Off the Bit
Tools: Veracode
Category: Testing and code quality
Site: veracode.com
Veracode
Enterprise application security testing with risk management, common where an external attestation is required.
Bought for the report as much as the scan.
What it is sold for
Managing application risk across a large portfolio.
Same shelf
The rest of testing and code quality, alphabetically. Sharing a category is a filing decision, not a relationship.
- Scans public repositories and reports how much of the code looks machine-generated.
- Amazon's automated review service. The address now serves CodeGuru Profiler, which is about runtime cost rather than review.
- Visual regression testing. Compares rendered screenshots rather than the DOM, so a layout that moves is caught even when the markup did not change.
- Test automation aimed at quality teams rather than at engineers, with tests authored and maintained without code.
- Mock API endpoints created in seconds, generated from a prompt or from captured traffic, across REST, GraphQL and gRPC.
- Records real Java runtime behaviour and turns it into regression tests and review verdicts.
- Continuous profiling for PHP and other runtimes, aimed at finding the slow function rather than the slow request.
- Generates, runs and maintains end-to-end tests automatically, and claims to resolve most of its own failures.
ImranTools[Veracode]