,"hybrid":true,"on_prem":true}` | `{"cloud":true}` |
| description.long | Prisma Cloud provides comprehensive security for cloud-native applications and infrastructure. It delivers continuous visibility into cloud assets, enforces compliance against 75+ standards with automated remediation, and protects against threats through static analysis, dynamic detection, and real-time attack blocking. | A comprehensive platform for identifying, prioritizing, and fixing application security vulnerabilities across code, dependencies, containers, and infrastructure. It combines static and dynamic testing with AI-driven remediation to reduce security risk while maintaining developer velocity. |
| features.capabilities | `{"sca":true,"dast":true,"sast":true,"hosting":"cloud","ci_native":true,"iac_scanning":true,"reachability":true,"secret_scanning":true,"container_scanning":true}` | `{"sca":true,"dast":true,"sast":true,"hosting":"cloud","ci_native":true,"ide_plugin":true,"auto_fix_pr":true,"iac_scanning":true,"reachability":true,"container_scanning":true,"license_compliance":true}` |
| integrations.count | - | 25 |
| integrations.list | - | `[{"name":"GitHub","native":true,"category":"repository","direction":"inbound"},{"name":"GitLab","native":true,"category":"repository","direction":"inbound"},{"name":"AWS","native":true,"category":"cloud","direction":"inbound"},{"name":"Google Cloud","native":true,"category":"cloud","direction":"inbound"},{"name":"Microsoft Defender for Cloud","native":true,"category":"security","direction":"inbound"},{"name":"Snyk","native":true,"category":"security","direction":"inbound"},{"name":"Checkmarx","native":true,"category":"security","direction":"inbound"},{"name":"Contrast Security","native":true,"category":"security","direction":"inbound"},{"name":"Fortify OnDemand","native":true,"category":"security","direction":"inbound"},{"name":"Rapid7 InsightAppSec","native":true,"category":"security","direction":"inbound"},{"name":"Qualys","native":true,"category":"vulnerability","direction":"inbound"},{"name":"JFrog Xray","native":true,"category":"security","direction":"inbound"},{"name":"AWS Config","native":true,"category":"compliance","direction":"inbound"},{"name":"AWS Inspector","native":true,"category":"security","direction":"inbound"},{"name":"Prisma Cloud","native":true,"category":"security","direction":"inbound"},{"name":"Wiz","native":true,"category":"security","direction":"inbound"},{"name":"CrowdStrike","native":true,"category":"security","direction":"inbound"},{"name":"Orca","native":true,"category":"security","direction":"inbound"},{"name":"SecurityScorecard","native":true,"category":"security","direction":"inbound"},{"name":"Terraform Cloud","native":true,"category":"iac","direction":"inbound"}]` |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | - | `{"cli":true,"web":true}` |
| pricing | `{"type":"free","summary":"Free trial available","sourceUrl":"https://www.prismacloud.io","retrievedAt":"2026-09-04T11:12:05.499Z"}` | - |
| pricing.model | free | commercial |
| pricing.price_level | free | - |
| pricing.transparent | no | - |
| reliability.status_page | yes | yes |
| security.fedramp | - | yes |
| security.gdpr | - | yes |
| security.hipaa | - | yes |
| security.iso27001 | - | yes |
| security.pci | - | yes |
| security.soc2 | - | yes |
| security.trust_center | https://www.paloaltonetworks.com/network-security/security-subscriptions | https://www.veracode.com/security/ |

## Capabilities (DevSecOps Tools)

| Capability | Prisma Cloud | Veracode |
|---|:--:|:--:|
| **Scan types** |  |  |
| SAST (static analysis) | ✓ | ✓ |
| DAST (dynamic analysis) | ✓ | ✓ |
| SCA / dependency scanning | ✓ | ✓ |
| Secret scanning | ✓ | - |
| Container / image scanning | ✓ | ✓ |
| IaC misconfiguration scanning | ✓ | ✓ |
| **Governance** |  |  |
| OSS licence compliance | - | ✓ |
| SBOM generation (SPDX/CycloneDX) | - | - |
| **Remediation** |  |  |
| Automated fix / upgrade PRs | - | ✓ |
| **Prioritisation** |  |  |
| Reachability / exploitability prioritisation | ✓ | ✓ |
| **Deployment** |  |  |
| Hosting | Cloud only | Cloud only |
| **Integration** |  |  |
| First-class CI / pipeline integration | ✓ | ✓ |
| In-editor / IDE scanning | - | ✓ |
| **Licensing** |  |  |
| OSS engine available | - | - |

*Source: vioscaleAI. Generated 2026-10-16T19:14:38.634Z. "-" = undocumented, not absent.*