I'm a research student. My topic is Web Application Security Scanners. The companies under my study are WhiteHat Security, Cenzic, Veracode, Qualys, IBM Rational Appscan, HP WebInspect, Fortify.
I'm looking for a comparison between Whitehat security and Veracode. Veracode provides both static and dynamic code analysis whereas Whitehat only provides static code analysis. Does it put white hat on back seat?