Veracode Releases Platform Enhancements as Software Supply Chain Attacks Surge

28.1.2026 13:50:00 CET | Business Wire | Press Release

Veracode, the global leader in application risk management, today announced significant platform innovations introduced through the second half of 2025. Headlining the release is Package Firewall, an industry-leading preventive control for software supply chains, advancing the company’s mission to help organizations run secure software from code to cloud. With supply chain-related third-party breaches doubling year over year— from 15 to 30 percent according to the Verizon 2025 Data Breach Investigations Report— the need to strengthen security across the software ecosystem has never been greater.

“The growing attack surface has created an unprecedented level of complexity for security and development teams,” said Tim Jarrett, Vice President of Product at Veracode. “The latest enhancements to our platform empower organizations to stop third-party risk from ever entering their software code, providing them with a prevention-first approach.”

Package Firewall Enhancement: Preventing Supply Chain Attacks at the Source

Package Firewall, originally launched in June 2025, provides organizations with preventive control over their software supply chains by blocking malicious and risky packages before they enter the development environment. While traditional Software Composition Analysis (SCA) tools identify vulnerabilities in packages that are already in use, Veracode Package Firewall stops threats at the point of ingestion.

The solution now integrates with Azure Artifacts and deploys in seconds with integrations into package managers and repositories, like NPM, PyPI, Maven, Nexus, and Artifactory. It also supports custom policies that enable organizations to enforce security standards while maintaining developer productivity. Organizations can configure policies based on package risk profiles, vulnerability thresholds, and specific security requirements.

Expanded Platform Capabilities and Developer Experience

Veracode continued to expand and enhance its platform capabilities and developer experience throughout the year, with each release improving detection accuracy. Dynamic Application Security Testing (DAST) Essentials gained manual application linking, enabling policy evaluation and consolidated reporting. Software Composition Analysis (SCA) was upgraded with intelligent policies that only fail builds when fixes are available for vulnerable components, reducing developer friction. Static Analysis support was added for cutting-edge frameworks, including .NET Semantic Kernel, Python frameworks like AWS Glue and FastAPI, Java JDK 25 (LTS), and Node.js 22.x.

The platform also saw significant updates to developer integrations for Visual Studio, JetBrains, Azure DevOps, and GitHub, alongside expansions to Veracode Security Labs, with training modules in container security content and the latest OWASP Top 10.

Enterprise-Grade Authentication for Developer Tools

The most recent platform update saw Veracode introduce the advanced enterprise-grade security required by modern organizations. The company added more thorough platform integration and deeper role-based access control to Veracode Risk Manager (VRM), and OAuth-based single sign-on (SSO) authentication across its entire Integrated Development Environment (IDE) plugin portfolio, including Visual Studio Code, Visual Studio, Eclipse, and JetBrains platforms. The integration eliminates Application Programming Interface (API) key management and delivers secure, enterprise-grade authentication with centralized access control.

Jarrett closed, “Our mission is to empower organizations to enhance their security posture, bridge critical skills gaps, and accelerate remediation—all within a unified, integrated platform. By listening closely to our customers, we continuously evolved Veracode’s platform in 2025 to meet their needs, enabling them to drive faster, more secure DevSecOps practices.”

To learn more about Veracode’s products and platform enhancements, visit the website.

About Veracode

Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-assisted remediation engine, the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deployment. Thousands of the world’s leading development and security teams use Veracode every second of every day to get accurate, actionable visibility of exploitable risk, achieve real-time vulnerability remediation, and reduce their security debt at scale. Veracode is a multi-award-winning company offering capabilities to secure the entire software development life cycle, including Veracode Fix, Static Analysis, Dynamic Analysis, Software Composition Analysis, Container Security, Application Security Posture Management, Malicious Package Detection, Package Firewall, and Penetration Testing.

Learn more at www.veracode.com, on the Veracode blog, and on LinkedIn and X.

Copyright © 2025 Veracode, Inc. All rights reserved. Veracode is a registered trademark of Veracode, Inc. in the United States and may be registered in certain other jurisdictions. All other product names, brands, or logos belong to their respective holders. All other trademarks cited herein are property of their respective owners.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260128773416/en/

Contacts

Press and Media Contacts
Katy Gwilliam
Head of Global Communications, Veracode
kgwilliam@veracode.com

Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution.

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

Novotech Strengthens Presence in Japan with Opening of Tokyo Office24.8.2026 01:01:00 CEST | Press Release

Novotech, a leading global biotech CRO and full-service clinical research organization, has strengthened its established presence in Japan with the opening of a new office in Tokyo. The investment builds on Novotech’s existing operations and clinical trial activity in Japan and further enhances its ability to support Japanese biopharma companies as they advance programs regionally and across key international markets. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260823592174/en/ Takeshi Mori, Novotech Country Head, Japan The Tokyo office will serve as a strategic hub for Novotech’s growing operations in Japan, providing enhanced local expertise and strengthening collaboration with clients, partners, research institutions, and innovation ecosystems across the region. Novotech is currently supporting ongoing studies in Japan and provides sponsors with integrated support across early-phase clinical development in Australia, F

FDA Authorizes ZYN ULTRA Nicotine Pouches Following Scientific Review21.8.2026 21:11:00 CEST | Press Release

Philip Morris International Inc. (NYSE: PM) today announces that the U.S. Food and Drug Administration (FDA) issued Marketing Granted Orders to PMI’s U.S. affiliate, Swedish Match USA, Inc., authorizing the marketing of 11 ZYN ULTRA moist oral nicotine pouch products, including all 9mg variants and one 11mg variant. Additional 11mg variants remain under scientific review. Today’s action further enhances PMI’s leadership role in the smoke-free category. “We are delighted with the FDA’s decision to authorize a range of ZYN ULTRA products, which will build on ZYN’s position as America’s leading smoke-free product brand,” said Stacey Kennedy, PMI U.S. CEO. “We look forward to expanding our portfolio of better choices for the 45 million Americans who consume nicotine products.” ZYN ULTRA positions the brand to further extend its category leadership among legal-age consumers of nicotine products. Like the flagship FDA-authorized ZYN pouches, ZYNULTRA, with its higher moisture content, is fre

58% of Consumers Say They Don't Care Whether a Product is a National Brand or Private Label. They Just Buy What They Need21.8.2026 12:00:00 CEST | Press Release

As fast-moving consumer goods (FMCG) prices rose 26% globally between 2021 and 2025, consumers have become more deliberate about where they save and where they spend. NielsenIQ (NYSE: NIQ) has released new findings showing that private label is no longer viewed simply as a lower-cost substitute, but as a credible competitor across value, mainstream, and premium segments. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260819950224/en/ Private label is no longer just a value play. The findings, published in NIQ’s latest report, A Tale of Two Consumers: The Polarized Mindsets Reshaping Global Consumption, created in collaboration with World Data Lab, show how consumer polarization is redefining value and reshaping competition on the shelf. The report also draws on insights from NIQ's 2025reportFinding Harmony on the Shelfwhich documented changing perceptions of private label products. Key findings from these reports include: 58

Cinemo, Dolby, and SmashLabs Bring In-Car Immersive Gaming Experiences to the Next Level21.8.2026 11:18:00 CEST | Press Release

Cinemo, a global leader and one-stop-shop provider for fully integrated, innovative multi-device in-car infotainment solutions, today announced a collaboration with Dolby Laboratories and SmashLabs to bring immersive, music-led gaming into the vehicle cabin creating highly engaging entertainment experiences across a broad range of in-car moments, whether on the move, parked, or while charging. Three technologies come together as SmashLabs’ games are integrated with Cinemo’s standardized In-Car Game APIs, translating in-game events into real-time vehicle responses. Dolby Atmos® adds immersive audio that moves sound around the cabin, allowing passengers to perceive direction and distance as an integral part of the gameplay. The result is a responsive in-car experience that brings gameplay to life through synchronized sound, lighting, haptics and climate control - tailored to each vehicle model. “The car is becoming a space where technology creates moments people genuinely remember, see,

Tanium Reappoints Co-Founder Orion Hindawi as CEO to Drive Next Chapter of Growth20.8.2026 21:10:00 CEST | Press Release

Tanium, a leader in Autonomous IT, today announced that Co-Founder and Executive Chairman Orion Hindawi has been appointed Chief Executive Officer, effective immediately. Dan Streetman is stepping down as CEO and as a member of the Board after leading Tanium for the last three years, during which time Tanium scaled its go-to-market operations and secured strong industry analyst recognition for innovation within the Tanium platform. Streetman will continue to advise Tanium as part of the transition and co-founder David Hindawi will return to the role of Chairman of the Board. With this foundation in place, this transition positions Tanium to deepen its Autonomous IT capabilities and further expand AI offerings across its portfolio and strengthen customer and partner engagement. The Hindawis co-founded Tanium in 2007 to build the central nervous system of enterprise security, giving organizations unified visibility and control over their endpoints. During his prior tenure as CEO from 201

In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.

Visit our pressroom