The October edition of the Veracode Product Pulse Newsletter is live!

October brought broader scanning coverage, more flexible ways to remediate, and sharper risk intelligence across the Veracode platform. Here are a few highlights:

• Static Analysis Engine v2026.10: Adds support for LLM-powered applications built with Spring AI, scans C# source code directly, supports JDK 27, and reduces false positives across multiple languages.
• Faster Fix for SCA in GitHub (Limited Availability): Fix requests now run asynchronously, so your GitHub Actions runners don't sit idle while fixes generate.
• EASM Compliance Intelligence: Risk scoring that accounts for CISA KEV, plus evidence collection to support GDPR, NIS2, and DORA assessments.
• Four Veracode CLI releases: Includes new veracode scan static and veracode findings static commands for scanning and triage inside Git workflows.
• Security Labs: A new lesson completes full coverage of the OWASP Top 10 for LLM Applications.

The newsletter also covers updates to DAST, the SCA agent, and IDE plugins, plus GitHub, GitLab, and Azure workflow integrations.

👉 Read the October Newsletter