KuppingerCole Analysts' 2026 Leadership Compass on Software Supply Chain Security names Veracode an Overall Leader - and calls out code signing and attestation as the market's most critical unmet need. Most vendors still can't meet EU CRA, NIST SP 800-218, and DORA requirements in these areas. Veracode can.
The report covers Package Firewall and Veracode Fix in detail: 130+ language SAST with a false positive rate below 1.1%, malicious package detection within seconds of publication, and SBOM generation in CycloneDX, SPDX, and JSON formats. The full vendor ranking and capability analysis is inside.