# Veracode SCA: how AI models rank it, October 2026

IT AI Recommendation Index, October 2026 Edition. Named in 9 judge labels across 1 categories by 7 of 14 models. Page: https://it-ai-index.com/vendors/veracode-sca/

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| Software composition analysis | 0% | 43 | 33% | 9 |

## What the models said for it

- "Other strong contenders: ... Veracode" (Grok 4.20, SCA)

## And against it

- "Enterprise heavyweights (like Black Duck or Veracode) are often too expensive, slow to implement, and clunky" (Gemini 3.5 Flash, SCA)
- "SCA is often secondary—beware if pure SCA is your focus (learning curves, reporting limits)" (Grok 4.20, SCA)
- "often too expensive for small budgets" (Perplexity Sonar, SCA)

## Movement since September 2026

Floor: 11 points of share, measured on the calibration repeat. A larger change is movement; a smaller one is noise.

- Software composition analysis: 0% to 0%, ±0. Inside the floor by 11 points · rank 32 → 43 of 50.

## In its own words

What Veracode SCA's own pages state, read 2026-10-05. Stated by the vendor, not checked by the index.

- Positioning: Use Fix for SCA to generate code fixes and, optionally, apply them to vulnerabilities found in software composition analysis (SCA) scans using Veracode Fix for SCA. (https://docs.veracode.com/r/veracode_fix_sca)
- For: To manage and run SCA scans on your desktop (https://docs.veracode.com/r/Set_up_SCA_agents)
- Hosting: Commercial region, European region, United States Federal region

## What it publishes

Every page veracode.com exposes, read 2026-09-29: 1969 addresses. By kind, pages and the last 90 days:

- blog: 464 pages, 16 in the last 90 days, latest 2026-09-23
- case study: 29 pages, 1 in the last 90 days, latest 2026-09-08
- webinar or virtual event: 28 pages, 1 in the last 90 days, latest 2026-08-11
- conference or event: 55 pages, 1 in the last 90 days, latest 2026-08-04
- report or ebook: 66 pages, 6 in the last 90 days, latest 2026-09-08
- comparison: 10 pages, 1 in the last 90 days, latest 2026-08-18
- template or tool: 1 pages, 0 in the last 90 days, latest undated
- glossary or explainer: 11 pages, 0 in the last 90 days, latest 2025-12-29
- podcast or video: 2 pages, 0 in the last 90 days, latest 2024-11-04
- news or press: 2 pages, 0 in the last 90 days, latest 2024-10-25
- Recent: 2026-09-23 blog: Application risk intelligence september 23 https://www.veracode.com/blog/application-risk-intelligence-september-23
- Recent: 2026-09-22 blog: Application security software for business growth https://www.veracode.com/blog/application-security-software-for-business-growth
- Recent: 2026-09-17 blog: Application risk intelligence september 17 https://www.veracode.com/blog/application-risk-intelligence-september-17
- Recent: 2026-09-17 blog: Mature software supply chain security program https://www.veracode.com/blog/mature-software-supply-chain-security-program
- Recent: 2026-09-14 blog: Eu cyber resilience act 2026 compliance https://www.veracode.com/blog/eu-cyber-resilience-act-2026-compliance
- Recent: 2026-09-10 blog: Devsecops application security platform https://www.veracode.com/blog/devsecops-application-security-platform

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, October 2026 Edition, it-ai-index.com.