CA-VERACODE
1.5.2024 14:51:32 CEST | Business Wire | Press release
Veracode, a global leader in application risk management, today announced platform innovations that set a new standard for developer-powered application security. New repo risk visibility and analysis from Longbow Security, powered by Veracode, speeds up remediation of application risk from code repositories to runtime images. The solution launches alongside Veracode Fix in the Integrated Development Environment (IDE) and Batch Fix to bridge the gap between development and security teams. These latest innovations help developers focus on the most critical tasks that drive value and differentiation.
“Developers today face significant competing pressures to innovate faster and perform more security checks on their code than ever before,” said Tim Jarrett, Group Head of Product Management at Veracode. “We are committed to a frictionless experience for developers and security operators and our latest product enhancements make the job of securing code simple and seamless.”
Bringing Developer & Security Teams Together: Repo Risk Visibility & Analysis
In April, Veracode acquired Longbow Security to help organizations effectively manage and reduce application risk across the growing attack surface. The integration of Longbow’s newest capability, repo risk visibility and analysis, bridges the gap between development and security teams with enhanced visibility from code repositories to cloud assets and runtime images. It also illuminates infrastructure-as-code and misconfiguration risk for cloud assets originating from repositories.
“Customers challenged us to apply our unique cloud risk and prioritization expertise from Longbow to problems they face managing upstream risk in their code repositories,” said Derek Maki, Vice President of Product Management at Veracode. “We responded with a solution that gives visibility into the relationship between source code weaknesses and runtime security posture. Simultaneously, development teams get a consolidated view of risk and huge time savings when it comes to prioritizing remediation, reducing code changes, and fixing issues fast.”
This new feature complements Veracode’s latest innovation for GitHub repo scanning, which enables developers to streamline activities like staging servers and environments so they don’t need to scan every time. This makes it easier for development and security teams to collaborate on secure coding and scanning as Veracode results are delivered to GitHub where developers can act immediately.
Security Debt Reduction: Veracode Fix in the IDE & Batch Fix
Research shows 92 percent of U.S.-based developers are already using artificial intelligence (AI) coding tools both in and outside of work, with generative AI helping software engineers write code 35-45 percent faster. At the same time, other research suggests code developed by AI contains the same percentage of security flaws as that generated by humans.
Veracode was the first company to deliver a solution that provides developers with AI-generated secure code fixes. Since launching Veracode Fix at RSA Conference last year, hundreds of customers have used the solution to reduce their backlog of security debt and risk. Ninety-two percent of CWEs (Common Weakness Enumeration) with a severity rating from medium to very high can be addressed through AI-generated code edits from Veracode Fix.
With the introduction of Veracode Fix in the IDE, developers can now fix flaws faster with AI-suggested remediation right in the IDE, without switching applications or researching alternative code options. Fixes can be made before code is pushed through the software development lifecycle, dramatically cutting the time and cost spent fixing flaws compared to retroactive remediation.
Batch Fix enables bulk AI-assisted remediation of flaws in source code across multiple flaws and files in one operation. This makes remediation of flaws an order of magnitude faster, aiding the reduction of security debt at scale. For example, developers can use it to fix a CWE that requires an easy-to-test resolution and run it across multiple source files at once.
Jarrett closed, “With these latest innovations, Veracode meets developers where they are—in the tools they use daily—to help them secure the code they create today, without compromising productivity. This vastly improves efficiency and velocity, fostering a culture of collaboration and trust between development and security teams.”
Repo Risk Visibility & Analysis, Veracode Fix in the IDE, and Batch Fix are available immediately. For more information, please visit the Veracode blog.
Visitors to RSA Conference can learn more about Veracode’s platform and these new features by visiting Veracode’s booth #2045 in the main hall.
About Veracode
Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-assisted remediation engine, the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deployment. Thousands of the world’s leading development and security teams use Veracode every second of every day to get accurate, actionable visibility of exploitable risk, achieve real-time vulnerability remediation, and reduce their security debt at scale. Veracode is a multi-award-winning company offering capabilities to secure the entire software development life cycle, including Veracode Fix, Static Analysis, Dynamic Analysis, Software Composition Analysis, Container Security, Application Security Posture Management, and Penetration Testing.
Learn more at www.veracode.com, on the Veracode blog, and on LinkedIn and Twitter.
Copyright © 2024 Veracode, Inc. All rights reserved. Veracode is a registered trademark of Veracode, Inc. in the United States and may be registered in certain other jurisdictions. All other product names, brands or logos belong to their respective holders. All other trademarks cited herein are property of their respective owners.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240501107223/en/
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Lehman Brothers Treasury Considers Sale and Final Wind-Down3.8.2026 15:30:00 CEST | Press release
Lehman Brothers Treasury Co. B.V. in liquidation (“LBT”) today, through its U.S. counsel Herbert Smith Freehills Kramer (USA) LLP, announced that LBT is considering a final wind-down of its estate. In connection therewith, LBT has retained Seaport Loan Products LLC as its exclusive placement agent in connection with the potential sale of LBT’s principal remaining asset – a $19.6 billion Class 4A allowed claim against Lehman Brothers Holdings Inc. (the “LBHI Claim”). LBT expects the sale to occur, if at all, in August 2026. To the extent the LBHI Claim is sold, LBT expects to make a final distribution to the holders of its existing notes and thereafter facilitate the cancellation of those notes and the final wind down of its estate in September 2026. The foregoing is subject to further consents and authorizations and LBT retains sole discretion to abandon or otherwise discontinue any sale process at any time. Accordingly, there can be no assurances that the sale process will be conducte
ClickHouse Launches ClickHouse Labs With Andy Pavlo as VP of Database Research3.8.2026 15:30:00 CEST | Press release
Renowned database researcher will lead a new group dedicated to advancing foundational database technology and sharing its work openly with the broader community ClickHouse today announced the launch of ClickHouse Labs, a new research group led by Andy Pavlo, one of the database industry’s most prominent researchers. Dr. Pavlo joins ClickHouse as Vice President of Database Research and will build a team dedicated to advancing the state of the art in database systems. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260803890510/en/ Andy Pavlo, VP of Database Research, ClickHouse Pavlo is an award-winning database researcher and professor at Carnegie Mellon University’s Computer Science Department. He is known throughout the database community for his work on autonomous databases, transaction processing, and large-scale data analytics. At ClickHouse, he will bring that expertise to some of the most ambitious and consequential c
EuroTeleSites Strengthens Operations One Year into Sitetracker Partnership3.8.2026 15:00:00 CEST | Press release
EuroTeleSites, one of Central and Eastern Europe's leading independent tower companies, today announced the results of its first year in partnership with Sitetracker, the leading global Asset Lifecycle Management platform. One year into the deployment, EuroTeleSites reports meaningful progress in its digital transformation, with measurable improvements in operational efficiency, cross-market transparency, and project coordination across its six-country footprint. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260727009809/en/ EuroTeleSites Strengthens Operations One Year into Sitetracker Partnership Driving Efficiency in a Complex, High-Investment Environment EuroTeleSites invests approximately 25% of its revenue into capital expenditures in 2026, funding the construction and upgrade of tower infrastructure across Central and Eastern European markets. Managing this level of scale and complexity demands robust digital support
Visa to Acquire BioCatch3.8.2026 14:30:00 CEST | Press release
BioCatch’s behavioral and device intelligence expertise expected to help detect scams, account takeovers and digital fraud before they happen Visa (NYSE: V) today announced it has signed a definitive agreement to acquire BioCatch, a leading provider of behavioral-first, multi-signal fraud intelligence, from funds advised by Permira and other shareholders for $2.4 billion in cash. The acquisition of BioCatch complements Visa’s existing cyber, fraud, risk and security solutions and is expected to help clients better protect themselves and their customers from the growing threat of account takeovers, scams, money mules and application fraud. Since its inception, BioCatch has developed innovative AI and machine learning-based solutions that analyze thousands of application, behavioral, device, and network signals—such as keystrokes, touch gestures, and device handling—to detect fraud and distinguish legitimate users from fraudsters in real time. BioCatch protects 1.8 billion devices and 76
U.S. Bank Investment Services enhances investor and client onboarding experience for alternative investments3.8.2026 14:16:00 CEST | Press release
U.S. Bank Investment Services today announced it has gone live with a new client lifecycle management (CLM) platform, providing a comprehensive onboarding solution for alternative investment clients and the investors in their funds. The implementation is a key milestone in Investment Services’ multi-phased technology transformation strategy, aimed at modernizing processes, workflows and reporting across the private funds space. U.S. Bank leverages CLM provider Fenergo and its Fen-X platform. Fen-X automates many of the manual processes traditionally associated with underlying investors and direct client relationships and accelerates account setup while maintaining regulatory requirements. The enhanced onboarding experience provides investors and clients with more transparency throughout the process and enables integration with other solutions providers involved in the investor journey, such as screening and tax reporting. The investor experience has been further enhanced with an invest
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom