#Veracode Platform​ 

✅️Single sign-on (SSO) access from the Veracode Platform into the Veracode Community  

Veracode customers can now authenticate into the community through the Veracode Platform. 

✅️Evaluation Timeframe for Security Policies 

You can now include evaluation timeframes in Veracode application security policies to define when findings can impact policy compliance. In your policies, you can: 

• Disallow findings opened after a specific date to ignore technical debt. 
• Disallow findings opened before a specific date to ignore new findings that are out of scope for an audit requirement. 

To accompany this feature, we’ve also published a Policy Best Practices guide. 

✅️Allow Access to New URL for Penetration Testing Services 

Veracode has introduced a new URL for a future feature that will support better reporting of our penetration testing services.  👉If you restrict access to public internet sites for your organization, add pt.analysiscenter.veracode.com to your allowlist. 

⛔Administrators Cannot Assign Applications to Teams 

Administrators in the Veracode Platform can no longer assign applications to teams unless they have another role that grants them permission to edit application profiles. We removed this rarely used functionality to provide a more consistent experience for users. 

⛔End of Browser Support for Legacy Versions of Safari and Android 

Veracode no longer supports these legacy versions of Safari and Android because of their use of weak ciphers (TLS 1.2): 

• Safari 6 on iOS 6.0.1 
• Safari 7 on iOS 7.1 
• Safari 8 on iOS 8.4 
• Safari 7 on OS X 10.9 
• Safari 8 on OS X 10.10 
• Android 5.0.0 
• Android 6.0 

You cannot access analysiscenter.veracode.com using these browsers. 

#Veracode Static Analysis​ 

✅️Improved Support for Android Applications Packaged as Android App Bundles (AAB). 

#Veracode Software Composition Analysis​ 

✅️License Risk Mitigations 

Now available for #SCA Upload Scan​. You can use a new set of mitigation actions relevant to licenses to mitigate license risk findings based on your assessment of the license in use. 

✅️Improved Visibility into #SCA Upload Scan​ 

You can now view the status of initialized, in progress, and failed Software Composition Analysis upload scans in the Veracode Platform. If a scan fails, you can restart the SCA scan without restarting the associated Static Analysis.