SUSE NeuVector vs Veracode comparison

Read 208 Veracode reviews

18,744 Views
4,686 Comparison Views

89% willing to recommend

SUSE NeuVector

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 16, 2024

Veracode and SUSE NeuVector compete in the security solutions category. Veracode appears to have the upper hand in features and ease of deployment, while SUSE NeuVector stands out in customer service and overall value.

Features: Veracode provides comprehensive testing capabilities, including static, dynamic, and software composition analysis. Users benefit from Veracode's integration with development environments. SUSE NeuVector offers runtime monitoring and network visibility. Its unique selling point is container-native security.

Room for Improvement: Veracode users suggest better documentation, more agile customer support, and improved response times. SUSE NeuVector users want enhanced user documentation, more user-friendly navigation, and a simplified interface for non-technical users.

Ease of Deployment and Customer Service: Veracode’s deployment process is positively reviewed for its ease but requires technical knowledge. SUSE NeuVector is noted for responsive and effective customer service, and its deployment process is well-regarded.

Pricing and ROI: Veracode is seen as more affordable, with a better ROI due to lower setup costs. SUSE NeuVector, though more expensive, offers a higher ROI in the long run due to advanced features and superior customer support.

To learn more, read our detailed SUSE NeuVector vs. Veracode Report (Updated: December 2025).

SUSE NeuVector vs. Veracode

December 2025

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SUSE NeuVector

Ranking in Container Security

17th

Average Rating

7.8

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Cloud Workload Protection Platforms (CWPP) (20th)

Veracode

Ranking in Container Security

8th

Average Rating

8.0

Reviews Sentiment

6.9

Number of Reviews

208

Ranking in other categories

Application Security Tools (2nd), Static Application Security Testing (SAST) (2nd), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)

Mindshare comparison

As of January 2026, in the Container Security category, the mindshare of SUSE NeuVector is 2.1%, down from 2.6% compared to the previous year. The mindshare of Veracode is 3.1%, down from 4.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Container Security Market Share Distribution
Product	Market Share (%)
Veracode	3.1%
SUSE NeuVector	2.1%
Other	94.8%

Container Security

Featured Reviews

Danie Joubert

Managing Director at ProQuanta

Good value for money; great for policy management

Our model of deployment for this solution is on-premises. For people looking into this solution and trying to use it for the first time, I'd say make your life easier by using the SUSE product as well on top of your community scale stack. That makes your integration points a lot easier and smoother. I would also say during your initial setup, make sure that your clusters are already in terms of the capabilities with the version required. I would rate this solution an eight, on a scale from one to 10, with one being the worst and 10 being the best. The reason for this rating is that what they offer is solid, but they could expand their service and add more features just to make more things integrated into an enterprise itself.

Read full review

reviewer2703864

Head of Security Architecture at a healthcare company with 5,001-10,000 employees

Onboarding developers successfully while improving code security through IDE integration

Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution includes many features, not only for container and client security but also for scanning nodes, networks, and vulnerabilities."

"The most valuable feature of SUSE NeuVector is its run-time security."

"The UI has a lot of features."

"The tool's deployment is simple. Also, I am impressed with its risk capabilities."

"The solution includes many features, not only for container and client security but also for scanning nodes, networks, and vulnerabilities."

"The initial setup is quite good, it's straightforward."

"The features of image scanning and anti-malware are really valuable."

"When it comes to the price, we got a really good deal from the vendor instantly."

More SUSE NeuVector pros

"The Static and Dynamic Analysis capabilities are very valuable to us. They've improved the speed of the inspection process."

"The product’s policy reporting for ensuring compliance with industry standards and regulations is great."

"It is a good product for creating secure software. The static code analysis is pretty good and useful."

"One benefit is that we have automated the scanning process."

"Veracode provides guidance for fixing vulnerabilities. It enables developers to write secure code from the start by pointing them to the problematic line of code, and saying, "This function/method has security vulnerabilities," then suggests alternatives to fix it. Then, we adopt their suggestions of the tool. By implementing it in the right way, we can fix the issue. For example, if the tool has found a method where it copied one piece of memory into another piece of memory in the code. The tool points to problematic methods with the vulnerability and provides ways to code it more securely. By adopting their suggestions, we are fixing this vulnerability."

"The coverage of backdoors attacks on security that's the most valuable for my clients."

"Vulnerability Management and mitigation recommendations help with resolution of issues found, prior to deployment to production."

"It pinpoints the errors. Its accuracy is very interesting. It also elaborates on flaws, meaning it provides you with details about what is valid or not and how something can be fixed."

More Veracode pros

Cons

"The image-scanning features need improvement."

"I would say that this solution should improve monitoring and reporting. I would also like to see more integrations so that we could essentially make it a part of a developing pipeline."

"Using a node port instead of a cluster IP is less ideal when implementing federation features between two clusters and could be improved."

"The documentation needs to improve a bit."

"The tool should offer seamless integration of other security tools while in a hybrid environment."

"However, I found that the support in Egypt was not very qualified, and there was a need to upgrade to a higher support layer to solve my issues."

"SUSE NeuVector should provide more security protection rules and better container image scanning."

"We are also working with IaaS VMS, but NeuVector doesn't support virtual machines."

More SUSE NeuVector cons

"Improving sorting through findings reports to filter by only what is critically relevant will help developers focus on issues."

"One of the things that we have from a reporting point of view, is that we would love to see a graphical report. If you look through a report for something that has come back from Veracode, it takes a whole lot of time to just go through all the pages of the code to figure out exactly what it says. We know certain areas don’t have the greatest security features but those are usually minor and we don’t want to see those types of notifications."

"Veracode has plenty of data. The problem is the information on the dashboards of Veracode, as the user interface is not great. It's not immediately usable. Most of the time, the best way to use it is to just create issues and put them in JIRA... But if I were a startup, and only had products with a good user interface, I wouldn't use Veracode because the UI is very dated."

"It's very expensive for a small organization."

"The scanning is a little slow, but other than that it's fine. It's usually when the binaries get up into the multi-hundred megabyte size."

"The number of false positives could be reduced a lot. For each good result, we are getting somewhere around 15 to 20 false positives."

"From the usability perspective, it is not up to date with the latest trends. It looks very old. Tools such as Datadog, New Relic, or infrastructure security tools, such as AWS Cloud, seem very user-friendly. They are completely web-based, and you can navigate through them pretty quickly, whereas Veracode is very rigid. It is like an old-school enterprise application. It does the job, but they need to invest a little more on the usability front."

"It should include more informational, low level, vulnerability summaries and groupings. Large related groups of low level vulnerabilities may amount to a design flaw or another avenue for attack."

More Veracode cons

Pricing and Cost Advice

"Licensing fees are paid yearly."

"The solution's pricing could be better. The cost of a subscription is calculated on the basis of work."

"SUSE NeuVector is an open-source solution."

"The price of SUSE NeuVector is low. There is an additional cost for support."

"From a cost perspective, it seems okay, although we will probably evaluate alternatives next time it's up for renewal because for us, it's a relatively high cost, and we want to make sure that we are using our resources most appropriately."

"I think licensing needs to be changed or updated so that it works with adjustments. Pricing is expensive compared to the amount of scanning we perform."

"It is pricey. There is a lot of value in the product, but it is a costly tool."

"The worst part about the product is that it does not scale at all. Also, microservices apps will cost you a fortune."

"The cost of Veracode is high."

"There is a fee to scale up the solution which I consider expensive."

"Licensing cost is on a yearly basis and there are no additional costs, the pricing is straightforward."

"The pricing and licensing are reasonable, and relatively straightforward, and different licensing and subscription models are available."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Container Security solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

14%

Manufacturing Company

10%

Government

Financial Services Firm

17%

Computer Software Company

13%

Manufacturing Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	1
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	44
Large Enterprise	115

Questions from the Community

What needs improvement with NeuVector?

One area for improvement is NeuVector's ability to import CVEs from different sources. Additionally, using a node port instead of a cluster IP is less ideal when implementing federation features be...

What is your primary use case for NeuVector?

In my company, I am looking to deploy a container security runtime solution.

What advice do you have for others considering NeuVector?

I'd rate the solution eight out of ten.

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...

What do you like most about Veracode Static Analysis?

I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.

What is your experience regarding pricing and costs for Veracode Static Analysis?

My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.

Sysdig Falco vs SUSE NeuVector

Comparisons

Trivy vs SUSE NeuVector

Compared 15% of the time

Compared 11% of the time

Red Hat Advanced Cluster Security for Kubernetes vs SUSE NeuVector

Compared 7% of the time

Aqua Cloud Security Platform vs SUSE NeuVector

Compared 5% of the time

Sysdig Secure vs SUSE NeuVector

Compared 5% of the time

More SUSE NeuVector Competitors

SonarQube vs Veracode

Compared 12% of the time

Checkmarx One vs Veracode

Compared 8% of the time

GitHub Advanced Security vs Veracode

Compared 5% of the time

Coverity Static vs Veracode

Compared 4% of the time

OWASP Zap vs Veracode

Compared 3% of the time

More Veracode Competitors

Product Reports

Download SUSE NeuVector product report

Container Security

January 2026

Download Veracode product report

January 2026

Also Known As

NeuVector

Crashtest Security , Veracode Detect

Overview

SUSE NeuVector is a full lifecycle container security solution that helps your organization secure its container infrastructures, manage Kubernetes security risks, and block threats. The NeuVector continuous container security and compliance platform simplifies data protection from pipeline to production, enforces compliance, and provides complete visibility and automated controls for protection against known and unknown threats. In addition, NeuVector is the only Kubernetes-native container security solution that offers a comprehensive risk profile of known vulnerabilities and also delivers immediate protection from all vulnerabilities.

SUSE NeuVector Features

SUSE NueVector has many valuable key features. Some of the most useful ones include:

Container incident detection and prevention
Network security
Runtime security
Supply chain security
Container firewall
Host and platform security
Cloud-native automation and integration
Resource monitoring
Visualization and reporting
High availability
Security
Vulnerability management
Compliance and auditing
Alerting
Logging and Response

SUSE NeuVector Benefits

There are many benefits to implementing NeuVector. Some of the biggest advantages the solution offers include:

Deep packet inspection (DPI): NeuVector applies DPI to identify attacks, detect sensitive data, or verify application access to further reduce the attack surface. Only network layer analysis enables security to detect and verify the allowed protocols, helping security teams enforce business policy.

Real-time protection: NeuVector provides inspection, segmentation, and protection of all traffic into and out of a container. This includes container to container traffic, and ingress from external sources to containers, as well as egress from containers to external applications and the internet. The solution aims to protect your applications from internal application level attacks such as DDoS and DNS.

Capture packets for debugging and threat investigation: WIth NeuVector, you can view summary connection data and drill down into actual packet details for each container, as they scale up and down. When a threat is detected, NeuVector is able to automatically capture and display the packet info, making it easy for you to investigate.

Automated security policies: The NeuVector solution allows you to automate the creation of security policies to protect application workloads in production. The solution also enables you to automate and maintain run-time security policies using Kubernetes custom resource definitions (CRDs), and gives you the option to declare an application security policy at any stage in the pipeline.

Compliance: NeuVector offers detection capabilities and security policy enforcement that prevent PHI and PII exposure, exceed requirements, and simplify reporting for PCI-DSS, GDPR, HIPAA, and more. The solution helps you track critical vulnerabilities and compliance violations so you can quickly identify any that require immediate patching or followup alerts. It also makes it possible for you to manage vulnerability and compliance scan results, with no required integration to external workflow tools.

Reviews from Real Users

A Platform Solution Architect at a tech services company says, “The solution is feature-rich, easy to set up, and has good support.”

SUSE

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Sample Customers

Figo, Clear Review, Arvato Bertelsmann, Experian, Chime

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.