Mirantis Container Cloud vs Veracode comparison

Why PeerSpot?

Mirantis and Veracode are both solutions in the Container Security category. Mirantis is ranked #33 with an average rating of 8.0, while Veracode is ranked #14 with an average rating of 7.5. Mirantis holds a 0.6% mindshare in Container Security, compared to Veracode’s 2.7% mindshare. Additionally, 94% of Mirantis users are willing to recommend the solution, compared to 89% of Veracode users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Veracode and Mirantis Container Cloud compete in technology management solutions. Users are happier with Veracode's pricing and deployment, while Mirantis Container Cloud offers superior features.

Features: Veracode's valuable features include thorough security testing, comprehensive vulnerability reporting, and detailed analysis. Mirantis Container Cloud stands out in container orchestration, scalability, and tool integration, offering more advanced features.

Room for Improvement: Veracode needs faster scanning times, a more intuitive reporting mechanism, and improved dashboard functionality. Mirantis Container Cloud requires better documentation, a more user-friendly setup process, and enhanced troubleshooting guides.

Ease of Deployment and Customer Service: Veracode is known for its straightforward deployment and responsive customer service. Mirantis Container Cloud, while powerful, is more complex to deploy but also offers robust customer support.

Pricing and ROI: Veracode offers competitive pricing with a favorable ROI, especially useful for security testing. Mirantis Container Cloud, though pricier, delivers significant ROI due to its advanced features and scalability.

To learn more, read our detailed Mirantis Container Cloud vs. Veracode Report (Updated: September 2026).

Buyer's Guide

Mirantis Container Cloud vs. Veracode

September 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of November 2026, in the Container Security category, the mindshare of Qualys TotalCloud is 1.8%, up from 1.1% compared to the previous year. The mindshare of Mirantis Container Cloud is 0.6%, up from 0.2% compared to the previous year. The mindshare of Veracode is 2.7%, down from 3.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	1.8%
Veracode	2.7%
Mirantis Container Cloud	0.6%
Other	94.9%

Container Security

Featured Reviews

reviewer2859021

Sr Security Engineer at a tech vendor with 5,001-10,000 employees

Risk-based triage has transformed container security and now prioritizes high-impact threats

The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.

Read full review

Hitesh D

Senior Manager at pnb metlife

High availability and self-healing mechanisms ensure seamless production builds

The most useful feature of Mirantis Container Cloud for our container management is Kubernetes. It provides a cluster, high availability, and a self-healing mechanism. Its multi-cluster management capability enhances our operational efficiency as it is easy to use, and every deployment is from the CI/CD, which automatically builds and deploys without human interference, reducing our deployment time to a few seconds.

Read full review

Yash Shende

Software Development Engineer II at Rocket Software

Monthly scans have provided baseline security but still miss critical vulnerabilities

Veracode can improve to stand in this market. They do not have to do much; they just need to improve their UI experience and add more documentation within the application rather than just creating documentation pages on different websites. They need to ensure their web application guides whoever uses it. Since whoever uses Veracode must be a technical person, they just need to guide them to the actual points. They can also improve their security capabilities by adding more filters to identify what vulnerabilities their application has. They need to improve their scanning engine to scan for more critical defects. Also, the integration part can be enhanced by adding features to integrate with a CLI, such as introducing a CLI version or a Jenkins plugin. If such features exist, they should show it as a pop-up, signaling that they have a new feature. Currently, it feels Veracode from two years ago is still the same, so that is something Veracode needs to improve. They can improve the security part. Some of the severe security issues were never caught by Veracode in the reports. In fact, I have never seen any high or critical severity issues pop up in my Veracode report. That is one thing they can improve on their scanning ability to catch high severity issues. Next is integration; Veracode does not provide any tools to integrate with Jenkins or CLI. I do not even know if there is any CLI for Veracode that I can use to automate in my pipeline. The last thing is the UI interface that they have, as it is a bit confusing. I remember we did not have the capability to handle authentications of our internal application. We had to write Selenium code using a Selenium IDE. To write a Selenium script for a Veracode scan, you have to download a Selenium IDE, record it, and then paste that file into Veracode. I can see that Selenium IDE is already decommissioned, so it is no longer used by anyone. Still, we have to use it because Veracode only supports that kind of file for Selenium to automate. They can add more ways to authenticate our application using normal JavaScript or Python or Shell script. I feel these are the four main points. They can document it more by adding tooltips into the application that explain why a parameter is required and what other options are available. For the same example with the Selenium script, they can add a link to their documentation that explains what other kinds of scripts can be written for authentication. I feel they can also make the UI more intuitive so that whoever uses it can guide themselves, as whoever uses Veracode is already a technical person.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"I found the initial setup user-friendly."

"One of Qualys' best features is its categorization, which allows us to see the types of assets, their security postures, and the AI-powered version of the tool."

"The scalability is good as well. I would rate it ten out of ten."

"The biggest strengths of Qualys TotalCloud are that it is pretty good at cloud visibility, has easy integration, and also has multi-cloud compatibility."

"I depend heavily on the reports that I have from this tool."

"I appreciate Qualys TotalCloud's ability to onboard any type of device with ease, including containers."

"Generally, Qualys is very good at detections, whether on cloud or on-prem, and the agent allows deployment on both infrastructures, providing continuous monitoring of your assets, which is a key selling point for us."

"With TotalCloud, we can scan through the API. If we are not able to deploy cloud agents on the machine, we can use the API."

More Qualys TotalCloud pros

"This solution has cut down on our development time and allows us to spin off new instances for inner development, testing, productions, and security testing."

"The solution containerizes software."

"Main products are portable."

"It is a compact, complete solution that performs well."

"The most valuable aspect is the excellent support. In addition, the billing system is really easy to understand."

"Docker is very helpful for taking the code from development and applying it to the end user."

"If we compare legacy application support to Docker, it's a superior product."

"The initial setup was really easy and the deployment was fast and straightforward."

More Mirantis Container Cloud pros

"Code scanning is the most valuable feature."

"In terms of security best practices and guidance to our dev teams, Veracode has been fantastic."

"All three of Veracode's offerings are valuable: SCA, SAST, and DAST. It helps identify security loopholes right in the development phase, allowing developers to get feedback around what kind of vulnerabilities exist as soon as they check in the code or even before that in their IDE."

"One benefit is that we have automated the scanning process."

"I appreciate Veracode's SAST and SCA features, which help to find open-source vulnerabilities. I'd estimate it's about 98% accurate, though some false positives occasionally exist. Our team has been using it for a long time."

"The integration capabilities with our existing development tools are very good."

"It allows us to prove our security levels to vendors, and additionally helps us with our HIPAA security policies."

"We have found the static analysis to be useful in Veracode Static Analysis. However, we are in the process of testing."

More Veracode pros

Cons

"Enhancing clarity regarding its compliance capabilities would be beneficial, as the current scope is limited in geographic coverage."

"Although TotalCloud is a helpful tool, some of its advanced features are still under development."

"In my opinion, what can be improved in Qualys TotalCloud includes pricing and container scanning."

"In terms of improvement, remediation still belongs to the cloud team, which is one of the issues we faced with Qualys TotalCloud."

"The patching process with Qualys Patch Management, which is part of TotalCloud, does not cover installing certain prerequisites on the servers or workstations. This shortcoming means we must rely on SCCM when any service stack updates or additional prerequisites are needed."

"I would appreciate additional integration options to connect Qualys TotalCloud with our other vulnerability management tools."

"TotalCloud could improve the classification of vulnerabilities. Specifically, it could enhance the categorization of what aspects fall under patches resolved by OS or software updates and what pertains to configuration adjustments."

"TotalCloud could improve its scanning of niche devices like Wi-Fi dongles and USB modems because they are often untested. It covers everything else, like laptops, mobile devices, and Bluetooth IoT devices. They can improve on the small IoT devices because hackers and testers use these."

More Qualys TotalCloud cons

"Sometimes the basic support is a bit difficult if you have a firewall and cloud servers behind the firewall and then try to implement the backup solution, it can be a bit difficult to do by yourself."

"There are a couple of things. Firstly, the vaultStore database within Container isn't as efficient as a standalone Container vault. This needs improvement."

"More integrations with other platforms would be beneficial."

"You need to have system knowledge to deploy the product. It should be improved."

"It would be very nice to have a GUI that can be used by any administrator, and not just people who have experience with Docker."

"I find Docker easier to use, but I gave it to an inexperienced developer and it took him a lot of time to understand."

"Mirantis Container Cloud needs to improve its documentation."

"I would love to see if more supported applications could be used under Docker."

More Mirantis Container Cloud cons

"Security can always be improved."

"There are many times when their product goes to check my code and it dies, and I don't know why. I've contacted support and they're not really helpful with this particular problem. I go to the logs and I look at what I can but I can't tell why the check process has essentially just died in the middle of checking."

"Veracode Static Analysis lacks penetration testing, so that's a concern. The tool is also unable to scan when it's a C or C++ model, so that's another area for improvement."

"While Veracode is way ahead of its competitors on Gartner Magic Quadrant, it's a bit more expensive than Fortify. It's a good solution for the cost, but if we had a high budget, we would go with Checkmarx, which is much better than Veracode."

"Veracode isn't important to the organization's shift-left security strategy itself. It's a tool."

"Veracode could be improved in terms of the UI platform as it could be more seamless, and if they allow different sessions in different browsers at the same time or in different tabs that would help tremendously."

"Its cost and the long scanning times for large applications are the areas for improvement."

"I would like to see the following: Correction of the regularly received false positives, options to manage comments and mitigations, and better UI functionality."

More Veracode cons

Pricing and Cost Advice

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"The cost is high, but it meets our organizational needs."

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

More Qualys TotalCloud pricing and cost advice

"With open source, you can use Mirantis completely free."

"The community edition does not require a license and is completely free."

"Docker is a free solution."

"The product is not expensive."

"This solution is free."

"Mirantis Container Cloud is free. However, there are features for which you need to pay."

"The pricing and licensing really depends on what your needs are. You could be paying $100 a month to $100,000. It depends on the needs you have from the solution, and the agreement you make."

"I rate the product price an eight on a scale of one to ten, where one means low price and ten means high price."

More Mirantis Container Cloud pricing and cost advice

"Aside from the standard licensing fees, we also have to pay for a competent Success Manager."

"I don't have firsthand knowledge of Veracode pricing, but based on client feedback, it seems to be expensive with additional fees for certain features."

"I found Veracode very expensive, though I'm not the person paying for it. I was surprised to find out how much the subscription costs and that the executive board approved it, but it was a no-brainer because now my company has better security scans."

"The pricing is pretty high."

"I think licensing needs to be changed or updated so that it works with adjustments. Pricing is expensive compared to the amount of scanning we perform."

"As compared to others, it is a costly solution. It is overpriced, and many organizations with a limited budget cannot afford it. That is why they are going for other tools, but those tools are not that effective. Veracode is better in terms of quality. If you want good service, you have to pay for it."

"Its pricing is fair."

"It's very expensive, especially when you are a very small organization. If you're using Veracode at an individual level, for example, you're a developer or you run agents, the pricing might not affect you, but if you're using it at a company level to troubleshoot security issues, the pricing is not quite favorable. It may affect ROI."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

18%

Outsourcing Company

11%

Manufacturing Company

11%

Financial Services Firm

10%

Construction Company

25%

Financial Services Firm

10%

Manufacturing Company

Comms Service Provider

Financial Services Firm

15%

Manufacturing Company

12%

Outsourcing Company

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	11
Large Enterprise	38

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	3
Large Enterprise	17

By reviewers
Company Size	Count
Small Business	70
Midsize Enterprise	46
Large Enterprise	114

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...

See all answers

What needs improvement with Qualys TotalCloud?

I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...

See all answers

What is your primary use case for Qualys TotalCloud?

My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...

See all answers

What is your experience regarding pricing and costs for Mirantis Container Cloud?

Regarding the cost, Mirantis Container Cloud is cheaper than other solutions like Red Hat. The license costs around 1...

See all answers

What needs improvement with Mirantis Container Cloud?

Mirantis Container Cloud should have AI integration tools, which are not available right now. These tools should assi...

See all answers

What is your primary use case for Mirantis Container Cloud?

We are using Mirantis Container Cloud ( /products/mirantis-container-cloud-reviews ) for production builds. It is int...

See all answers

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. Son...

See all answers

What is the biggest difference between Veracode and Checkmarx?

According to my experience of using both the tools in different organizations Veracode is a Cloud-native, managed Ap...

See all answers

What is your experience regarding pricing and costs for Veracode Static Analysis?

My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.

See all answers

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 7% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Orca Security vs Qualys TotalCloud

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

NGINX App Protect vs Mirantis Container Cloud

Compared 15% of the time

Prisma Cloud by Palo Alto Networks vs Mirantis Container Cloud

Compared 12% of the time

Canonical LXD vs Mirantis Container Cloud

Compared 9% of the time

Robin Systems vs Mirantis Container Cloud

Compared 8% of the time

SUSE NeuVector vs Mirantis Container Cloud

Compared 6% of the time

More Mirantis Container Cloud Competitors

Checkmarx One vs Veracode

Compared 5% of the time

SonarQube vs Veracode

Compared 5% of the time

HCL AppScan vs Veracode

Compared 3% of the time

GitLab vs Veracode

Compared 2% of the time

Snyk vs Veracode

Compared 2% of the time

More Veracode Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

October 2026

Download Qualys TotalCloud product report

Buyer's Guide

Mirantis Container Cloud

October 2026

Download Mirantis Container Cloud product report

Buyer's Guide

Veracode

October 2026

Download Veracode product report

Also Known As

Qualys TotalCloud with FlexScan

Docker Enterprise

Crashtest Security , Veracode Detect

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Mirantis Container Cloud provides rapid deployment and scalability with easy-to-use systems. It is designed for efficient cloud management through automation and robust Kubernetes integration, aiding various industries in effective container management.

Mirantis Container Cloud delivers a comprehensive platform for managing application architectures, electronic commerce, and cybersecurity with seamless multi-cluster management. It integrates real-time vulnerability scanning and centralized microservices configuration. Significantly enhancing cloud performance, it simplifies workflows for businesses by ensuring straightforward billing and identity provider integration. While known for ease of use across multi-cloud environments, it continues to evolve in GUI enhancements and better legacy system integration. Improved documentation and AI integration tools further expand its capabilities.

What are Mirantis Container Cloud's key features?

Rapid Deployment: Quick and efficient setup.
User-Friendly Interface: Simplifies cloud management.
Scalability: Supports growing business needs seamlessly.
Multi-Cluster Management: Enhances operational efficiency.
Automation: Streamlines application workflows.

What benefits and ROI should users expect?

Improved Efficiency: Reduces operational complexities.
Enhanced Security: Protects sensitive data effectively.
Cost Management: Provides a clear and straightforward billing system.
Expanded Multi-Cloud Support: Increases flexibility and agility.

Mirantis Container Cloud is instrumental in various industries like e-commerce and cybersecurity by enabling containerization for streamlined operations. It supports hybrid cloud setups and facilitates AI-driven solutions, offering a reliable framework for managing deployment environments and production builds.

Mirantis

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Veracode

Sample Customers

Information Not Available

illumina, Groupon, PayPal, ebay, ING, New Relic

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.

Buyer's Guide

Mirantis Container Cloud vs. Veracode

September 2026

Free Report: Mirantis Container Cloud vs. Veracode

Find out what your peers are saying about Mirantis Container Cloud vs. Veracode and other solutions. Updated: September 2026.

DOWNLOAD NOW

920,769 professionals have used our research since 2012.

See our Mirantis Container Cloud vs. Veracode report.

See our list of best Container Security vendors.

We monitor all Container Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.