# Veracode DAST: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 17 judge labels across 1 category by 9 of 14 models. Page: https://www.gane.ai/index/it/vendors/veracode-dast

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Dynamic application security testing](https://www.gane.ai/index/it/developer/dynamic-application-security-testing/index.md) | 2% | 9 | 24% | 17 |

## What the models said for it

- "The recommended dynamic web application security scanners for a mid-sized B2B company are:

1. Veracode Dynamic Analysis" (Llama 4 Maverick, DAST)
- "Veracode/Checkmarx offer robust authentication handling, DOM-rendering crawlers, and managed false-positive controls." (Gemini 3.5 Flash, DAST)
- "Indusface WAS, Detectify, SOOS DAST, Veracode Dynamic Analysis, Checkmarx DAST" (Grok 4.20, DAST)
- "Need enterprise platform/compliance reporting? Consider Veracode" (GPT-5.4 mini, DAST)

## And against it

- "Avoid pure enterprise tools like full Checkmarx or Veracode unless you have dedicated budget." (Grok 4.20, DAST)
- "Avoid for Mid-Market: Heavy legacy enterprise suites (e.g., Veracode DAST, HCL AppScan)" (Gemini 3.5 Flash, DAST)
- "Enterprise DAST platforms (like Veracode, Rapid7 InsightAppSec, or Fortify) often cost tens of thousands of dollars per year." (Gemini 3.5 Flash, DAST)
- "Enterprise tools (Invicti, Veracode) often start at $30K+ and are priced for 10,000-person companies" (Kimi K2, DAST)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 1 | 0 | 0 | 1 |
| Gemini 3.5 Flash | 0 | 1 | 3 | 2 | 6 |
| Perplexity Sonar | 0 | 0 | 1 | 0 | 1 |
| Grok 4.20 | 0 | 1 | 1 | 1 | 3 |
| Mistral Small | 0 | 0 | 1 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 1 | 0 | 0 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 1 | 0 | 0 | 1 |
| Kimi K2 | 0 | 0 | 1 | 1 | 2 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 1 | 0 | 1 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named Veracode DAST, from 43 of the 51 answers that named it (only the models that return a source list).

### Domains cited

- safeguard.sh: 20
- checkmarx.com: 19
- aimultiple.com: 16
- invicti.com: 15
- softwaretestinghelp.com: 15
- geekflare.com: 12
- augmentcode.com: 10
- g2.com: 10
- aikido.dev: 9
- brightsec.com: 9

### Pages cited

- https://aimultiple.com/dast-tools: 15
- https://softwaretestinghelp.com/dynamic-application-security-testing-dast-software: 15
- https://checkmarx.com/learn/dast/dast-tools-key-features-and-12-solutions-to-know-in-2026: 12
- https://geekflare.com/cybersecurity/best-dast-scanners: 12
- https://safeguard.sh/resources/blog/best-dast-tools-for-web-application-security-testing: 12
- https://augmentcode.com/tools/best-dast-tools-for-enterprise-security: 10
- https://aikido.dev/blog/top-enterprise-dast-tools: 9
- https://expertinsights.com/application-security/the-top-dynamic-application-security-testing-dast-tools: 9

## In its own words

What Veracode DAST's own pages state, read 2026-10-05. Stated by the vendor, not checked by the index.

- Positioning: Dynamic Application Security Testing for Development & Security Teams (https://www.veracode.com/veracode-dynamic-analysis-free-trial)
- For: Development & Security Teams (https://www.veracode.com/veracode-dynamic-analysis-free-trial)
- Free plan or trial: Start Your Free, 14-Day Trial (https://www.veracode.com/veracode-dynamic-analysis-free-trial)

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.