If you're responsible for the business case and program outcomes for application security at your organization, this guide is for you. Your goal is to show that the investment in Veracode is delivering measurable improvement — and to communicate that progress clearly to the people who care about it.
What Leadership Typically Wants to Know
- Are we getting more secure over time?
- Which applications carry the most risk right now?
- Are development teams actually remediating findings?
- Are we meeting our compliance requirements?
Veracode Analytics provides the underlying data across Static Analysis, DAST, Manual Penetration Testing, and SCA to help you build answers to these questions.
Your Key Metrics
| Metric | What It Shows | Where to Find It |
|---|---|---|
| Policy Compliance Rate | % of applications passing security policy | Analytics > Security Program Overview |
| Open Findings by Severity | Current volume of Very High / High findings | Analytics > Findings Status & History |
| Mean Time to Remediate (MTTR) | How long it takes teams to fix findings | Analytics > Findings Status & History |
| New vs. Closed Findings | Are you getting ahead or falling behind? | Analytics > Findings Status & History |
| Scan Coverage | % of active applications scanned in last 90 days | Analytics > Security Program Overview |
- Docs: Veracode Analytics
Setting Up for Executive Reporting
Use the Executive role
The Executive role in Veracode provides read-only access to Analytics and reports across all applications. This role is designed for visibility without administrative access.
Use pre-built dashboards
Veracode Analytics includes pre-built dashboards powered by Google Looker that can be shared with stakeholders once configured:
- Security Program Overview — Top-line policy compliance across the portfolio
- Findings Status and History — Trend data on open and closed findings
- SCA Findings — Open-source vulnerability risk
- Docs: Veracode Analytics Dashboards
Build custom dashboards
Users with the Analytics Creator role can build custom dashboards using the Explores feature, combining dimensions and measures to answer specific business questions.
- Docs: Explore Your Data
Generating Reports for Stakeholders
- Customizable Report (PDF) — Choose sections to include for different audiences. docs.veracode.com/r/c_results_reports
- Reporting REST API — Pull data programmatically for custom presentations or dashboards. docs.veracode.com/r/Reporting_REST_API
Communicating Progress Effectively
- Connect to business outcomes — "Applications in our most business-critical tier have improved from 40% to 72% policy compliance this quarter."
- Show trends, not snapshots — A single data point means little. Month-over-month or quarter-over-quarter trends show direction.
- Acknowledge what's not working — Leadership trusts data more when it includes areas of concern alongside progress.
Useful Resources
Learning Paths
Go deeper with these step-by-step learning paths on Veracode Docs:
← Back to the Getting Started Guide | ← Back to the Onboarding Hub
.png){kind=logo}
