# Veracode Application Security Platform, ZAP by Checkmarx vs Snyk Comparison | | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Star Rating** | 3.8 out of 5 | 4.7 out of 5 | 4.5 out of 5 | | **Total Reviews** | 25 | 14 | 132 | | **Largest Market Segment** | Enterprise (52.2% of reviews) | Small-Business (76.9% of reviews) | Mid-Market (45.4% of reviews) | | **Entry Level Price** | No pricing available | Free | Free | --- ## Top Pros & Cons ### Veracode Application Security Platform Pros: - Security (5 reviews) - Vulnerability Detection (5 reviews) Cons: - Expensive (2 reviews) - Lack of Information (2 reviews) ### ZAP by Checkmarx Pros: - Ease of Use (6 reviews) - Automation (5 reviews) Cons: - False Positives (3 reviews) - Poor Documentation (2 reviews) ### Snyk Pros: - Easy Integrations (5 reviews) - Vulnerability Detection (5 reviews) Cons: - Expensive (3 reviews) - False Positives (3 reviews) --- ## Ratings Comparison | Rating | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Meets Requirements** | 8.1 (19 reviews) | 9.6 (12 reviews) | 8.7 (94 reviews) | | **Ease of Use** | 7.3 (19 reviews) | 9.0 (12 reviews) | 8.8 (95 reviews) | | **Ease of Setup** | 5.7 (7 reviews) | Not enough data | 9.1 (58 reviews) | | **Ease of Admin** | 7.4 (7 reviews) | Not enough data | 8.9 (51 reviews) | | **Quality of Support** | 8.0 (18 reviews) | 8.1 (12 reviews) | 8.7 (79 reviews) | | **Has the product been a good partner in doing business?** | 7.9 (7 reviews) | Not enough data | 8.8 (48 reviews) | | **Product Direction (% positive)** | 6.3 (19 reviews) | 10.0 (11 reviews) | 8.8 (84 reviews) | --- ## Pricing ### Veracode Application Security Platform #### Entry-Level Pricing No pricing available #### Free Trial No information available ### ZAP by Checkmarx #### Entry-Level Pricing Plan: Open source Price: Free Key Features: - Everything [Learn more about ZAP by Checkmarx](https://www.g2.com/products/zap-by-checkmarx/reviews) #### Free Trial Yes ### Snyk #### Entry-Level Pricing Plan: FREE - Limited Tests, Unlimited Developers Price: Free Description: For individual developers and small teams looking to secure while they build. Unlimited Developers. Key Features: - 200 Open Source tests per month - 100 Container tests per month - 300 IaC tests per month [Browse all 3 editions](https://www.g2.com/products/snyk/pricing) #### Free Trial No --- ## Features Comparison By Category ### Penetration Testing | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | 8.4/10 | 13 | | **Snyk** | N/A | N/A | #### Administration | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **API / Integrations** | Not enough data | 8.3 (12 reviews) | Not enough data | | **Extensibility** | Not enough data | 8.8 (12 reviews) | Not enough data | | **Reporting and Analytics** | Not enough data | 8.8 (12 reviews) | Not enough data | #### Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Issue Tracking** | Not enough data | 8.1 (12 reviews) | Not enough data | | **Reconnaissance** | Not enough data | 8.2 (12 reviews) | Not enough data | | **Vulnerability Scan** | Not enough data | 9.4 (12 reviews) | Not enough data | #### Testing | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Command-Line Tools** | Not enough data | 7.6 (12 reviews) | Not enough data | | **Manual Testing** | Not enough data | 7.5 (12 reviews) | Not enough data | | **Test Automation** | Not enough data | 8.6 (12 reviews) | Not enough data | | **Performance and Reliability** | Not enough data | 8.9 (12 reviews) | Not enough data | ### Static Application Security Testing (SAST) | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | 7.8/10 | 25 | #### Administration | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **API / Integrations** | Not enough data | Not enough data | 8.6 (22 reviews) | | **Extensibility** | Not enough data | Not enough data | 8.1 (18 reviews) | #### Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Reporting and Analytics** | Not enough data | Not enough data | 8.5 (23 reviews) | | **Issue Tracking** | Not enough data | Not enough data | 8.3 (22 reviews) | | **Static Code Analysis** | Not enough data | Not enough data | 8.7 (24 reviews) | | **Code Analysis** | Not enough data | Not enough data | 8.9 (21 reviews) | #### Testing | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Command-Line Tools** | Not enough data | Not enough data | 7.8 (18 reviews) | | **Manual Testing** | Not enough data | Not enough data | 6.5 (14 reviews) | | **Test Automation** | Not enough data | Not enough data | 7.8 (19 reviews) | | **Compliance Testing** | Not enough data | Not enough data | 8.1 (15 reviews) | | **Black-Box Scanning** | Not enough data | Not enough data | 6.2 (13 reviews) | | **Detection Rate** | Not enough data | Not enough data | 7.5 (19 reviews) | | **False Positives** | Not enough data | Not enough data | 6.4 (17 reviews) | #### Agentic AI - Static Application Security Testing (SAST) | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | ### Dynamic Application Security Testing (DAST) | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | 8.5/10 | 7 | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | N/A | N/A | #### Administration | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **API / Integrations** | 7.9 (7 reviews) | Not enough data | Not enough data | | **Extensibility** | 9.2 (6 reviews) | Not enough data | Not enough data | #### Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Reporting and Analytics** | 8.3 (7 reviews) | Not enough data | Not enough data | | **Issue Tracking** | 8.3 (5 reviews) | Not enough data | Not enough data | | **Static Code Analysis** | 9.3 (7 reviews) | Not enough data | Not enough data | | **Vulnerability Scan** | 8.8 (7 reviews) | Not enough data | Not enough data | | **Code Analysis** | 8.6 (6 reviews) | Not enough data | Not enough data | #### Testing | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Manual Testing** | Not enough data | Not enough data | Not enough data | | **Test Automation** | 9.0 (5 reviews) | Not enough data | Not enough data | | **Compliance Testing** | Not enough data | Not enough data | Not enough data | | **Black-Box Scanning** | 8.3 (5 reviews) | Not enough data | Not enough data | | **Detection Rate** | 8.0 (5 reviews) | Not enough data | Not enough data | | **False Positives** | 7.8 (6 reviews) | Not enough data | Not enough data | ### Container Security | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | 7.5/10 | 32 | #### Administration | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Risk Scoring** | Not enough data | Not enough data | 8.4 (29 reviews) | | **Secrets Management** | Not enough data | Not enough data | Feature Not Available | | **Security Auditing** | Not enough data | Not enough data | 7.9 (26 reviews) | | **Configuration Management** | Not enough data | Not enough data | 7.5 (19 reviews) | #### Monitoring | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Continuous Image Assurance** | Not enough data | Not enough data | 8.0 (17 reviews) | | **Behavior Monitoring** | Not enough data | Not enough data | 6.5 (13 reviews) | | **Observability** | Not enough data | Not enough data | 7.1 (15 reviews) | #### Protection | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Dynamic Image Scanning** | Not enough data | Not enough data | 7.4 (16 reviews) | | **Runtime Protection** | Not enough data | Not enough data | 7.5 (17 reviews) | | **Workload Protection** | Not enough data | Not enough data | 7.4 (14 reviews) | | **Network Segmentation** | Not enough data | Not enough data | 6.9 (12 reviews) | ### Vulnerability Scanner | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | 8.1/10 | 43 | #### Performance | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Issue Tracking** | Not enough data | Not enough data | 8.5 (36 reviews) | | **Detection Rate** | Not enough data | Not enough data | 8.5 (40 reviews) | | **False Positives** | Not enough data | Not enough data | 6.7 (32 reviews) | | **Automated Scans** | Not enough data | Not enough data | 9.1 (41 reviews) | #### Network | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Compliance Testing** | Not enough data | Not enough data | 8.1 (25 reviews) | | **Perimeter Scanning** | Not enough data | Not enough data | 7.9 (19 reviews) | | **Configuration Monitoring** | Not enough data | Not enough data | 8.2 (20 reviews) | #### Application | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Manual Application Testing** | Not enough data | Not enough data | 7.8 (17 reviews) | | **Static Code Analysis** | Not enough data | Not enough data | 8.5 (34 reviews) | | **Black Box Testing** | Not enough data | Not enough data | 7.4 (13 reviews) | #### Agentic AI - Vulnerability Scanner | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Not enough data | ### Software Composition Analysis | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | 8.4/10 | 37 | #### Functionality - Software Composition Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Language Support** | Not enough data | Not enough data | 8.1 (24 reviews) | | **Integration** | Not enough data | Not enough data | 8.7 (30 reviews) | | **Transparency** | Not enough data | Not enough data | 8.3 (31 reviews) | #### Effectiveness - Software Composition Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Remediation Suggestions** | Not enough data | Not enough data | 8.3 (32 reviews) | | **Continuous Monitoring** | Not enough data | Not enough data | 8.7 (30 reviews) | | **Thorough Detection** | Not enough data | Not enough data | 8.2 (32 reviews) | ### Secure Code Review | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | N/A | N/A | #### Documentation | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Feedback** | Not enough data | Not enough data | Not enough data | | **Prioritization** | Not enough data | Not enough data | Not enough data | | **Remediation Suggestions** | Not enough data | Not enough data | Not enough data | #### Security | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **False Positives** | Not enough data | Not enough data | Not enough data | | **Custom Compliance** | Not enough data | Not enough data | Not enough data | | **Agility** | Not enough data | Not enough data | Not enough data | ### Software Supply Chain Security Tools | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | N/A | N/A | #### Security | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Tampering** | Not enough data | Not enough data | Not enough data | | **Malicious Code** | Not enough data | Not enough data | Not enough data | | **Verification** | Not enough data | Not enough data | Not enough data | | **Security Risks** | Not enough data | Not enough data | Not enough data | #### Tracking | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Bill of Materials** | Not enough data | Not enough data | Not enough data | | **Audit Trails** | Not enough data | Not enough data | Not enough data | | **Monitoring** | Not enough data | Not enough data | Not enough data | ### Software Bill of Materials (SBOM) | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | N/A | N/A | #### Functionality - Software Bill of Materials (SBOM) | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Format Support** | Not enough data | Not enough data | Not enough data | | **Annotations** | Not enough data | Not enough data | Not enough data | | **Attestation** | Not enough data | Not enough data | Not enough data | #### Management - Software Bill of Materials (SBOM) | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Monitoring** | Not enough data | Not enough data | Not enough data | | **Dashboards** | Not enough data | Not enough data | Not enough data | | **User Provisioning** | Not enough data | Not enough data | Not enough data | ### Static Code Analysis | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | N/A | N/A | #### Agentic AI - Static Code Analysis | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Adaptive Learning** | Not enough data | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | Not enough data | ### AI AppSec Assistants | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | N/A | N/A | #### Performance - AI AppSec Assistants | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Remediation** | Not enough data | Not enough data | Not enough data | | **Real-time Vulnerability Detection** | Not enough data | Not enough data | Not enough data | | **Accuracy** | Not enough data | Not enough data | Not enough data | #### Integration - AI AppSec Assistants | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Stack Integration** | Not enough data | Not enough data | Not enough data | | **Workflow Integration** | Not enough data | Not enough data | Not enough data | | **Codebase Contextual Awareness** | Not enough data | Not enough data | Not enough data | ### Interactive Application Security Testing (IAST) | Product | Score | Reviews | |---|---|---| | **Veracode Application Security Platform** | N/A | N/A | | **ZAP by Checkmarx** | N/A | N/A | | **Snyk** | N/A | N/A | #### Agentic AI - Interactive Application Security Testing (IAST) | Feature | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | --- ## Categories **Unique to Veracode Application Security Platform (11):** [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Interactive Application Security Testing (IAST) Software](https://www.g2.com/categories/interactive-application-security-testing-iast), [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom), [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools) **Unique to ZAP by Checkmarx (2):** [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools), [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast) **Unique to Snyk (7):** [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools), [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [Container Security Tools](https://www.g2.com/categories/container-security-tools), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner), [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom) --- ## Reviewer Demographics ### By Company Size | Segment | Veracode Application Security Platform | ZAP by Checkmarx | Snyk | |---|---|---|---| | **Small-Business** | 17.4% | 76.9% | 35.4% | | **Mid-Market** | 30.4% | 7.7% | 45.4% | | **Enterprise** | 52.2% | 15.4% | 19.2% | ### By Industry #### Veracode Application Security Platform - **Information Technology and Services:** 30.4% - **Hospital & Health Care:** 13.0% - **Consumer Goods:** 8.7% - **Computer Software:** 8.7% - **Telecommunications:** 4.3% - **Retail:** 4.3% - **Research:** 4.3% - **Media Production:** 4.3% - **Logistics and Supply Chain:** 4.3% - **Insurance:** 4.3% - **Other:** 13.0% #### ZAP by Checkmarx - **Computer & Network Security:** 41.7% - **Information Technology and Services:** 25.0% - **Computer Software:** 16.7% - **Internet:** 8.3% - **Hospital & Health Care:** 8.3% #### Snyk - **Computer Software:** 22.3% - **Information Technology and Services:** 20.8% - **Computer & Network Security:** 9.2% - **Hospital & Health Care:** 5.4% - **Financial Services:** 5.4% - **Telecommunications:** 3.1% - **Banking:** 3.1% - **Education Management:** 2.3% - **Internet:** 2.3% - **Retail:** 1.5% - **Other:** 24.6% --- ## Alternatives ### Alternatives to Veracode Application Security Platform - [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (141 reviews) - [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews) - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (38 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2354 reviews) - [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) — 4.6/5 stars (69 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (892 reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (301 reviews) - [HCL AppScan](https://www.g2.com/products/hcl-appscan/reviews) — 4.1/5 stars (76 reviews) - [Burp Suite](https://www.g2.com/products/burp-suite/reviews) — 4.8/5 stars (129 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (794 reviews) ### Alternatives to ZAP by Checkmarx - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (892 reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (301 reviews) - [Acunetix by Invicti](https://www.g2.com/products/acunetix-by-invicti/reviews) — 4.1/5 stars (105 reviews) - [Intruder](https://www.g2.com/products/intruder/reviews) — 4.8/5 stars (206 reviews) - [Burp Suite](https://www.g2.com/products/burp-suite/reviews) — 4.8/5 stars (129 reviews) - [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) — 4.6/5 stars (69 reviews) - [vPenTest](https://www.g2.com/products/vpentest/reviews) — 4.6/5 stars (235 reviews) - [Astra Pentest](https://www.g2.com/products/astra-pentest/reviews) — 4.6/5 stars (186 reviews) - [Metasploit](https://www.g2.com/products/metasploit/reviews) — 4.6/5 stars (55 reviews) - [Cobalt](https://www.g2.com/products/cobalt-io-cobalt/reviews) — 4.5/5 stars (177 reviews) ### Alternatives to Snyk - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) — 4.6/5 stars (141 reviews) - [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (794 reviews) - [SonarQube](https://www.g2.com/products/sonarqube/reviews) — 4.4/5 stars (141 reviews) - [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (892 reviews) - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2354 reviews) - [SOOS](https://www.g2.com/products/soos/reviews) — 4.6/5 stars (42 reviews) - [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews) — 4.4/5 stars (386 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (310 reviews) --- ## Top Discussions ### Veracode Application Security Platform No discussions available for this product. ### ZAP by Checkmarx No discussions available for this product. ### Snyk - Title: [What is Snyk scanning?](https://www.g2.com/discussions/what-is-snyk-scanning) — 2 comments, 2 upvotes > **Top comment:** "Codebase and open source libraries" - Title: [Is Snyk a SaaS?](https://www.g2.com/discussions/is-snyk-a-saas) — 2 comments > **Top comment:** "No" - Title: [How good is Snyk?](https://www.g2.com/discussions/how-good-is-snyk) — 2 comments > **Top comment:** "very. it's basically like dependabot, but more fleshed out" --- **Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/veracode-application-security-platform-vs-zap-by-checkmarx-vs-snyk)