Veracode


Veracode is an application security company based in Burlington, Massachusetts. Founded in 2006, the company provides an automated cloud-based service for securing web, mobile and third-party enterprise applications. Veracode provides multiple security analysis technologies on a single platform, including static analysis, dynamic analysis, mobile application behavioral analysis and software composition analysis.
On March 9, 2017, CA Technologies announced it was acquiring Veracode for approximately $614 million in cash, and the acquisition was completed on April 3, 2017.
On July 11, 2018, Broadcom announced that it was acquiring Veracode parent CA Technologies for $18.9 billion in cash. The acquisition was completed on November 5, 2018, and Broadcom thus became the new owner of the Veracode business. On the same day, Thoma Bravo, a private equity firm headquartered in San Francisco, California, announced that it had agreed to acquire Veracode from Broadcom for $950 million cash.

Overview

Veracode was founded by Chris Wysopal and Christien Rioux, former engineers from @stake, a Cambridge, Massachusetts-based security consulting firm known for employing former “white hat” hackers from L0pht Heavy Industries. Much of Veracode's software was written by Rioux. In 2007, the company launched SecurityReview, a service which can be used to test code in order to find vulnerabilities that could lead to cybersecurity breaches or hacking. The service is intended to be used as an alternative to penetration testing, which involves hiring a security consultant to hack into a system. On November 29, 2011, the company announced that it had appointed Robert T. Brennan, former CEO of Iron Mountain Incorporated, as its new chief executive officer.
The company issued a report on cybersecurity in June 2015. The report found that most sectors failed industry-standard security tests of their web and mobile applications and that government is the worst performing sector in regards to fixing security vulnerabilities. A report issued by the company in December 2015 found that "four out of five applications written in popular web scripting languages contain at least one of the critical risks in an industry-standard security benchmark."
As of 2014, Veracode's customers included three of the top four banks in the Fortune 100. Fortune reported in March 2015 that Veracode planned to file for an initial public offering later that year in order to go public. However, the IPO did not occur, and Veracode was later acquired by CA Technologies.

Funding

Major investors in the company include.406 Ventures, Accomplice, STARVest Partners, and Meritech Capital Partners. In a funding round announced in September 2014, the firm raised in a late-stage investment led by Wellington Management Company with participation from existing investors.

Reception

In 2013, Veracode ranked 20th on the Forbes list of the Top 100 Most Promising Companies in America. Veracode was named one of the "20 Coolest Cloud Security Vendors of the 2014 Cloud 100" by CRN Magazine. Gartner named Veracode as a Leader for seven consecutive years in Gartner Magic Quadrant for Application Security Testing.