# Prisma Cloud vs Veracode

| Attribute | Prisma Cloud | Veracode |
|---|---|---|
| **Vioscale score** | 64.7 (12% (low)) | 58.7 (11% (low)) |
| deployment.options | `{"cloud":true}` | - |
| description.long | Prisma Cloud provides comprehensive security for cloud-native applications and infrastructure. It delivers continuous visibility into cloud assets, enforces compliance against 75+ standards with automated remediation, and protects against threats through static analysis, dynamic detection, and real-time attack blocking. | Veracode provides unified application security posture management with tools for detecting, analyzing, and remediating application vulnerabilities across the software development lifecycle. |
| features.capabilities | `{"sca":true,"dast":true,"sast":true,"hosting":"cloud","ci_native":true,"iac_scanning":true,"reachability":true,"secret_scanning":true,"container_scanning":true}` | `{"sca":true,"dast":true,"sast":true,"hosting":"cloud","auto_fix_pr":true,"container_scanning":true}` |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| pricing.model | commercial | commercial |
| reliability.status_page | yes | yes |

## Capabilities (DevSecOps Tools)

| Capability | Prisma Cloud | Veracode |
|---|:--:|:--:|
| **Scan types** |  |  |
| SAST (static analysis) | ✓ | ✓ |
| DAST (dynamic analysis) | ✓ | ✓ |
| SCA / dependency scanning | ✓ | ✓ |
| Secret scanning | ✓ | - |
| Container / image scanning | ✓ | ✓ |
| IaC misconfiguration scanning | ✓ | - |
| **Governance** |  |  |
| OSS licence compliance | - | - |
| SBOM generation (SPDX/CycloneDX) | - | - |
| **Remediation** |  |  |
| Automated fix / upgrade PRs | - | ✓ |
| **Prioritisation** |  |  |
| Reachability / exploitability prioritisation | ✓ | - |
| **Deployment** |  |  |
| Hosting | Cloud only | Cloud only |
| **Integration** |  |  |
| First-class CI / pipeline integration | ✓ | - |
| In-editor / IDE scanning | - | - |
| **Licensing** |  |  |
| OSS engine available | - | - |

*Source: Vioscale. Generated 2026-09-01T17:05:00.233Z. "-" = undocumented, not absent.*