Veracode Enhances Platform to Combat Software Supply Chain Attacks

Veracode introduced key platform innovations in the second half of 2025, notably the Package Firewall, which serves as a preventive control against software supply chain attacks. This enhancement is crucial as supply chain-related breaches have doubled, now accounting for 30 percent of incidents, according to the Verizon 2025 Data Breach Investigations Report.

The Package Firewall, launched in June 2025, prevents malicious and risky packages from entering development environments, a significant advancement over traditional Software Composition Analysis (SCA) tools that only identify vulnerabilities in already used packages. This solution integrates seamlessly with Azure Artifacts and supports various package managers like NPM, PyPI, Maven, Nexus, and Artifactory.

Veracode has also expanded its platform capabilities, enhancing the developer experience with updates to Dynamic Application Security Testing (DAST) Essentials, which now includes manual application linking for better policy evaluation. The Software Composition Analysis (SCA) tool has been upgraded to implement intelligent policies that reduce developer friction by only failing builds when fixes are available for vulnerable components.

Recent updates also introduced enterprise-grade security features, including deeper role-based access control and OAuth-based single sign-on (SSO) authentication across its Integrated Development Environment (IDE) plugins, such as Visual Studio Code and JetBrains. These enhancements aim to streamline security processes while maintaining developer productivity.

Tim Jarrett, VP of Product at Veracode, emphasized the importance of these enhancements in empowering organizations to enhance their security posture and accelerate remediation efforts. By continuously evolving their platform, Veracode aims to meet the growing needs of their customers in a complex security landscape.

Why This Matters for Your Security

The rise in supply chain attacks highlights the urgent need for organizations to adopt preventive measures like Veracode’s Package Firewall. As third-party breaches become more common, companies must ensure that their software supply chains are secure from the outset.

Organizations should consider integrating tools that provide preventive controls rather than reactive measures, as this can significantly reduce the risk of vulnerabilities being exploited. Additionally, implementing role-based access controls and SSO can enhance security without compromising developer efficiency.

By staying informed about the latest security solutions and best practices, organizations can better protect themselves against the evolving threat landscape.