# CAST Highlight vs Veracode Application Security Platform Comparison

| | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Star Rating** | 4.5 out of 5 | 3.8 out of 5 | 
| **Total Reviews** | 90 | 25 | 
| **Largest Market Segment** | Enterprise (59.3% of reviews) | Enterprise (52.2% of reviews) | 
| **Entry Level Price** | Starting at $44,000.00 Per Year | No pricing available | 

---
## Top Pros & Cons

### CAST Highlight

Pros:
- Ease of Use (8 reviews)
- Easy Setup (4 reviews)

Cons:
- Complex Navigation (1 reviews)
- Dashboard Issues (1 reviews)

### Veracode Application Security Platform

Pros:
- Security (2 reviews)
- Vulnerability Detection (2 reviews)

Cons:
- Expensive (1 reviews)
- Licensing Issues (1 reviews)

---
## Ratings Comparison
| Rating | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
  | **Meets Requirements** | 8.8 (61 reviews) | 8.1 (19 reviews) | 
  | **Ease of Use** | 8.7 (63 reviews) | 7.3 (19 reviews) | 
  | **Ease of Setup** | 9.0 (52 reviews) | 5.7 (7 reviews) | 
  | **Ease of Admin** | 8.8 (48 reviews) | 7.4 (7 reviews) | 
  | **Quality of Support** | 9.1 (58 reviews) | 8.0 (18 reviews) | 
  | **Has the product been a good partner in doing business?** | 9.2 (47 reviews) | 7.9 (7 reviews) | 
  | **Product Direction (% positive)** | 9.2 (58 reviews) | 6.3 (19 reviews) | 

---
## Pricing

### CAST Highlight

#### Entry-Level Pricing

Plan: Complete Edition

Price: Starting at $44,000.00 Per Year

Description: Annual SaaS subscription that includes ALL insights priced based on the size of the application portfolio (max # of apps).

Key Features:
- Application Portfolio Core Insights
- Cloud Insights
- SCA Insights

[Browse all 4 editions](https://www.g2.com/products/cast-highlight/pricing)

#### Free Trial

Yes

### Veracode Application Security Platform

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

---
## Features Comparison By Category

### Penetration Testing

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Administration

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **API / Integrations** | Not enough data | Not enough data | 
| **Extensibility** | Not enough data | Not enough data | 
| **Reporting and Analytics** | Not enough data | Not enough data | 

#### Analysis

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Issue Tracking** | Not enough data | Not enough data | 
| **Reconnaissance** | Not enough data | Not enough data | 
| **Vulnerability Scan** | Not enough data | Not enough data | 

#### Testing

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Command-Line Tools** | Not enough data | Not enough data | 
| **Manual Testing** | Not enough data | Not enough data | 
| **Test Automation** | Not enough data | Not enough data | 
| **Performance and Reliability** | Not enough data | Not enough data | 

### Static Application Security Testing (SAST)

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Administration

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **API / Integrations** | Not enough data | Not enough data | 
| **Extensibility** | Not enough data | Not enough data | 

#### Analysis

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Reporting and Analytics** | Not enough data | Not enough data | 
| **Issue Tracking** | Not enough data | Not enough data | 
| **Static Code Analysis** | Not enough data | Not enough data | 
| **Code Analysis** | Not enough data | Not enough data | 

#### Testing

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Command-Line Tools** | Not enough data | Not enough data | 
| **Manual Testing** | Not enough data | Not enough data | 
| **Test Automation** | Not enough data | Not enough data | 
| **Compliance Testing** | Not enough data | Not enough data | 
| **Black-Box Scanning** | Not enough data | Not enough data | 
| **Detection Rate** | Not enough data | Not enough data | 
| **False Positives** | Not enough data | Not enough data | 

#### Agentic AI - Static Application Security Testing (SAST)

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 

### Dynamic Application Security Testing (DAST)

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | 8.5/10 | 7 |

#### Administration

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **API / Integrations** | Not enough data | 7.9 (7 reviews) | 
| **Extensibility** | Not enough data | 9.2 (6 reviews) | 

#### Analysis

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Reporting and Analytics** | Not enough data | 8.3 (7 reviews) | 
| **Issue Tracking** | Not enough data | 8.3 (5 reviews) | 
| **Static Code Analysis** | Not enough data | 9.3 (7 reviews) | 
| **Vulnerability Scan** | Not enough data | 8.8 (7 reviews) | 
| **Code Analysis** | Not enough data | 8.6 (6 reviews) | 

#### Testing

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Manual Testing** | Not enough data | Not enough data | 
| **Test Automation** | Not enough data | 9.0 (5 reviews) | 
| **Compliance Testing** | Not enough data | Not enough data | 
| **Black-Box Scanning** | Not enough data | 8.3 (5 reviews) | 
| **Detection Rate** | Not enough data | 8.0 (5 reviews) | 
| **False Positives** | Not enough data | 7.8 (6 reviews) | 

### Vulnerability Scanner

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Performance

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Issue Tracking** | Not enough data | Not enough data | 
| **Detection Rate** | Not enough data | Not enough data | 
| **False Positives** | Not enough data | Not enough data | 
| **Automated Scans** | Not enough data | Not enough data | 

#### Network

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Compliance Testing** | Not enough data | Not enough data | 
| **Perimeter Scanning** | Not enough data | Not enough data | 
| **Configuration Monitoring** | Not enough data | Not enough data | 

#### Application

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Manual Application Testing** | Not enough data | Not enough data | 
| **Static Code Analysis** | Not enough data | Not enough data | 
| **Black Box Testing** | Not enough data | Not enough data | 

#### Agentic AI - Vulnerability Scanner

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 

### Software Composition Analysis

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | 8.6/10 | 29 |
| **Veracode Application Security Platform** | N/A | N/A |

#### Functionality - Software Composition Analysis 

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Language Support** | 8.5 (28 reviews) | Not enough data | 
| **Integration** | 8.4 (26 reviews) | Not enough data | 
| **Transparency** | 8.8 (28 reviews) | Not enough data | 

#### Effectiveness - Software Composition Analysis

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Remediation Suggestions** | 8.8 (26 reviews) | Not enough data | 
| **Continuous Monitoring** | 8.5 (24 reviews) | Not enough data | 
| **Thorough Detection** | 8.6 (27 reviews) | Not enough data | 

### Cloud Migration Assessment Tools

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | 8.1/10 | 40 |
| **Veracode Application Security Platform** | N/A | N/A |

#### Assessment 

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **IT Infrastructure** | 8.0 (32 reviews) | Not enough data | 
| **Cost Benefit** | 7.9 (32 reviews) | Not enough data | 
| **Applications** | 8.5 (36 reviews) | Not enough data | 

### Secure Code Review

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Documentation

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Feedback** | Not enough data | Not enough data | 
| **Prioritization** | Not enough data | Not enough data | 
| **Remediation Suggestions** | Not enough data | Not enough data | 

#### Security

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **False Positives** | Not enough data | Not enough data | 
| **Custom Compliance** | Not enough data | Not enough data | 
| **Agility** | Not enough data | Not enough data | 

### Software Bill of Materials (SBOM)

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Functionality - Software Bill of Materials (SBOM)

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Format Support** | Not enough data | Not enough data | 
| **Annotations** | Not enough data | Not enough data | 
| **Attestation** | Not enough data | Not enough data | 

#### Management - Software Bill of Materials (SBOM)

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Monitoring** | Not enough data | Not enough data | 
| **Dashboards** | Not enough data | Not enough data | 
| **User Provisioning** | Not enough data | Not enough data | 

### Software Intelligence Platforms

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | 9.2/10 | 7 |
| **Veracode Application Security Platform** | N/A | N/A |

#### Analytics - Software Intelligence Platforms

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Visualization** | 9.8 (7 reviews) | Not enough data | 
| **Technical Debt Identification** | 9.8 (7 reviews) | Not enough data | 
| **Codebase Health Metrics** | 9.0 (7 reviews) | Not enough data | 
| **Actionable Insights** | 9.5 (7 reviews) | Not enough data | 

#### Usability - Software Intelligence Platforms

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Querying** | 8.8 (7 reviews) | Not enough data | 
| **Integrations** | 8.3 (7 reviews) | Not enough data | 
| **UI** | 9.5 (7 reviews) | Not enough data | 

### Strategic Portfolio Management

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Strategic Planning - Strategic Portfolio Management

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Objectives** | Not enough data | Not enough data | 
| **Roadmaps** | Not enough data | Not enough data | 
| **Demand management** | Not enough data | Not enough data | 
| **Resource Planning** | Not enough data | Not enough data | 
| **Planning** | Not enough data | Not enough data | 
| **Simulation** | Not enough data | Not enough data | 
| **Prioritization** | Not enough data | Not enough data | 
| **Alignment** | Not enough data | Not enough data | 

#### Strategic Management - Strategic Portfolio Management

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Visiblity** | Not enough data | Not enough data | 
| **Tracking** | Not enough data | Not enough data | 
| **Risk Management** | Not enough data | Not enough data | 
| **Implementation** | Not enough data | Not enough data | 
| **Change Management** | Not enough data | Not enough data | 
| **Optimization** | Not enough data | Not enough data | 
| **Strategy Model** | Not enough data | Not enough data | 
| **Frameworks** | Not enough data | Not enough data | 

#### Data Analysis - Strategic Portfolio Management

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **ESG Impact** | Not enough data | Not enough data | 
| **Financial Performance** | Not enough data | Not enough data | 
| **Forecasting** | Not enough data | Not enough data | 

#### Artificial Intelligence - Strategic Portfolio Management

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Process Intelligence** | Not enough data | Not enough data | 
| **Predictive Insights** | Not enough data | Not enough data | 
| **Virtual Agents** | Not enough data | Not enough data | 

### Static Code Analysis

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Agentic AI - Static Code Analysis

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Adaptive Learning** | Not enough data | Not enough data | 
| **Natural Language Interaction** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 

### Application Portfolio Management

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Agentic AI - Application Portfolio Management

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | 
| **Cross-system Integration** | Not enough data | Not enough data | 
| **Adaptive Learning** | Not enough data | Not enough data | 
| **Natural Language Interaction** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | 

### AI AppSec Assistants

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Performance - AI AppSec Assistants

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Remediation** | Not enough data | Not enough data | 
| **Real-time Vulnerability Detection** | Not enough data | Not enough data | 
| **Accuracy** | Not enough data | Not enough data | 

#### Integration - AI AppSec Assistants

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Stack Integration** | Not enough data | Not enough data | 
| **Workflow Integration** | Not enough data | Not enough data | 
| **Codebase Contextual Awareness** | Not enough data | Not enough data | 

### Interactive Application Security Testing (IAST)

| Product | Score | Reviews |
|---|---|---|
| **CAST Highlight** | N/A | N/A |
| **Veracode Application Security Platform** | N/A | N/A |

#### Agentic AI - Interactive Application Security Testing (IAST)

| Feature | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 

---
## Categories
**Shared Categories (1):** [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis)

**Unique to CAST Highlight (5):** [Strategic Portfolio Management Software](https://www.g2.com/categories/strategic-portfolio-management), [Application Portfolio Management Software](https://www.g2.com/categories/application-portfolio-management), [Software Intelligence Platforms Software](https://www.g2.com/categories/software-intelligence-platforms), [Cloud Migration Assessment Tools](https://www.g2.com/categories/cloud-migration-assessment-tools), [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom)

**Unique to Veracode Application Security Platform (8):** [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [Interactive Application Security Testing (IAST) Software](https://www.g2.com/categories/interactive-application-security-testing-iast)


---
## Reviewer Demographics

### By Company Size

| Segment | CAST Highlight | Veracode Application Security Platform | 
|---|---|---|
| **Small-Business** | 25.9% | 17.4% | 
| **Mid-Market** | 14.8% | 30.4% | 
| **Enterprise** | 59.3% | 52.2% | 

### By Industry

#### CAST Highlight

- **Information Technology and Services:** 25.9%
- **Computer Software:** 18.5%
- **Financial Services:** 8.6%
- **Consulting:** 4.9%
- **Management Consulting:** 4.9%
- **Telecommunications:** 3.7%
- **Automotive:** 3.7%
- **Banking:** 3.7%
- **Accounting:** 2.5%
- **Electrical/Electronic Manufacturing:** 2.5%
- **Other:** 21.0%

#### Veracode Application Security Platform

- **Information Technology and Services:** 30.4%
- **Hospital &amp; Health Care:** 13.0%
- **Consumer Goods:** 8.7%
- **Computer Software:** 8.7%
- **Telecommunications:** 4.3%
- **Retail:** 4.3%
- **Research:** 4.3%
- **Media Production:** 4.3%
- **Logistics and Supply Chain:** 4.3%
- **Insurance:** 4.3%
- **Other:** 13.0%

---
## Alternatives

### Alternatives to CAST Highlight

- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2346 reviews)
- [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (787 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews)
- [GanttPRO](https://www.g2.com/products/ganttpro-ganttpro/reviews) — 4.8/5 stars (581 reviews)
- [Profit.co](https://www.g2.com/products/profit-co/reviews) — 4.7/5 stars (490 reviews)
- [Oracle Primavera](https://www.g2.com/products/oracle-primavera/reviews) — 4.4/5 stars (385 reviews)
- [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (308 reviews)
- [ServiceNow Strategic Portfolio Management](https://www.g2.com/products/servicenow-strategic-portfolio-management/reviews) — 4.1/5 stars (266 reviews)
- [Cascade](https://www.g2.com/products/cascade-strategy-cascade/reviews) — 4.7/5 stars (247 reviews)
- [IBM Targetprocess](https://www.g2.com/products/ibm-targetprocess/reviews) — 4.3/5 stars (243 reviews)

### Alternatives to Veracode Application Security Platform

- [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (36 reviews)
- [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (141 reviews)
- [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) — 4.6/5 stars (69 reviews)
- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2346 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews)
- [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (132 reviews)
- [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews)
- [HCL AppScan](https://www.g2.com/products/hcl-appscan/reviews) — 4.1/5 stars (76 reviews)
- [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (301 reviews)
- [Burp Suite](https://www.g2.com/products/burp-suite/reviews) — 4.8/5 stars (129 reviews)

---
## Top Discussions

### CAST Highlight

- Title: [What is cast imaging?](https://www.g2.com/discussions/what-is-cast-imaging) — 1 comment
  > **Top comment:** "CAST imaging is a code analysis tool which will provide a google type navigation of the code. help you understand the architecture of the application,..."
- Title: [What is CAST software tool?](https://www.g2.com/discussions/what-is-cast-software-tool) — 1 comment
  > **Top comment:** "CAST Highlight is a code analysis tool wherein it reads the software source code and prepares findings on the health (i.e. Agility, Resiliency and Elegance)..."
- Title: [License cost please ?](https://www.g2.com/discussions/license-cost-please) — 1 comment, 1 upvote
  > **Top comment:** "You can refer to this link to understand the pricing:
https://learn.castsoftware.com/highlight/pricing"
- Title: [What does cast highlight do?](https://www.g2.com/discussions/what-does-cast-highlight-do) — 1 comment
  > **Top comment:** "Portfolio Analysis"

### Veracode Application Security Platform

No discussions available for this product.

---
**Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/cast-highlight-vs-veracode-application-security-platform)

