--- title: Veracode Connector Guide slug: rbvm-help/veracode-connector-guide createdAt: 2026-10-26T13:51:23.988Z --- **Summary**: How to set up and use the Veracode connector in Ivanti Neurons. ## Veracode Connector Overview The Ivanti Neurons platform provides an API-based connector that integrates with **Veracode** (SAST and DAST) that enables customers to bring their **Veracode** findings into Ivanti Neurons to gain visibility into their overall risk due to vulnerabilities in their applications, thereby enabling a more simplified and efficient way to manage those vulnerabilities. Ivanti Neurons users can configure the connector to pull scan data from **Veracode** on a periodic basis. Data from **Veracode** is ingested as both **Applications** and **Application Findings**. Ivanti Neurons pulls both **DAST** and **SAST findings** from **Veracode**. ### Veracode Overview **Veracode **is cloud-based solution used for scanning both SAST and DAST of the application module. Veracode also provides manual penetration testing of applications. ## Veracode Connector Setup Prerequisites - Connector setup in Ivanti Neurons requires the [user credentials for their cloud platform via this link](https://analysiscenter.veracode.com/). - Perform scans for the desired applications, both SAST and DAST. - The **Veracode** connector pulls these files based on the schedule defined during configuration and processes the data, categorizing them into Applications and Application Findings. - Refer to the [Veracode DAST Data Export Guide](docId:-94vIi_shYA4Z5vDFS95h) for how to perform a sample DAST scan in Veracode. A similar approach can be used for SAST, as well. - **Please note that** when using the guide referenced above, skip the report download and upload to Ivanti Neurons steps. Those steps are required only for manually uploading Veracode files into Ivanti Neurons. ### User Access and Permissions To set up the connector, the user account must have API access to Veracode. To obtain API Credentials from Veracode, Click on **Organization** in the top-right corner. Go to the **API Credentials** page. Click **Generate API Credentials** and copy this information for later use. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/JtvY85r9l4DBOK_NRDSde_veracode-connector-guide.png" alt="Veracode Connector - API Credentials Page" position="flex-start" size="98" width="685" height="226" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide.png" showCaption="false"} ## Creating the Connector in Ivanti Neurons Navigate to the **Automate > Integrations** page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/N6T9UnB5FOanUDKWj7uEe_palo-alto-xpanse-expander.png" alt="Navigation - Automation - Integrations" position="flex-start" size="33" width="229" height="151" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander.png" showCaption="false"} Using the search bar in the upper-right corner of the **Integrations** page, type **Veracode **to find the connector. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/c_1ODl7TG9I0kBagJOl-I_veracode-connector-guide1.png" alt="Veracode Connector - Search for Connector" position="flex-start" size="92" width="643" height="139" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_1.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_1.png" showCaption="false"} Locate the **Veracode **card on the page and click **Configuration**. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/eY56ytkwmNg4LIYHZ5RgY_veracode-connector-guide2.png" alt="Veracode Connector - Configuration Button Location" position="flex-start" size="55" width="384" height="466" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_2.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_2.png" showCaption="false"} Complete the following fields. These fields include: - **Name: **Connector name. - **URL: **Add the Veracode cloud instance URL: [https://analysiscenter.veracode.com/](https://analysiscenter.veracode.com/). - **ID and API Key:** Veracode API credentials retrieved earlier in this guide’s User Access and Permissions section. - **Network:** Network name in Ivanti Neurons. Ingested data will be associated with this network. - **Oldest Scan Data Pull:** Maximum number of days the connector should go back to pull scan results from Veracode. It is a drop-down value that currently supports 30, 60, 90, and 180 days and one-year old data. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/tm53N0-H5-m4rH563liLL_veracode-connector-guide3.png" alt="Veracode Connector - Connector Configuration Window" position="flex-start" size="84" width="586" height="583" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_3.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_3.png" showCaption="false"} Once the fields are complete, click **Test Credentials** to verify the credentials are correct and can connect to the Veracode instance. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/Y0DkKXnzxpdv6luoskRMe_tenable-nessus-tenable-io10.png" alt="Veracode Connector - Test Credentials" position="flex-start" size="28" width="194" height="138" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Tenable Nessus Tenable io_10.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Tenable Nessus Tenable io_10.png" showCaption="false"} Configure the desired schedule for the connector to retrieve results from the Veracode instance and optionally turn on **Enable auto URBA (Update Remediation by Assessment)**. Once connector configuration is complete, click **Save** to create the connector. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/qOrfq4vtgD7pXhzuNI9Wf_veracode-connector-guide4.png" alt="Veracode Connector - Save Connector Button Location" position="flex-start" size="77" width="542" height="489" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_4.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_4.png" showCaption="false"} After creating the connector, it starts pulling data from Veracode. After configuring the connector, a new entry for it appears at the top of the **Integrations** page. The connector’s card shows the next scheduled time and date it will fetch results. Check the connector’s status by clicking the **History** button. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/fcr_3dK6NzttfPFXGDQW7_veracode-connector-guide5.png" alt="Veracode Connector - Connector History" position="flex-start" size="82" width="572" height="170" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_5.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_5.png" showCaption="false"} To run the connector on demand, click the **Sync** icon. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/_EGkQHcLZV6p8kKZi5zM7_veracode-connector-guide6.png" alt="Veracode Connector - Sync Icon" position="flex-start" size="35" width="246" height="286" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_6.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_6.png" showCaption="false"} View files pulled from Veracode on the **Configuration (**:inlineImage[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/nNbQyA_cMpuwaBOoCx9_w_reporting-a-bug.png" alt="Settings Menu - Gear - Small" caption size="10" width="20" height="20"}**) > Uploads** page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/uqrL1B6gAfq24yLgSdGAQ_veracode-connector-guide7.png" alt="Veracode Connector - Uploads Page" position="flex-start" size="98" width="684" height="148" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_7.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_7.png" showCaption="false"} ## Data Visualization in Ivanti Neurons Scan data pulled from Veracode via the connector is available on the **Manage** **> Applications** and **Manage** **> Application Findings** pages. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/gJGcrlpdtelvNKQkM2E4B_veracode-connector-guide8.png" alt="Veracode Connector - Applications and Application Findings Page Locations" position="flex-start" size="60" width="417" height="189" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_8.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_8.png" showCaption="false"} Based on the type of scan performed in Veracode, either SAST or DAST, Ivanti Neurons fingerprints them correspondingly, and their scanner names are **VeracodeSAST/VeracodeDAST,** respectively. Fingerprinting is done at the file level, and applications are created based out of it. Application findings are also individually marked as **VeracodeSAST/VeracodeDAST **scanner types. Assets discovered from the scan data are added to the **Manage** **>** **Applications** page. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/PGjFIbmPVRxrYVaaeKQRP_veracode-connector-guide9.png" alt="Veracode Connector - Applications Page" position="flex-start" size="98" width="687" height="153" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_9.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_9.png" showCaption="false"} The **Manage > Application Findings** page displays all identified vulnerability details, as shown below. ::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/8IATM-bjpfAeqziIP24F9_veracode-connector-guide10.png" alt="Veracode Connector - Application Findings Page" position="flex-start" size="98" width="687" height="149" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_10.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Veracode Connector Guide_10.png" showCaption="false"} ## Veracode Data Mapping in Ivanti Neurons The **Scanner Name** associated with these scans is **VeracodeDAST/VeracodeSAST**, which can be used as a filter on the Applications page in Ivanti Neurons. ### Applications Page The following table provides a high-level mapping of Ivanti Neurons Applications fields to Veracode SAST/DAST fields. | **Ivanti Neurons Field** | **Veracode SAST Field** | **Veracode DAST Field** | | ------------------------ | ----------------------- | ----------------------- | | Name | app\_name | app\_name | | Address | app\_name | app\_name | | Discovered on | first assessment date | first assessment date | | Last Found on | latest assessment date | latest assessment date | | Scanner Name | VeracodeSAST | VeracodeDAST | ### Application Findings Page The following table provides a high-level mapping of Ivanti Neurons Application Findings fields to Veracode SAST/DAST fields. | **Ivanti Neurons Field** | **Veracode SAST Field** | **Veracode DAST Field** | | ------------------------ | -------------------------------------------------------------------- | ----------------------------------------------- | | Title | categoryname | categoryname | | Location | combination of values from
module + sourcefilepath + sourcefile | url | | Description | description | description | | Scanner Plugin | combination of values from
issueid + cweid | combination of values from
issueid + cweid | | Possible Solution | recommendations | recommendations | | Discovered on | date\_first\_occurrence | date\_first\_occurrence | | Last Found on | latest assessment date | latest assessment date | | Finding Type | SAST | DAST |