Veracode Hits Milestone Of 50B Lines Of Code Scanned

PRESS RELEASE

Burlington, Mass. " December 17, 2009 "Veracode Inc., provider of the world's leading cloud-based application risk management services platform, today announced that it is the first cloud-based security company to reach the 50 billion lines of code scanned milestone. Through its SecurityReview' cloud-based services platform, Veracode has verified thousands of applications and more than 50 billion of lines of code submitted from all origins including internally developed, open source, outsourced, crowd-sourced and third-party software vendors. Additionally, it has announced it is offering a free application assessment for Fortify source code tool customers and those using their recently announced SaaS binary offering. The offer will allow organizations to compare Veracode's cloud-based software security services, which were designed from the ground up for on-demand delivery and allow Fortify customers to benefit from the high accuracy and simple deployment Veracode customers enjoy.

Veracode's SecurityReview' service which includes static, dynamic, enhanced dynamic and eLearning services along with optional manual penetration testing is the industry's most comprehensive testing solution with all results provided through a single, unified platform. Veracode's unique ability to evaluate the final integrated form of the application (in binary or bytecode form) rather than source code allows customer to independently evaluate 3rd party applications and outsourced code for the first time and compare against internally developed applications.

"Given the complexities of the application security problem, we have believed from inception that executives and development teams would require a combination of true binary analysis with a cloud-based delivery model to effectively manage application risk coming from multiple sources. We were excited to see Fortify finally react to customer demands for cloud based application risk management solutions because it confirms the market shift that we and our customers anticipated and puts another stake in the heart of expensive on premises source tools in the long run," said Matt Moynahan, CEO of Veracode. "Now that Fortify has indicated their future is in the cloud, we encourage customers to compare the quality of results with Veracode."

Fortify customers can take advantage of this unique opportunity by contacting Veracode at 781-425-6040 or registering at: http://www.veracode.com/upgrade

About Veracode Veracode provides the world's leading Application Risk Management Services Platform. Veracode SecurityReview's patented and proven cloud-based capabilities allow customers to govern and mitigate software security risk across a single application or an enterprise portfolio with unmatched simplicity. Customers include the world's largest and most security aware organizations in every industry. Recognized as a Gartner "Cool Vendor" and with The Wall Street Journal's "Technology Innovation Award," The Banker's "Information Security Project of the Year" with Barclays, SC Magazine's "Best Vulnerability Assessment Solution," Information Security "Readers' Choice Award," and AlwaysOn Northeast's "Top 100 Private Company," Veracode is Software Security Simplified. For more information, visit www.veracode.com.