• Public
  • Broadcast OnlyThis group is for broadcast messages. Only group managers can post content.

Product Announcements

Skip Feed
  1. Pinned Post

    Tim J (Veracode PM) (Veracode)

    Edited by Shuning, Veracode Community Manager January 15, 2021 at 6:35 PM

    Welcome to the Veracode Product Announcements Group! This is where you’ll get weekly product news, a summary of recently released features and enhancements, and learn about upcoming changes with high impact on your Veracode experience.  

     

    Here are some tips to help you stay on top of the latest Veracode features and engage with the product team to impact our roadmap: 

     

    👉 How can I keep up with the latest Veracode release? 

    You can subscribe for weekly digest emails – a summary of new posts made in the Product Announcements group from the last week. Here’s how:   

    1. Join this group 
    2. Make sure your notification is set to “Weekly Digest”  

     

    👉 Where can I provide feedback about Veracode’s products and services? 

    As a Veracode customer, there are three ways you can engage with our product team and shape the future of our products: 

    • Submit your feature request to the Ideas portal. 
    • Apply for the Early Adopter Program to influence our upcoming features and products. 
    • Attend the product showcase series, including monthly product deep-dive and quarterly roadmap review webinars to share your ideas with the product team directly and learn how other Veracode users are using the products.  
    Expand Post

  2. Mike M (Veracode TPM) (Community Member) asked a question.

    June 22, 2026 at 9:46 PM
    📣 Static Analysis Product Updates - Upcoming changes for the June Release

    This week's June Static Analysis Release includes the following:

     

    Updated language and framework support

     

    .NET

    • Improved classification of first-party .NET assemblies to better distinguish application code from third-party dependencies.

    Apex

    • Improved detection of vulnerabilities involving tainted data flows through public methods.
    • Improved detection of CWE-532 flaws.

    Apple Platforms

    • Improved support for Security APIs.

    Dart and Flutter

    • Adds support for Dart 3.12 and Flutter 3.44.

    Kotlin

    • Adds support for Kotlin 2.4.

    Java

    • Improved third-party detection.
    • Improved detection and classification of ForgeRock third-party dependencies in Maven-based projects.
    • Improved detection of CWE-918 flaws.

    JavaScript

    • Improved CWE-73 flaw detection.
    • Improved third-party detection.

    Python

    • Improved third-party detection.

    RPG

    • Improved RPG parsing.

    Other languages

    • Improves detection of CWE-259 and CWE-798 flaws across all languages to reduce false positives.
    Expand Post
    • 36 views

  3. SamHouston (Veracode) asked a question.

    June 15, 2026 at 6:19 PM
    Scanning SOAP APIs with Veracode DAST

    By Oscar Rodriguez, Veracode Senior Principal Solutions Architect 

     

    Veracode has been asked constantly to be able to scan SOAP APIs as part of the scope of DAST solution. While the ability to scan web applications and REST APIs is well known today, there is a way to scan SOAP APIs with current Veracode DAST capabilities. 

     

    After some executed tests, we found a way to scan SOAP APIs by “translating“ the WSDL specification into a well-formed Veracode DAST supported specification (Postman Collection, OpenAPI, etc.); for that purpose our engineering team was investigating some tools for doing that conversion, and found the following tools (these are tools created and maintained by third-parties, so Veracode does not have responsibility on maintenance them): 

     

    Recently we got involved in a technical challenge in which we were required to run DAST on a SOAP API, and looking for other options to get the well-formed API specification, we found out that using IA (Copilot for example) we could have a pretty easy way to convert WSDL spec into an OpenAPI spec supported by Veracode, so we could use that generated spec uploading it into scan configuration to run the scan and having as a result the execution of DAST for that SOAP API. 

     

    If you need to run a DAST scan on a SOAP API, you could follow any of these methods to get your well-formed API spec supported by Veracode and get your scan running. 

    Expand Post
    • 35 views
    LAraujo243908 and ORodriguez688096 like this.

  4. SamHouston (Veracode) asked a question.

    June 10, 2026 at 8:05 PM
    Security Labs & eLearning course updates 📣 

    Security Labs updates 

    The deprecated OWASP Top 10 (2021) lessons are no longer available. The following lessons have been added. 

    OWASP Top 10 for LLM applications 

    • OWASP LLM 06: The Chaos Creator (Flask) 

    OWASP Top 10:2025 labs 

    • OWASP 1: Loose Lips Sink Servers (Java) 

     

    eLearning course updates 

    The following 33 deprecated courses are no longer available, and certification levels have been updated to include newer courses. 

    • OWASP 2017 
    • OWASP Top 10 (2021) (6 courses) 
    • Secure Coding for .NET (6 courses) 
    • Secure Coding for Java (6 courses) 
    • Secure Coding for JavaScript (5 courses) 
    • Secure Coding for PHP (6 courses) 
    • Secure Coding for Python (3 courses) 

     

    The following courses, when combined with Secure Coding Foundations, replace the deprecated courses. They are now available with English, Spanish, French, Portuguese, and Chinese captions. 

    • Software Security Awareness - OWASP Top 10:2025 
    • Secure coding for .NET - OWASP Top 10:2025 
    • Secure coding for Java - OWASP Top 10:2025 
    • Secure coding for JavaScript - OWASP Top 10:2025 
    • Secure coding for PHP - OWASP Top 10:2025 
    • Secure coding for Python - OWASP Top 10:2025 

     

     

    The following course is now available with English, Spanish, French, Portuguese, and Chinese captions. 

    • Introduction to PCI DSS for Developers (v4.0.1) 

     

    Check out the release notes and course catalog to learn more.  

     

    Expand Post
    • 18 views

  5. SamHouston (Veracode) asked a question.

    June 3, 2026 at 10:51 PM
    🚀 June 2026 Product Updates – What's New at Veracode

    We've just posted our June 2026 product update, and there's a lot to be excited about. From AI-powered fix improvements that are already live in your environment, to a featured Early Access opportunity for Fix for SCA, to upcoming changes in DAST, Analytics, and more.

     

    Head over to the Product Updates page to read the full breakdown:

    👉 community.veracode.com/s/product-updates

     

    Note: The Product Updates page is available to logged-in community members. To access it, log in to the Veracode Platform first, then navigate to the Community — or click the link above and you'll be prompted to sign in. If you run into any trouble accessing it, email us at customersuccess@veracode.com and we'll help you get in.

     

    Expand Post
    • 336 views

  6. pmonaghan (Veracode, Inc.) asked a question.

    May 29, 2026 at 9:21 PM
    📣 Coming June 30th: Support for latest version of OWASP Top 10

    Starting on June 30th, Veracode Policies will support the latest version of OWASP Top 10. If you are using either the ‘Auto-Update OWASP’ rule or the ‘Auto-Update PCI’ rule in your policy, your applications will automatically be re-evaluated against the new standard within 24 hours. If you are using the ‘OWASP 2021’ rule in your policy, however, you will need to replace it with an auto-update rule to use the newer version. For additional information, please review the attached FAQs and this page in the Veracode documentation center. Thank you.

    • 82 views

  7. SamHouston (Veracode) asked a question.

    May 27, 2026 at 7:59 PM
    Celebrating Veracode's 20 Year anniversary (including Special Event in London)

    This week we are celebrating Veracode's 20 year anniversary!

     

    Two Decades of Data Powering the Future of Software Security

    Twenty years ago, the idea of continuously scanning software for vulnerabilities at scale was ambitious. Today, it’s essential. As Veracode marks its 20th anniversary, we’re not just looking back at what we’ve built; we’re looking forward at what the data tells us about where software security needs to go next. And the data says a lot.

     

    Celebrate with us in London!

    This year marks a major milestone for Veracode—20 years of revolutionizing application security! Our journey has been defined by innovation, collaboration, and the trust of incredible partners like you.

     

    To celebrate, we’re hosting a special anniversary event in London next week, and we would be thrilled if you could join us. This is our way of saying thank you and bringing our community together to reflect on our shared achievements and look ahead to the future of secure software development.

     

    Expect plenty of wine, beer and food, an inspiring keynote from our CEO, engaging discussions on the evolving landscape of application security, and an opportunity to connect with industry leaders, peers, and the Veracode team.

     

    If you are interested in attending please reach out to Jordan Pelling @ Jpelling@veracode.com - invitations are extended on a first come first serve basis as we have limited capacity.

     

    Let’s toast to two decades of progress and the exciting road ahead. I look forward to celebrating with you!

    Expand Post
    • 23 views

  8. Mike M (Veracode TPM) (Community Member) asked a question.

    May 21, 2026 at 10:07 PM
    📣 Static Analysis Product Updates - Upcoming changes for the May Release

    Next week's May Static Analysis Release includes the following:

     

    Updated language and framework support

     

    .NET

    • Updated the .NET third-party dependency database with the latest NuGet package data.
    • Improved detection of third-party library: PdfPig.

    Android

    • Improved detection of third-party libraries: Dynatrace, Apptentive, and Onfido.

    Apple Platforms

    • Added support for the CloudKit framework.
    • Added support for Security APIs.
    • Improved detection of third-party libraries.

    COBOL

    • Enhanced COBOL scan logging to improve visibility during analysis.

    Java

    • Enhanced support for JDK 25 (LTS).
    • Improved Java source code scanning support of JSP files.
    • Improved detection of third-party library: Snowflake JDBC Driver.

    Python

    • Improved scan detection for the anticrlf cleanser function.

    Other languages

    • Improves detection of CWE-259 and CWE-798 flaws across all languages to reduce false positives.

     

     

     

    Expand Post
    • 24 views

End of Feed
8 Chatter Feed Items

Group Details

Details

Description
This group is for announcements and discussions of recent and upcoming Veracode release.
Show More
Information
  • Join the group and customize your notifications to receive daily or weekly digest emails.  
  • For all technical functionality and how-to questions please post to product Q&A forums.   
  • For product feedback, new feature requests, please post to Ideas. 
Show More
Owner
Tim J (Veracode PM)