{"id":"F1509237360","name":"Veracode Online Security Platform for Government","provider":"Veracode","providerSlug":"veracode","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2022-07-18","serviceModel":["SaaS"],"deployment":"Government Community Cloud","businessFunctions":["Cybersecurity & Risk Management"],"assessor":"Schellman Compliance, LLC","assessorId":"136571","smallBusiness":false,"website":"https://www.veracode.com/","description":"Veracode's unified platform helps Government developers and application security teams assess and improve the security of applications from inception through production. With a combination of automation, process, and speed, Veracode integrates application security into the software lifecycle, effectively eliminating vulnerabilities during the development/deployment chain. This solution is widely used by enterprises to secure web, mobile, legacy, and third-party enterprise applications, with a simpler and more scalable way to help reduce software security risk across software infrastructure. Through its FedRAMP offering, Veracode offers the ability to test all the code for your applications, including code you write yourself (with Static Application Security Testing or SAST), open-source libraries (with Software Composition Analysis or SCA), and web-based applications (with Dynamic Application Security Testing or DAST). We also provide eLearning for training in secure software development practices, helping developers learn to fix security issues and avoid introducing new ones. Veracode's cloud-based model helps scale software security for both small teams and large agencies, without requiring the cost, up front setup, and maintenance of on premise offerings. Additionally, Veracode provides all the security expertise, program planning, education, and remediation guidance that security and development teams need to build a robust application security program.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Veracode%20Logo2.png","inMarketplace":true,"agencies":["22-016-48","22-007-04","22-005-12","22-023","22-020"],"reuseCount":4,"leverages":["F1603047866","F1512167750","FR1913470600","F1508207205","F1607197917","FR1918740338"],"leveragedBy":["FR1831429369","FR1724526654","FR2428168490","FR2225648574","FR2322855016"],"timeline":[{"date":"2021-07-15","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2022-03-06","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2022-07-18","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Schellman Compliance, LLC"},"sponsor":"22-020","trustCenterCheck":null}