vioscale
Comparison

Snyk vs Veracode

On the evidence we track, Snyk leads this comparison with a composite score of 72/100. Scores are only directly comparable because these tools share a category; the full breakdown and every source is below.

Snyk full profile →Veracode full profile →
Machine formatsJSONMarkdownGraphQLor send Accept: application/json
★Snyk72
Veracode59
Score
Vioscale score
Snyk72 / 100high · 76%updating
Veracode59 / 100low · 11%updating
Pricing
Free tier
Snyk✓
Veracode–
Model
Price level
Snykmid
Veracode–
Transparent
Snyk✓
Veracode–
Integrations
Count
Snyk109
Veracode–
Security
Disclosure policy
Snyk✓
Veracode–
Gdpr
Snyk✓
Veracode–
Iso27001
Snyk✓
Veracode–
Scorecard
Snyk5.2
Veracode–
Soc2
Snyk✓
Veracode–
Vulnerabilities
Reliability
Status page
Snyk✓
Veracode✓
Adoption
Dependent repos
Snyk10,449
Veracode–
Github stars
Snyk5,648
Veracode–
Package downloads weekly
Snyk768,717
Veracode–
Activity
Commits last 30d
Snyk100
Veracode–
Release
Cadence days
Snyk11
Veracode–
History
Snyk20 items
Veracode–
License
Spdx
SnykApache-2.0
Veracode–
Language
Primary
SnykTypeScript
Veracode–
Market
Availability

Capabilities

Feature-by-feature on the axes that matter for devsecops tools. “-” means undocumented, not absent.

Scan types
SAST (static analysis)
Snyk✓
Veracode✓
DAST (dynamic analysis)
Snyk✓
Veracode✓
SCA / dependency scanning
Snyk✓
Veracode✓
Secret scanning
Snyk✓
Veracode-
Container / image scanning
Snyk✓
Veracode✓
IaC misconfiguration scanning
Snyk✓
Veracode-
Governance
OSS licence compliance
Snyk✓
Veracode-
SBOM generation (SPDX/CycloneDX)
Snyk✓
Veracode-
Remediation
Automated fix / upgrade PRs
Snyk✓
Veracode✓
Prioritisation
Reachability / exploitability prioritisation
Snyk✓
Veracode-
Deployment
Hosting
SnykCloud + self-hosted
VeracodeCloud only
Integration
First-class CI / pipeline integration
Snyk✓
Veracode-
In-editor / IDE scanning
Snyk✓
Veracode-
Licensing
OSS engine available
Snyk✓
Veracode-

What each one is

The product in its own terms, so the numbers below have context.

Snyk

Leader

An integrated scanning and remediation platform that identifies vulnerabilities across application code, open-source dependencies, container images, and infrastructure configurations, with AI-powered analysis to accelerate detection and fix guidance.

Independently observed

Veracode

Veracode provides unified application security posture management with tools for detecting, analyzing, and remediating application vulnerabilities across the software development lifecycle.

Independently observed

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Snyk

Leader
from $25/moSubscriptionFree tier

From $25/developer/month. Free tier available; Enterprise requires custom quote.

  • FreeFree
    • Open source dependency scanning
    • Real-time code scanning
    • SCA, SAST, IaC, and container scanning
    • IDE, CLI, and source code manager integrations
  • Team$25/developer/month
    • All Free features
    • Increased test limits per product
    • Jira integration
    • License compliance
    • Transitive dependency analysis
    • +1 more
  • Ignite$1,260/developer/year
    • All Team features
    • Full platform capabilities
    • Custom security rules and risk-based prioritization
    • Real-time custom code scanning
    • Dev-first fix examples in IDE
    • +4 more
  • EnterpriseContact sales
    • All Ignite features
    • Zero-day risk prevention
    • Unified AppSec control and strategic security oversight
    • Full SDLC automation
as of verify ↗

Veracode

Pricing not documented yet.

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platforms
Web
Snyk✓
Veracode–
CLI
Snyk✓
Veracode–
Deployment
Cloud / SaaS
Snyk✓
Veracode–
Self-hosted
Snyk✓
Veracode–

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

Snyk

Leader
50 total
  • GitHub
  • GitLab
  • Bitbucket
  • Azure Repos
  • Jira
  • Jira Cloud
  • Slack
  • AWS CodePipeline
  • Azure Pipelines
  • GitHub Actions
  • Jenkins
  • CircleCI
  • TeamCity
  • Terraform Cloud
  • Kubernetes
  • Docker Hub
  • Amazon ECR
  • Azure ACR
  • Quay
  • JFrog Artifactory
  • Harbor
  • Nexus
  • IntelliJ
  • PyCharm
  • +26 more
Independently observed

Veracode

Not documented yet.

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.