Getting Started Guide Hub
New to Veracode?
Start with your First 30-Day Plan
A week-by-week guide to platform setup, your first scan, and understanding your results — designed for customers to self-guide.
Interactive Tour See the Veracode Platform before you log inA guided click-through tour of the platform interface, so you know where things are before your first scan. No login required. Start the tour → |
Product Quickstarts
New to a product? These step-by-step guides on Veracode Docs will get you scanning in minutes.
All quickstart guides open on Veracode Docs.
Guides by Role
Jump straight to the guide written for your role.
Onboarding Topics — In Order
Work through these in sequence for the smoothest onboarding experience.
|
STEP 1
Platform Setup EssentialsConfigure users, roles, teams, API credentials, and security policies before your first scan. Read guide → |
STEP 2
IDE Plugins & Your First ScanInstall the right IDE plugin, run your first scan, and understand what comes back. Read guide → |
|
STEP 3
Reading Your Scan ResultsUnderstand severity levels, flaw categories, policy status, and what to act on first. Read guide → |
STEP 4
Remediation PlanningTurn your findings into a prioritized action plan your team can actually execute. Read guide → |
|
STEP 5
Integration PathwaysConnect Veracode to GitHub, Jenkins, Jira, and your existing development tools. Read guide → |
STEP 6
Scan Types & WorkflowsUnderstand SAST, DAST, SCA, and Pipeline Scan — and which to use when. Read guide → |
Going Deeper
Advanced guides for teams ready to build a mature AppSec program.
📊 Analytics & ReportingMeasure your security program and produce reports for leadership and audits. Read guide → |
🎯 KPI PlaybookThe metrics that matter for AppSec programs, with targets and reporting cadence. Coming soon |
🏷️ Custom Fields StrategyTag applications by team or risk tier for more meaningful analytics. Coming soon |
⌨️ Veracode CLIRun Pipeline Scans and SCA Agent scans from your terminal or CI/CD environment. Read guide → |
📂 Application ScopingDefine your application portfolio, configure profiles, and schedule scans at scale. Coming soon |
🔍 Manual Penetration TestingWhat to expect from MPT, how to prepare, and how to act on your results. Coming soon |
Further Reading
Additional guides on AppSec strategy, DevSecOps concepts, and program tools.
| Still have questions? Post in the community forums — other Veracode customers and Veracode staff check regularly and are happy to help. |
Ask the Community → |
.png){kind=logo}
