# Veracode Veracode is an Asset Manager based in Burlington, United States. ## Overview - **Organization type:** Asset Manager - **Headquarters:** Burlington, United States - **Region:** North America - **Address:** 65 Blue Sky Drive, Burlington, MA 01803, United States - **Founded:** 2006 - **Assets under management:** Undisclosed - **Website:** veracode.com - **LinkedIn:** https://www.linkedin.com/company/veracode ## Regulatory record - **Reports private funds:** No ## About Manage application security risks effectively with Veracode's Application Risk Management platform, built for today's AI-driven world. ## Sectors - Cybersecurity - Enterprise Software - AI/ML ## Offices - London, United Kingdom ## People - Brian Roche — Chief Executive Officer - Chris Wysopal — Founder and Chief Security Evangelist - Christien Rioux — Co-Founder - Simon Adell — Chief Financial Officer - Anthony Barkley — Chief Strategy Officer - Karen Buffo — Chief Marketing Officer - Diana Bushard — General Counsel ## Questions ### Who runs investment decisions at Veracode? Veracode is not an investment firm; it is a privately held application-security platform company. Strategic and financial decisions are made by CEO Brian Roche and the executive leadership team, with oversight from its private-equity backers. ### How is Veracode different from standard SAST or DAST scanning tools? Veracode operates a platform rather than a point tool, combining static, dynamic, and software-composition analysis with AI-driven remediation guidance across the full development lifecycle. It also maintains a proprietary vulnerability database built from two decades of scanning data, which it uses to train its detection and fix-recommendation engines. ### What is the significance of the L0pht connection to the company's current strategy? Co-founder Chris Wysopal was a member of L0pht, a hacker collective that testified before Congress in 1998 about software security weaknesses. He continues as Chief Security Evangelist, a role that connects Veracode's commercial platform to the public policy and practitioner community that emerged from that era. ### Does Veracode provide security coverage for AI-generated code? Yes. The firm markets specific capabilities to scan and remediate vulnerabilities in code produced by AI coding assistants, a segment it calls the 'AI-coding era.' This functionality is integrated into the broader application-risk management platform. ### Who owns Veracode now, and how has the ownership structure evolved? Veracode was originally independent, acquired by CA Technologies in 2017 for $614 million, and then spun out as a standalone business backed by Thoma Bravo in 2018. It is currently held by private-equity investors, with Thoma Bravo having sold a majority stake to TA Associates in 2022 (per historical M&A records; not verified in provided firm materials). ### What industries or customer segments does Veracode primarily serve? The firm serves over 2,400 organizations globally, with case studies highlighting insurance (HDI Global SE), healthcare technology (Azalea Health), and cloud services (multi-cloud environments using Veracode Fix). It sells to both security teams and development organizations, with executive governance features targeting C-level buyers. ### How does Veracode source threat intelligence, and is it shared with the community? Veracode derives threat intelligence from its proprietary database, which is built from scanning trillions of lines of customer code. The firm publishes an annual State of Software Security report and periodic research such as its GenAI Code Security Update, which shares aggregated findings with the broader industry. ## Related profiles - [Permasteelisa](https://altss.com/profile/permasteelisa-spa) - [InsurTechNY](https://altss.com/profile/insurtechny) --- Last updated: 2026-06-03T20:00:00.000Z Canonical page: https://altss.com/profile/veracode Maintained by Altss — https://altss.com — methodology: https://altss.com/methodology