Veracode Fundamentals: Secure Software Development and DevSecOps

Modern software development moves at a rapid pace, making automated security testing essential to protect applications before they go live. This text-based course introduces you to Veracode, a leading platform for finding and fixing code vulnerabilities early in the software development lifecycle. You will transition from manual security checks to automated application security testing (AppSec). By reading through practical explanations and code-centric scenarios, you will understand how to analyze static code, scan open-source dependencies, and integrate security scans directly into modern development workflows. What you'll learn: - Learn the foundational principles of application security and the OWASP Top 10 vulnerabilities. - Understand how to perform Static Application Security Testing (SAST) to find flaws in your source code. - Apply Software Composition Analysis (SCA) to detect vulnerabilities in third-party libraries and open-source components. - Configure dynamic scanning (DAST) to analyze running applications for runtime vulnerabilities. - Integrate Veracode scans into modern CI/CD pipelines for continuous security feedback and shift-left security. - Interpret scan results and prioritize vulnerability remediation based on severity and exploitability. Starting with essential security terminology and Veracode interface basics, you will progress through running different scan types, reading security reports, and automating security within the development pipeline. This course is designed for software developers, QA engineers, and junior security professionals who are new to application security testing. No prior security experience is required. Start reading today to build secure software from the very first line of code.