# Veracode Risk Manager: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 21 judge labels across 1 category by 10 of 14 models. Page: https://www.gane.ai/index/it/vendors/veracode-risk-manager

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Application security posture management](https://www.gane.ai/index/it/developer/application-security-posture-management/index.md) | 2% | 16 | 38% | 21 |

## What the models said for it

- "I'd generally recommend Arnica or Veracode Risk Manager as the first places to look" (GPT-5.4 mini, ASPM)
- "Provides full lifecycle application security with strong policy compliance and enterprise integration features." (Mistral Small, ASPM)
- "Listed as a leader in the IDC MarketScape 2025, Veracode represents the "legacy" strength of ASPM." (Qwen 3.7 Flash, ASPM)
- "If you want enterprise AppSec governance tied to a testing platform: Veracode." (GPT-5.4 mini, ASPM)

## And against it

- "High criticism (up to 80%). Often seen as legacy-heavy" (Grok 4.20, ASPM)
- "While a market leader, it frequently appears in critical reviews for its user interface. Users often describe it as "overly clicky," confusing" (Qwen 3.7 Flash, ASPM)
- "considered "criticized challengers" include Apiiro, Veracode Risk Manager, ArmorCode, Checkmarx One, Legit Security, and Cycode ASPM" (Llama 4 Maverick, ASPM)
- "the traditional "Enterprise ASPM" giants (like Veracode, Micro Focus/HPE, or Checkmarx) are usually too expensive" (Qwen 3.7 Flash, ASPM)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 2 | 0 | 2 |
| GPT-5.4 mini | 1 | 1 | 0 | 0 | 2 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 1 | 1 | 2 | 4 |
| Mistral Small | 0 | 1 | 0 | 1 | 2 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 1 | 1 | 2 |
| Qwen 3.7 Flash | 0 | 1 | 1 | 2 | 4 |
| Kimi K2 | 0 | 0 | 0 | 1 | 1 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 1 | 0 | 1 | 2 |
| GPT-6 Luna | 0 | 0 | 1 | 0 | 1 |
| Muse Glimmer 30B | 0 | 0 | 1 | 0 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named Veracode Risk Manager, from 45 of the 47 answers that named it (only the models that return a source list).

### Domains cited

- csoonline.com: 27
- g2.com: 23
- checkmarx.com: 22
- cycode.com: 18
- gane.ai/index: 17
- peerspot.com: 14
- safeguard.sh: 14
- ox.security: 11
- start.paloaltonetworks.com: 11
- veracode.com: 10 (its own site)

### Pages cited

- https://csoonline.com/article/4041891/aspm-buyers-guide-seven-products-to-help-secure-your-applications.html: 27
- https://checkmarx.com/learn/aspm/best-aspm-tools-5-platforms-to-watch-in-2026: 13
- https://www.gane.ai/index/it/developer/application-security-posture-management/smb: 13
- https://start.paloaltonetworks.com/rs/531-OCS-018/images/aspm-buyers-guide.pdf: 11
- https://g2.com/categories/application-security-posture-management-aspm/small-business: 9
- https://startupstash.com/top-tools-application-security-posture-management: 9
- https://g2.com/categories/application-security-posture-management-aspm/enterprise: 8
- https://safeguard.sh/resources/blog/do-small-teams-need-aspm-a-decision-guide: 8

## In its own words

What Veracode Risk Manager's own pages state, read 2026-10-05. Stated by the vendor, not checked by the index.

- Positioning: Our ASPM solution (https://www.veracode.com/risk-manager)
- Integrations claimed: 50 (https://www.veracode.com/risk-manager)
- Customers named: Manhattan Associates, HDI Global SE, Cox Automotive

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.