Notifications
Clear all
SAST & Dependency Scanning
1
Posts
1
Users
0
Reactions
3
Views
Topic starter
17/07/2026 12:02 am
Hi everyone! I'm trying to understand the differences between Snyk and Veracode for a large enterprise project.
We're mostly using Java and Node.js apps, and we're starting to adopt containers. I need something that works well with our CI/CD (Jenkins and GitLab) and can handle a complex monorepo setup.
From a beginner's perspective, which one is easier to get started with for dependency scanning and SAST? I'm especially curious about false positives and how they handle Kubernetes deployments. Are there big differences in setup or cost structure? Any guidance would be super helpful! 😅