Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm a research student. My topic is Web Application Security Scanners. The companies under my study are WhiteHat Security, Cenzic, Veracode, Qualys, IBM Rational Appscan, HP WebInspect, Fortify.

I'm looking for a comparison between Whitehat security and Veracode. Veracode provides both static and dynamic code analysis whereas Whitehat only provides static code analysis. Does it put white hat on back seat?

share|improve this question

closed as off topic by Rory Alsop Sep 26 '12 at 9:03

Questions on Information Security Stack Exchange are expected to relate to Information security within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

Hi Megha, and welcome to the site. Unfortunately questions like this are a bit offtopic, and subjective. You can find out the functionality of each on their websites. Whether they are better for you will depend on you, what you need at that specific time etc. – Rory Alsop Sep 26 '12 at 9:05
I can personally attest to Veracode being awesome. I follow a few of their analysts on Twitter, and my professional interactions with them as a company have been great. Plus they're surprisingly cheap, I guess because their automated tools do most of the work. YMMV, though. – Polynomial Sep 26 '12 at 9:43