Veracode Releases Platform Enhancements as Software Supply Chain Attacks Surge
28.1.2026 13:50:00 CET | Business Wire | Press release
New Preventive Controls and Developer Integrations Powered 2025 Innovation
Veracode, the global leader in application risk management, today announced significant platform innovations introduced through the second half of 2025. Headlining the release is Package Firewall, an industry-leading preventive control for software supply chains, advancing the company’s mission to help organizations run secure software from code to cloud. With supply chain-related third-party breaches doubling year over year— from 15 to 30 percent according to the Verizon 2025 Data Breach Investigations Report— the need to strengthen security across the software ecosystem has never been greater.
“The growing attack surface has created an unprecedented level of complexity for security and development teams,” said Tim Jarrett, Vice President of Product at Veracode. “The latest enhancements to our platform empower organizations to stop third-party risk from ever entering their software code, providing them with a prevention-first approach.”
Package Firewall Enhancement: Preventing Supply Chain Attacks at the Source
Package Firewall, originally launched in June 2025, provides organizations with preventive control over their software supply chains by blocking malicious and risky packages before they enter the development environment. While traditional Software Composition Analysis (SCA) tools identify vulnerabilities in packages that are already in use, Veracode Package Firewall stops threats at the point of ingestion.
The solution now integrates with Azure Artifacts and deploys in seconds with integrations into package managers and repositories, like NPM, PyPI, Maven, Nexus, and Artifactory. It also supports custom policies that enable organizations to enforce security standards while maintaining developer productivity. Organizations can configure policies based on package risk profiles, vulnerability thresholds, and specific security requirements.
Expanded Platform Capabilities and Developer Experience
Veracode continued to expand and enhance its platform capabilities and developer experience throughout the year, with each release improving detection accuracy. Dynamic Application Security Testing (DAST) Essentials gained manual application linking, enabling policy evaluation and consolidated reporting. Software Composition Analysis (SCA) was upgraded with intelligent policies that only fail builds when fixes are available for vulnerable components, reducing developer friction. Static Analysis support was added for cutting-edge frameworks, including .NET Semantic Kernel, Python frameworks like AWS Glue and FastAPI, Java JDK 25 (LTS), and Node.js 22.x.
The platform also saw significant updates to developer integrations for Visual Studio, JetBrains, Azure DevOps, and GitHub, alongside expansions to Veracode Security Labs, with training modules in container security content and the latest OWASP Top 10.
Enterprise-Grade Authentication for Developer Tools
The most recent platform update saw Veracode introduce the advanced enterprise-grade security required by modern organizations. The company added more thorough platform integration and deeper role-based access control to Veracode Risk Manager (VRM), and OAuth-based single sign-on (SSO) authentication across its entire Integrated Development Environment (IDE) plugin portfolio, including Visual Studio Code, Visual Studio, Eclipse, and JetBrains platforms. The integration eliminates Application Programming Interface (API) key management and delivers secure, enterprise-grade authentication with centralized access control.
Jarrett closed, “Our mission is to empower organizations to enhance their security posture, bridge critical skills gaps, and accelerate remediation—all within a unified, integrated platform. By listening closely to our customers, we continuously evolved Veracode’s platform in 2025 to meet their needs, enabling them to drive faster, more secure DevSecOps practices.”
To learn more about Veracode’s products and platform enhancements, visit the website.
About Veracode
Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-assisted remediation engine, the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deployment. Thousands of the world’s leading development and security teams use Veracode every second of every day to get accurate, actionable visibility of exploitable risk, achieve real-time vulnerability remediation, and reduce their security debt at scale. Veracode is a multi-award-winning company offering capabilities to secure the entire software development life cycle, including Veracode Fix, Static Analysis, Dynamic Analysis, Software Composition Analysis, Container Security, Application Security Posture Management, Malicious Package Detection, Package Firewall, and Penetration Testing.
Learn more at www.veracode.com, on the Veracode blog, and on LinkedIn and X.
Copyright © 2025 Veracode, Inc. All rights reserved. Veracode is a registered trademark of Veracode, Inc. in the United States and may be registered in certain other jurisdictions. All other product names, brands, or logos belong to their respective holders. All other trademarks cited herein are property of their respective owners.
View source version on businesswire.com: https://www.businesswire.com/news/home/20260128773416/en/
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Daiichi Sankyo Appoints Markus Kosch to Lead Europe Business as Part of New Commercialization Organization24.8.2026 10:00:00 CEST | Press release
Daiichi Sankyo (TSE: 4568) today announced the appointment of Markus Kosch, MD, as Head of Europe Business, effective April 1, 2027. In this role, he will lead the company's European business within the new globally integrated Commercialization Unit and serve as General Manager of Daiichi Sankyo Europe GmbH, with legal responsibility for the company in Europe. The appointment reflects the next phase of growth of Daiichi Sankyo under its Five-Year Business Plan and the establishment of a new Commercialization Unit. Within this new structure, Markus Kosch will bring together the Oncology and Specialty businesses in Europe under one integrated leadership model to help bring innovative medicines to more patients across the region. For the past five years, Markus Kosch has led the Daiichi Sankyo Oncology Business Division in Europe and Canada, overseeing a period of significant growth and preparing the organization for an increasingly expanding oncology portfolio. Prior to joining Daiichi S
European Commission Approves DAYBU® (trofinetide) as the First and Only Treatment for Neurobehavioral Symptoms of Rett Syndrome in the European Union24.8.2026 09:01:00 CEST | Press release
Acadia Pharmaceuticals Inc. (Nasdaq: ACAD) today announced that the European Commission (EC) has granted marketing authorization for DAYBU (trofinetide) for the treatment of neurobehavioral symptoms of Rett syndrome in adults and pediatric patients aged five years and older, making it the first and only treatment approved for Rett syndrome in the European Union (EU). “The approval of DAYBU marks a significant milestone for the Rett syndrome community in the EU and advances our mission to bring this innovative treatment to patients and families who have long faced a profound unmet medical need,” said Catherine Owen Adams, Acadia’s Chief Executive Officer. “For people living with Rett syndrome, a devastating rare neurodevelopmental disorder, there have been no approved treatment options in the EU. We are proud to make DAYBU available and look forward to supporting patients, caregivers, and healthcare providers gain access to treatment." The DAYBU marketing authorization in the EU is prim
ORZEYFUL (oveporexton) Approved in Japan as the First and Only Medicine to Treat the Underlying Cause of Narcolepsy Type 124.8.2026 08:36:00 CEST | Press release
Discovered by Takeda in Japan, ORZEYFUL has the Potential to Redefine Care Beyond Individual Symptom Management for Adults Living with Narcolepsy Type 1 (NT1) Landmark Phase 3 Studies Demonstrated Significant and Meaningful Improvements Across the Full Range of NT1 Symptoms Evaluated in Clinical Trials Compared to Placebo Milestone Marks Third Major Regulatory Approval Secured for ORZEYFUL Around the World Takeda (TOKYO:4502/NYSE:TAK) announced that the Japanese Ministry of Health, Labour and Welfare (MHLW) approved the use of ORZEYFUL (oveporexton) for the treatment of narcolepsy type 1 (NT1, narcolepsy with cataplexy) in adults. ORZEYFUL is a first-in-class oral orexin receptor 2 (OX2R) agonist and the only medicine indicated in Japan to treat the disease holistically rather than individual symptoms. The discovery of this new class of medicine originated in Takeda's laboratories in Japan. Takeda is proceeding with launch preparations and expects to make ORZEYFUL available as quickly
Fasset Hits $1B Valuation as SBI Group Leads $68M Series C to Scale AI-Powered Stablecoin Neobanking24.8.2026 08:03:00 CEST | Press release
Round led by SBI Group follows $51 million Series B raise in May 2026, marking ascent as one of the fastest-growing neobanking platforms. Capital will expand Own Network and deepen AI across stablecoin settlement, tokenization, and corridor banking. Fasset now processes more than $40 billion in annualized transaction volume, serving 3 million+ wallets and more than 1,000 enterprises across 125 countries. Fasset, the AI-powered stablecoin neobanking platform, today announced it has raised $68 million in Series C funding at a $1 billion valuation. The financing was led by SBI Group and follows Fasset’s $51 million Series B earlier this year, which brought Speedinvest onto the cap table alongside a group of strategic investors. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260823503947/en/ Mohammad Raafi Hossain, Co-Founder and CEO, Fasset The new capital will support the expansion of Own Network, Fasset’s regulated financial
Zanders Expands DACH Region with New Office in Vienna, Austria24.8.2026 07:11:00 CEST | Press release
Zanders, the global treasury, risk, and technology consultancy, today announced a significant expansion of its DACH region with the opening of a new office in Vienna. The move builds on Zanders' continued growth across Germany, Austria, and Switzerland, and marks another step in the firm's strategy of deepening its presence in the markets where client demand for specialized treasury, risk, and corporate finance advisory is growing fastest. DACH has been one of Zanders' priority regions for several years, with the firm steadily expanding its team and client base across Germany and Switzerland. Austria represents a natural next step in that growth: in conversations with clients in the market, Zanders has seen growing interest in treasury transformation and financing support, as companies work through interest rate volatility, refinancing needs, and a broader shift toward more digitized, centralized treasury operations. The new Vienna office allows Zanders to be closer to clients' operati
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom