

Parasoft SOAtest and Veracode compete in software testing and application security. Veracode gains an advantage for its superior security features.
Features: Parasoft SOAtest offers automated API testing, service virtualization, and comprehensive testing capabilities. Veracode is known for its thorough security testing, extensive security coverage, and effective vulnerability scanning.
Room for Improvement: Parasoft SOAtest can enhance tool integration, scalability, and user interface. Veracode can improve its setup process, reporting features, and user onboarding.
Ease of Deployment and Customer Service: Parasoft SOAtest is straightforward to deploy with excellent customer support. Veracode has comprehensive remote support but a more complex initial deployment.
Pricing and ROI: Parasoft SOAtest offers competitive pricing with significant ROI. Veracode is more expensive but offers strong ROI through its advanced security features.
We found Parasoft SOAtest to be quick in building up test patterns, allowing us to create complex tests efficiently.
Tasks that previously took four or five minutes can now be completed in 20 to 30 seconds with the help of the tool.
The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.
Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.
We did see a return on investment with Veracode, as we segregated our remediation efforts, which reduced our time to delivery as well as the number of engineers needed to help us in delivering a secure solution.
Access to the engineering team is crucial for faster feedback on the product fix process.
I have communicated with the technical support of Veracode a couple of times, and this was a really great experience because these professionals know their material.
They share detailed information via email, including screenshots or further clarification about the issue.
Cloud solutions are easier to scale than on-premise solutions.
It has a good capacity to scale effectively.
Implementing these features into our normal CI/CD was good, so I can say that scalability is really good.
In particular use cases with numerous steps, it experiences crashes.
If the Veracode server is down, we experience many issues during the scan.
I have observed that it is not that reliable in terms of security because Veracode was not able to find some security threats in our application that existed since the product was developed.
It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.
It did not support enough of the protocols or cryptography formats we needed, which led us to create our own solutions.
One improvement would be to integrate it with modern technologies such as AI, so we can generate test cases by providing the details so that it can generate the structure, and later the person working can modify and enhance it.
In terms of improvements for Parasoft SOAtest, some features could be added or perhaps existing areas could be improved, such as lowering prices.
If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.
We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.
A nice addition would be if it could be extended for scenarios with custom cleansers.
Parasoft SOAtest is expensive, but it was acquired because the company was dissatisfied with Quick Test Pro.
It's not the most expensive solution.
Overall, Veracode's pricing is lower and more scalable than many alternatives in the market.
If there's a security gap, you'll never know the cost or effect.
Parasoft SOAtest is very good at ensuring tests don't pass or fail until they genuinely pass or fail.
Parasoft SOAtest improves the quality of the application, increases security and security compliance, and it is a cost-effective tool.
The best feature of Parasoft SOAtest is the extension tool where we can write our custom scripts.
It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.
The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.
It fixes issues directly in the IDE while you're doing it.
| Product | Mindshare (%) |
|---|---|
| Veracode | 4.9% |
| Parasoft SOAtest | 0.8% |
| Other | 94.3% |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 3 |
| Large Enterprise | 23 |
| Company Size | Count |
|---|---|
| Small Business | 69 |
| Midsize Enterprise | 45 |
| Large Enterprise | 114 |
Parasoft SOAtest is a robust tool for automating test scenarios, supporting a range of interfaces and protocols, making it ideal for comprehensive service testing. Its adaptability in complex environments provides extensive testing capabilities for UI and API automation.
Parasoft SOAtest offers a comprehensive suite of features designed for the efficient setup of functional tests, emphasizing ease in data-driven scenarios and thorough automation. Supporting key protocols like SOAP and REST, alongside UI recording, it integrates seamlessly with Jenkins and GitHub, adding service virtualization for enhanced end-to-end testing. Users benefit from its extensibility through custom scripts, allowing broad API and web service testing. However, there are challenges in user-friendliness, with the graphical interface requiring improvements. Reporting features need enhanced clarity and customization options. Limited cryptography support and documentation necessitate improvement. Performance issues and high pricing are noted drawbacks, but its use in banking and quality enhancement demonstrates significant potential.
What are the key features of Parasoft SOAtest?Implementing Parasoft SOAtest in industries like banking allows automation of regression tests for web services in SOA architectures, supporting protocols such as ISO 8583. Companies use it to transition from manual testing to automation, integrating JSON and XML, facilitating improved application quality.
Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.
Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.
What are the key features of Veracode?
What benefits should users consider in Veracode reviews?
Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.
Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.
We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.