Try our new research platform with insights from 80,000+ expert users

Spirent CyberFlood vs Veracode comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Spirent CyberFlood
Ranking in Application Security Tools
31st
Ranking in Static Application Security Testing (SAST)
29th
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
Veracode
Ranking in Application Security Tools
2nd
Ranking in Static Application Security Testing (SAST)
2nd
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
204
Ranking in other categories
Container Security (8th), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of October 2025, in the Application Security Tools category, the mindshare of Spirent CyberFlood is 0.3%, up from 0.1% compared to the previous year. The mindshare of Veracode is 7.7%, down from 10.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
Veracode7.7%
Spirent CyberFlood0.3%
Other92.0%
Application Security Tools
 

Featured Reviews

Jos Badimo - PeerSpot reviewer
Test assurance improves compliance and products with good performance
The user interface could be improved to facilitate easier navigation. The most significant issue I encounter with the solution is the user interface. It would be beneficial if I could remain on one screen most of the time. Even if the system navigates me to another screen, it should effectively return me to the main screen.
Kv Rao - PeerSpot reviewer
Integrates pipelines smoothly and fortifies code against vulnerabilities
I use Veracode in multiple places including static code analysis, penetration testing, and dynamic code analysis. It is part of our pipeline and integrates well with Bitbucket and Git pipelines The ease of integration with Bitbucket pipelines and Git pipelines is vital for us. Veracode allows us…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Our customers use it to check for unauthorized file transfer."
"The testing compliance feature is particularly impressive."
"The testing compliance feature is particularly impressive."
"The feature I find most valuable is the traffic generator."
"CyberFlood's best features are its user-friendliness and scheduling function."
"CyberFlood is flexible."
"The integration with DevOps pipelines is seamless."
"The CSCA vulnerability scanning is useful."
"It provides security of different Shadow IT activities in our environment, especially around application development and website hosting."
"I like the static scanning, and Veracode's interface is excellent. The dashboard is easy to navigate."
"One thing that I like about Veracode is that it is quite a good tool for dynamic application testing."
"The most valuable feature is the remediation consulting that they give. I feel like any vendor can identify the flaws but fixing the flaws is what is most important. Being able to have those consultation calls, schedule them in the platform, and have that discussion with an applications expert, that process scales well and that is what has allowed a lot more reduction of risk to happen."
"Before Veracode, the application was deployed to the production server and there would be a lot of bugs and issues. Once we implemented the Veracode scan, the full deployment issues were drastically reduced."
"The most valuable feature is the efficiency of the tool in finding vulnerabilities."
 

Cons

"Sometimes, when you configure parameters the hardware can't run, it will get stuck at those points without telling you what happened. It would be helpful if the error reporting provided more details about why the test setting is not running. It would be nice if there were a space in the hardware module for you to add some external hardware for more rigorous testing."
"CyberFlood's accessibility and support for multiple browsers could be better."
"The user interface could be improved to facilitate easier navigation."
"I would also like to see updates on a more frequent schedule."
"The initial setup is not straightforward and can be quite challenging."
"The solution needs more ports, more speed, and more gigabytes."
"The documentation is poor and the technical support isn't helpful."
"We use Ruby on Rails and we still don't have any support for that from Veracode."
"Veracode does not support scans for .NET Blazor server applications."
"The scanning could be a little faster. The process around three or four minutes, but it would help if it could be further reduced."
"I would also like to see some improvement in the speed. That is really the only complaint, but in all reality we have a massive Java application that needs to be scanned. Our developers are saying, "It takes 72 hours to scan it." That is probably the nature of the beast, and I'm actually pretty accepting of that time frame, but since it's a complaint that I get, faster is always better. I don't necessarily think that the speed is bad as it is, just that faster would be better."
"Third-party library scanning would be very useful to have. When I was researching this a year ago, there was not a third-party library scan available. This would be a nice feature to have because we are now running through some assessments and finding out which tool can do it since this information needs to be captured. Since Veracode is a security solution, this should be related."
"Static scanning takes a long time, so you need to patiently wait for the scan to achieve. I also think the software could be more accurate. It isn't 100 percent, so you shouldn't completely rely on Veracode. You need to manually verify its findings."
"I think if they could improve the operations around accepted vulnerabilities, we would see improvements in our productivity."
 

Pricing and Cost Advice

"CyberFlood is reasonably priced."
"Costs are reasonable. No special infrastructure is required and the license model is good."
"We're very comfortable with their model. We think they're a good value. We worked very closely with Veracode on understanding their license model, understanding what comprises the fee and what does not. With their assistance in design, we decomposed our application in a way where we are scanning a very significant amount of code without wasting their capacity and generating redundant reported issues. You scan in profiles, per se. And we work with them, in their offices, to design the most effective approach. So the advice I would have for customers is, you can get up and live fast, but work closely with Veracode to refine the method you use for scanning and the way you compile the applications. There's a concept called entry-point scanning, and that's probably not used well by the rest of their customers. We see our licensing as a good value because we leverage it heavily."
"Compared to other similar products, the licensing and pricing are definitely competitive. If you see Checkmarx as the market leader, then we are talking about Veracode being a fraction of the cost. You also have to consider your hidden costs: you need a team to maintain it, a server, and resources. From that point of view, Veracode is great because the cost is really a fraction of many competitors."
"Veracode is one of the more expensive solutions in the market, but it is worth the expense because of the eLearning and the security consultations; everything is included in the license."
"The pricing is fair."
"The worst part about the product is that it does not scale at all. Also, microservices apps will cost you a fortune."
"They just changed their pricing model two weeks ago. They went from a per-app license to a per-megabyte license. I know that the dynamic scan was $500 per app. Static analysis was about $4500 yearly. The license is only for the number of users, it doesn't matter what data you put in there. That was the old model. I do not know how the new model works."
"I believe the price is fair according to market standards."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
868,759 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
17%
Comms Service Provider
13%
Government
9%
Financial Services Firm
8%
Financial Services Firm
16%
Computer Software Company
15%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business69
Midsize Enterprise43
Large Enterprise112
 

Questions from the Community

What needs improvement with Spirent CyberFlood?
The user interface could be improved to facilitate easier navigation. The most significant issue I encounter with the solution is the user interface. It would be beneficial if I could remain on one...
What is your primary use case for Spirent CyberFlood?
I have been using the solution for a year now. The customers I work with are focused on both custom test assurance and test automation. The solution is utilized in the financial services sector and...
What advice do you have for others considering Spirent CyberFlood?
The language barrier and time difference pose significant issues with customer support. The price is competitive. The biggest benefits I find are test assurance, the reliability of the test results...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What do you like most about Veracode Static Analysis?
I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.
What is your experience regarding pricing and costs for Veracode Static Analysis?
When considering pricing, Veracode stands out due to its lower cost per service and more scalable options. It offers nearly five security testing features within its own service, making it a compet...
 

Also Known As

CyberFlood Virtual, Spirent Mu Dynamics Application Security Testing, Mu Dynamics Application Security Testing
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

Digicel
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about Spirent CyberFlood vs. Veracode and other solutions. Updated: September 2025.
868,759 professionals have used our research since 2012.